1. Who we are
This website, medfortis.org, is operated by MedFortis Expert Limited ("MedFortis", "we", "us"), a private company limited by shares registered in Ireland under company number 819932, with its registered office at Coliemore House, Coliemore Road, Dalkey, Co. Dublin, A96A8D5. We are the data controller for personal data collected through this site.
For any privacy question or to exercise your rights, contact us at privacy@medfortis.org.
2. Scope of this policy
This policy covers personal data collected through our marketing website only — for example when you request a PMS Gap Scan, book a meeting, or contact us. The MedFortis product platform used by customers is governed by a separate agreement and privacy notice and is not covered here.
3. Information we collect
Information you give us
- Contact / Gap Scan form: your name, work email address, company name, and any message you include, plus a record of your consent.
- Direct contact: if you email us, we receive your email address and the contents of your message.
Information collected automatically
Our hosting provider keeps standard server logs (such as IP address, browser type, and timestamps) for security, troubleshooting, and to operate the site. We do not use this data to build profiles of visitors.
4. Cookies & tracking
We currently do not use analytics, advertising, or other tracking cookies on this website, and we do not run Google Analytics or similar tools at this time.
If we introduce analytics or other non-essential cookies in future, we will update this policy and, where required, ask for your consent through a cookie banner before they are used.
5. How we use your information & legal bases
Under the EU/UK General Data Protection Regulation (GDPR), we rely on the following legal bases:
- To respond to your enquiry and arrange a Gap Scan or demo — based on your consent and on taking steps at your request prior to any contract.
- To communicate with you about your request and follow up — based on our legitimate interest in responding to potential customers.
- To secure and operate the website (server logs, spam prevention) — based on our legitimate interest in keeping the site safe and functional.
We do not sell your personal data, and we do not use it for automated decision-making.
6. Service providers we share data with
We use a small number of trusted providers ("processors") to run the site and respond to you. They process data only on our instructions:
| Provider | Purpose |
|---|---|
| Vercel | Website hosting and delivery |
| Twilio SendGrid | Sending and receiving contact-form email notifications |
| Google (Workspace) | Our business email inboxes |
We may also disclose data if required by law.
7. International transfers
Some of our providers are based outside the European Economic Area (for example, in the United States). Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
8. How long we keep your data
We keep enquiry and booking information only as long as needed to respond to you and for a reasonable follow-up period, after which it is deleted or anonymised — unless we are required to keep it longer for legal reasons. Server logs are retained for a short period for security purposes.
9. Your rights
Under the GDPR you have the right to: access your data; have it corrected or erased; restrict or object to its processing; data portability; and to withdraw consent at any time (without affecting prior processing). To exercise any of these, email privacy@medfortis.org.
You also have the right to lodge a complaint with your local supervisory authority. In Ireland this is the Data Protection Commission (dataprotection.ie).
10. Security
We use reasonable technical and organisational measures — including encryption in transit (HTTPS) and access controls — to protect personal data. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.
11. Children
This website and our services are intended for businesses and professionals, not for children, and we do not knowingly collect data from anyone under 16.
12. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top reflects the latest version. Material changes will be highlighted on this page.
13. Contact
Questions about this policy or your data? Email privacy@medfortis.org, or write to us at Coliemore House, Coliemore Road, Dalkey, Co. Dublin, A96A8D5, Ireland.