Privacy Policy

Last updated: February 2026

1. Who We Are

FragilityFracture.ie (“we”, “us”, “our”) is an independent Irish educational website providing information about osteoporosis, bone density, and fragility fractures. We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988–2018.

2. What Personal Data We Collect

We collect personal data in the following circumstances:

Contact Form

• Name
• Email address
• The content of your message
• Date and time of submission

Analytics Data (with consent)

• Anonymous usage data collected via Google Analytics 4 (if you accept analytics cookies)
• This includes: pages visited, time on page, browser type, approximate geographic location (country/region level), device type
• No personally identifiable information is collected through analytics
• IP addresses are anonymised

3. How We Use Your Data

We use personal data only for the purposes for which it was collected:

• Contact form data: To respond to your enquiry. We do not use contact form data for marketing.
• Analytics data: To understand how the site is used and to improve its content and usability. Data is aggregated and anonymous.

4. Legal Basis for Processing

• Contact form: Consent (Article 6(1)(a) GDPR) — you consent to us processing your data by submitting the form and ticking the consent checkbox.
• Analytics: Consent — analytics cookies are only set if you accept them via the cookie consent banner.

5. Data Retention

• Contact form submissions: Retained for 12 months, then securely deleted, unless an ongoing correspondence requires longer retention.
• Analytics data: Google Analytics data retention is set to 14 months. Aggregated data may be retained longer.

6. Third-Party Services

• Google Analytics 4: Used to analyse site traffic. Governed by Google's privacy policy at google.com/policies/privacy. We have configured GA4 with IP anonymisation enabled.
• Vercel: Our hosting provider. May process request metadata for operational purposes.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

7. Your Rights Under GDPR

You have the following rights in relation to your personal data:

• Right to access: Request a copy of the data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data (“right to be forgotten”)
• Right to restriction: Request that we restrict processing of your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time (this does not affect processing before withdrawal)

To exercise any of these rights, please contact us via the contact form. We will respond within one month of receiving your request.

8. Cookies

For full information on the cookies used on this site, please see our Cookie Policy.

9. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Irish Data Protection Commission:

• Website: dataprotection.ie
• Address: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28
• Phone: 01 765 0100

10. Changes to This Policy

We may update this privacy policy from time to time. The “last updated” date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance.