Last updated: 01/01/2026
- Who We Are
Millbrook Manor Nursing Home (“we”, “us”, “our”) is part of an Irish company managing 11 nursing homes in Ireland since 1993. We provide residential, respite, dementia, convalescence and end-of-life care.
If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us at:
Email: care@millbrookmanor.eu
- Purpose of This Policy
This Privacy Policy explains:
What personal data we collect
How and why we use it
Who we share it with
How long we keep it
Your data protection rights
We are committed to complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and Irish data protection legislation.
- Personal Data We Collect
The type of personal data we collect will depend on your relationship with us (for example: resident, next of kin, visitor, job applicant, or website visitor).
3.1 Residents
For residents (or prospective residents), we may collect:
Identification details: name, date of birth, gender, PPS number, photograph
Contact details: address, phone number, email address
Health information: medical history, diagnoses, medications, allergies, support needs, care plans
Financial and administrative details: funding arrangements, billing information, insurance details
Next-of-kin / emergency contact details
Records of care: daily notes, assessments, incident reports, feedback or complaints
Because some of this information is health-related, it is considered special category data and is handled with extra care.
3.2 Family Members, Representatives and Visitors
We may collect:
Name and contact details
Relationship to the resident
Communication records (emails, letters, meeting notes)
Visitor sign-in information (including date and time of visits)
3.3 Job Applicants and Staff
For job applicants and staff we may collect:
Name and contact details
Curriculum vitae (CV), qualifications, references
Right to work information
Garda vetting and background checks (where required by law)
Employment records, training and attendance
3.4 Website Visitors
If you visit our website www.h0uses.shop, we may collect:
Basic technical information (e.g. IP address, browser type, pages visited)
Information you provide through contact forms or email links
We may use cookies or similar technologies where necessary and permissible. Details can be provided in a separate Cookies Notice if applicable.
- How We Use Your Personal Data
We use personal data for the following purposes:
4.1 Providing Care and Support
Assessing your needs and suitability for our services
Creating and updating care plans
Coordinating with healthcare professionals and services
Ensuring safety, wellbeing, and quality of care
4.2 Administration and Operations
Managing admissions, contracts and billing
Handling funding arrangements and payments
Maintaining internal records, audits and quality control
Responding to enquiries and complaints
4.3 Legal and Regulatory Compliance
Meeting our obligations under health, safety, and social care regulations
Reporting to or cooperating with regulatory bodies where required by law
Keeping appropriate records for legal and insurance purposes
4.4 Recruitment and Employment
Processing job applications
Managing staff records, payroll, training and supervision
Meeting our legal obligations as an employer
4.5 Communication
Keeping residents and families informed about care and services
Sharing important updates or changes to our services
Responding to queries sent by email or via the website
We will only process your personal data where we have a lawful basis to do so.
- Legal Bases for Processing
Depending on the situation, we rely on one or more of the following legal bases:
Performance of a contract: for example, providing residential care under a service agreement.
Legal obligation: to comply with legislation and regulatory requirements.
Vital interests: where processing is necessary to protect life or prevent serious harm.
Legitimate interests: for example, managing our services, improving quality, or ensuring the security of our premises, provided your rights and interests do not override these.
Consent: in certain situations, such as specific types of information sharing or using certain photos for marketing materials. Where we rely on consent, you can withdraw it at any time.
Special category data (such as health information) is processed only where permitted by law, including for the provision of health or social care and for reasons of public interest in the area of public health.
- Sharing Your Personal Data
We may share personal data with:
Healthcare professionals and services: GPs, hospitals, specialists, therapists and other health or social care providers involved in your care.
Regulators and public authorities: where required to comply with legal or regulatory obligations.
Service providers: trusted third parties who provide services such as IT support, secure data storage, or professional advisors. These providers are required to keep your information safe and use it only on our instructions.
Family members or representatives: where appropriate and in line with your wishes, legal rights or best interests.
Legal or insurance professionals: in connection with claims, disputes or legal proceedings.
We do not sell your personal data to third parties.
- International Transfers
As a general rule, we aim to keep your data within the European Economic Area (EEA). If it becomes necessary to transfer personal data outside the EEA (for example, using a secure service provider based in another country), we will ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections required by law. - Data Retention
We keep personal data only for as long as necessary to fulfil the purposes described in this policy, and to meet legal, regulatory or contractual requirements.
Retention periods may vary depending on:
The type of data
Our obligations under healthcare, employment, and financial regulations
Limitation periods for legal claims
When personal data is no longer needed, we will securely delete or anonymise it.
- How We Protect Your Data
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures may include:
Access controls and staff training
Secure storage (electronic and paper)
Encryption or password protection where appropriate
Regular review of our security practices
However, no system can be guaranteed as completely secure. We work continuously to improve our safeguards.
- Your Rights
Under data protection law, you may have the following rights (subject to certain conditions and limitations):
Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to have inaccurate or incomplete data corrected.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction of processing – to ask us to limit the use of your data in certain situations.
Right to data portability – to receive your data in a structured, commonly used format and transmit it to another controller, where applicable.
Right to object – to object to certain types of processing, such as direct marketing or processing based on legitimate interests.
Right to withdraw consent – where processing is based on your consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at care@millbrookmanor.eu. We may need to confirm your identity before fulfilling your request.
- Children’s Data
Our services are primarily intended for adults in need of nursing home care. Where we collect information about children (for example, next-of-kin or visitors), we take particular care to protect their privacy and process such data only when necessary and lawful. - Website Links
Our website www.h0uses.shop may contain links to other websites. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to read the privacy policies of any external websites you visit. - Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. The updated version will be posted on our website with a revised “Last updated” date. - Contact and Complaints
If you have questions, concerns or requests regarding this Privacy Policy or how we handle your data, please contact us:
Email: care@millbrookmanor.eu
You also have the right to lodge a complaint with the Data Protection Commission (DPC) in Ireland if you believe your data protection rights have been infringed.