Cookie Policy

1. What Are Cookies?

Cookies are small text files that are placed on your computer, smartphone, or other device when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and give website owners useful information about how their site is being used.

Similar technologies include pixels, web beacons, and local storage. Throughout this policy, we use the term "cookies" to refer to all these technologies.

This policy covers both our public website (getyourgp.ie) and the signed-in patient portal (app.getyourgp.ie).

2. How We Use Cookies

GetYourGP uses cookies to:

• Keep you signed in to your account
• Remember your preferences and settings
• Understand how you use our website
• Improve our services and user experience
• Ensure the security of our platform
• Provide relevant content and features
• Measure which advertising campaigns lead to bookings and prescription requests, when you consent to this

3. Types of Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the website to function properly. They enable core functionality such as security, account access, and session management. You cannot opt out of these cookies as they are required for our Service to work.

3.2 Performance & Analytics Cookies

These cookies help us understand how visitors use our website and patient portal, so we can improve them. They are only set after you accept analytics cookies. This data is pseudonymous — it is not labelled with your name or email address, but it is tied to a persistent identifier.

3.3 Functional Cookies

These cookies enable enhanced functionality and personalisation, such as remembering your language preference. They also allow optional third-party content to load — specifically a Trustpilot reviews widget that we may show on our public homepage. Where that widget is shown, it loads only if you have allowed functional cookies, and when it loads Trustpilot receives your IP address and the address of the page you are viewing, and sets its own cookies from its widget domain. This is the only way Trustpilot receives anything about you from us — the invitation to review us that you may see in your patient account or in a service email is an ordinary link and sends Trustpilot nothing (Privacy Policy, section 7).

3.4 Marketing Cookies

These cookies are set by Google so that an advert click can be matched to a later booking or prescription request, which is how we measure which campaigns work. They are only set if you accept marketing cookies — either via "Accept all" on our website, or in your portal Settings. Google's measurement code itself loads if you accept analytics or marketing cookies; the analytics cookies it sets are listed in section 3.2. If you accept neither, Google's code is not loaded and no Google cookie is set.

If you arrive from a Google advert, Google may set further _gcl_* cookies so that the click can be matched to a later booking or prescription request.

4. Third-Party Cookies

Some cookies are placed by third-party services that appear on our pages. We use the following third-party services:

• PostHog (EU): Product analytics and session replay, hosted in the EU. Session replay masks all typed input and all on-screen text, and never captures the contents of requests to our servers. What is recorded is page layout, mouse movement, clicks, scrolling and the address of each page you visit — and a page address can name a condition, so a replay can show which treatment page you were on even though the words on it are masked. Masking covers text and what you type; it is not a guarantee about images (Privacy Policy)
• Google Analytics 4 and Google Ads: Website and patient portal analytics and advertising measurement, provided by Google Ireland Limited and Google LLC. Google receives the pages you visit, your approximate location and device, and the fact that you completed a booking or prescription request with the amount paid. No condition is included in the conversion itself, and where you request treatment the condition is removed from the address before it is sent, so Google receives "/prescriptions/[condition]/request" rather than the condition. Our public information pages are different: the address of a health article on our blog, or of a page named after a service such as sick certificates or contraception, names what it covers, and Google receives those addresses in full. Google processes this outside the EEA, including in the United States (Privacy Policy)
• Stripe: Payment processing (Privacy Policy)
• Whereby: Video consultations (Privacy Policy)

We do not control these third-party cookies. Please refer to the respective privacy policies for more information.

5. Managing Your Cookie Preferences

5.1 Cookie Consent Banner

When you first visit our website, you will see a cookie consent banner that allows you to:

• Accept all cookies
• Reject non-essential cookies

You can change your preferences at any time by clicking "Cookie Settings" in the footer of www.getyourgp.ie, or in Settings → Privacy inside the patient portal. Your choice is remembered across getyourgp.ie, including the patient portal.

5.2 Browser Settings

Most web browsers allow you to control cookies through their settings. You can:

• Delete all cookies
• Block all cookies
• Allow all cookies
• Block third-party cookies
• Clear cookies when you close the browser
• Open a 'private browsing' / 'incognito' session

Please note that blocking some cookies may affect your experience on our website and limit the services we can provide.

5.3 Browser-Specific Instructions

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

6. Do Not Track

Some browsers have a "Do Not Track" feature that signals to websites that you do not want your online activity tracked. There is no industry standard for how websites should respond to it. Our product analytics (PostHog) is configured to honour the Do Not Track signal and will not collect anything when it is set. Google Analytics and Google Ads do not act on Do Not Track, so if you want to stop those, decline analytics and marketing cookies in our cookie preference centre.

7. Cookies and Health Data

We want to be straight with you about the limits of this, because we are a healthcare service and analytics on a healthcare service is not the same as analytics on a shop:

• Cookies do not contain your medical records. Your health data is stored securely on our servers in the EEA, not in a cookie
• We never send your name, email address, date of birth, phone number, address, PPS number, consultation notes, the name of any medicine prescribed to you, prescription documents or any uploaded document to an analytics or advertising provider
• We do send some health-adjacent information, but only to PostHog, which is hosted in the EU. If you consent, PostHog receives the addresses of the pages you visit — which on our public website can name a condition — and the condition you select when requesting a prescription. Google is told that you completed a booking or submitted a prescription request, what it was worth, and whether a booking was for a sick certificate. No condition is included in that conversion, and the condition is removed from treatment-request addresses before Google sees them — but the addresses of our blog articles and of pages named after a service can name the subject they cover, and Google receives those in full
• Session replay masks all typed input and all on-screen text, so your answers, medicines and messages are not readable in a replay
• We do not sell your data. Google is told that a booking or request happened and what it was worth, never what it was for, so no advertising profile can be built from your health information
• If you would rather none of this happened, decline analytics and marketing cookies. It has no effect on your care, your appointments or your prescriptions

8. Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our data practices. When we make significant changes, we will:

• Update the "Last updated" date at the top of this policy
• Display a notice on our website
• Request your consent again if required

9. Your Rights

Under GDPR and Irish data protection law, you have the right to:

• Know what cookies we use and why
• Opt out of non-essential cookies
• Withdraw consent at any time
• Request deletion of data collected via cookies

For more information about your privacy rights, please see our Privacy Policy.

10. Contact Us

If you have questions about our use of cookies, please contact us: