Privacy Policy

Health Stores Ireland Kilmore Cloonfush, Tuam, Co. Galway, H54 FC85, Ireland Email: info@healthstores.ie | Phone: 087 1006721 Last updated: 02/07/2026

1. Introduction

Health Stores Ireland (“we”, “us”, “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website (https://healthstores.ie/), contact us, or interact with our services, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Irish Data Protection Act 2018.

For the purposes of GDPR, Health Stores Ireland is the “data controller” of personal data collected through this website.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at info@healthstores.ie.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Contact form submissions: name, email address, phone number, and any message content you submit through our website contact form.
Correspondence: information you provide when you email or telephone us, including recruitment or membership enquiries, supplier/partner enquiries, and investment opportunity enquiries.
Technical data: IP address, browser type, device information, and website usage data, collected automatically via cookies and similar technologies (see Section 6).
Recruitment-related data: where you submit a CV or apply for a role advertised by a member store, any personal data contained in your application (note: recruitment enquiries for individual stores may be handled directly by that store — see Section 4).
Marketing preferences: if you subscribe to updates, newsletters, or social media channels.

We do not knowingly collect special category data (e.g. health data, in the GDPR sense) through this website. Please do not submit sensitive personal information via our contact form unless necessary.

3. How We Use Your Personal Data

We use your personal data for the following purposes, and on the following legal bases under GDPR:

Purpose	Legal Basis
Responding to enquiries submitted via our contact form	Consent (Article 6(1)(a)) / Legitimate interests (Article 6(1)(f))
Managing recruitment, training, or membership enquiries	Legitimate interests / Steps taken at your request prior to entering a contract (Article 6(1)(b))
Processing investment opportunity enquiries	Legitimate interests / Pre-contractual steps (Article 6(1)(b))
Operating and improving our website (analytics, security)	Legitimate interests (Article 6(1)(f))
Preventing spam and abuse via reCAPTCHA	Legitimate interests (Article 6(1)(f))
Complying with legal obligations	Legal obligation (Article 6(1)(c))

We will only use your personal data for the purpose for which it was collected, unless we reasonably consider we need to use it for another compatible reason.

4. Sharing Your Personal Data

We do not sell your personal data. We may share your personal data with:

Independent member stores: where your enquiry (e.g. recruitment, local store queries) is more appropriately handled by one of our independent member stores, we may forward relevant details to that store. Please note member stores are separate, independently owned businesses and may act as independent data controllers for data they receive.
Service providers: third parties who provide IT hosting, website management, and administrative support on our behalf, under appropriate data processing agreements.
Google reCAPTCHA: our contact form is protected by Google reCAPTCHA to prevent spam and abuse. Use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.
Instagram/Meta: our website displays an embedded Instagram feed, which may involve limited technical data being shared with Meta Platforms. See Meta’s Privacy Policy for details.
Legal and regulatory bodies: where required by law, regulation, or legal process.

We do not knowingly transfer personal data outside the European Economic Area (EEA). Where a third-party service provider (such as Google or Meta) processes data outside the EEA, that transfer is carried out under appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. As a general guide:

Contact form and general enquiries: retained for up to 12 months from the date of last contact, unless a longer retention period is required.
Recruitment-related enquiries: retained for up to 12 months, unless you are engaged by a member store, in which case that store’s own retention policy applies.
Investment opportunity enquiries: retained for as long as reasonably necessary to progress the enquiry, and in line with any applicable legal or regulatory requirements.

After the applicable retention period, personal data is securely deleted or anonymised.

6. Cookies and Similar Technologies

Our website may use cookies and similar tracking technologies to operate effectively, understand website usage, and protect against spam/abuse (e.g. Google reCAPTCHA). This may include:

Strictly necessary cookies: required for the website to function.
Analytics cookies: to help us understand how visitors use the site (if enabled).
Third-party cookies: set by embedded content such as the Instagram feed or reCAPTCHA.

[Note: if a cookie consent banner is not currently in place, one should be added to obtain user consent for non-essential cookies, and a full Cookie Policy listing specific cookies, their duration, and purpose should be published alongside this Privacy Policy, per GDPR/ePrivacy requirements.]

You can control or delete cookies through your browser settings at any time. Please note that disabling cookies may affect the functionality of this website.

7. Your Rights Under GDPR

As a data subject, you have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of your personal data, in certain circumstances.
Right to restrict processing – to request that we limit how we use your data.
Right to data portability – to receive your data in a structured, commonly used format, where technically feasible.
Right to object – to object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent – where processing is based on consent, at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at info@healthstores.ie. We will respond within one month, as required by GDPR.

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC) if you believe your data protection rights have been infringed:

Data Protection Commission 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland Website: www.dataprotection.ie

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure.

9. Children’s Privacy

Our website is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated “Last updated” date.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Health Stores Ireland Kilmore Cloonfush, Tuam, Co. Galway, H54 FC85 Email: info@healthstores.ie | Phone: 087 1006721