Privacy and Cookie Notice

Last updated: 11 August 2026

RespiCare Limited respects your privacy and is committed to protecting your personal data. This notice explains how we collect, use, store and protect personal data obtained through our website and how you can exercise your data protection rights.

1. Who We Are

RespiCare Limited (“RespiCare”, “we”, “us” or “our”) is the data controller responsible for personal data collected through this website.

Data protection enquiries should be marked for the attention of the Data Protection Officer.

2. Data Protection Law

We process personal data in accordance with the EU General Data Protection Regulation (“GDPR”), the Data Protection Act 2018 and other applicable Irish data protection and electronic communications legislation.

3. Personal Data We May Collect

Depending on how you interact with us and with our website, we may collect:

• Your name and contact details, including your email address, telephone number and postal address.
• Information you submit through an enquiry form, email, telephone call or other communication.
• Account, order, delivery and transaction information where the relevant website services are available and used.
• Employment and recruitment information if you apply for a position with RespiCare.
• Your communication and marketing preferences.
• Technical information, such as your IP address, browser type, device type, operating system, pages visited and website access times.
• Information contained in website security logs and records used to protect the website and our systems.
• Any other information you choose to provide to us.

Please do not provide medical or other sensitive personal information through a general website enquiry form unless it is necessary for your enquiry. Where special-category personal data, including health information, is provided to us, we will only process it where we have a lawful basis and an appropriate condition under Article 9 of the GDPR.

4. How We Collect Personal Data

We may collect personal data:

• Directly from you when you contact us, submit an enquiry, place an order, register for an available service or communicate with our team.
• When you apply for employment with RespiCare.
• Automatically through essential website technologies, server logs and permitted cookies.
• From a healthcare organisation, service provider or other person where they are lawfully authorised to provide the information to us.
• From publicly available sources where permitted by law.

5. How and Why We Use Personal Data

We may use personal data to:

• Respond to enquiries and requests for information.
• Provide products, services, support and training requested from us.
• Process and manage orders, deliveries and related communications.
• Provide customer and technical support.
• Maintain accurate customer and service records.
• Manage recruitment and employment applications.
• Operate, secure, maintain and improve our website and services.
• Prevent or investigate fraud, misuse, security incidents and other unlawful activity.
• Meet our legal, regulatory, contractual and medical-device compliance obligations.
• Establish, exercise or defend legal claims.
• Send marketing communications where you have consented or where otherwise permitted by law.

6. Our Lawful Bases for Processing

Depending on the circumstances, we process personal data because:

• It is necessary to enter into or perform a contract with you.
• It is necessary to comply with a legal or regulatory obligation.
• It is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.
• You have provided consent for a specific purpose.
• It is necessary to establish, exercise or defend legal claims.
• Another lawful basis or condition permitted under applicable data protection law applies.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect processing lawfully carried out before consent was withdrawn.

7. Sharing Personal Data

We do not sell personal data. Where necessary and lawful, we may share personal data with:

• Service providers supporting our website, IT systems, communications, security, storage and administration.
• Payment, banking, delivery and logistics providers where relevant to an order or service.
• Professional advisers, including legal, financial, insurance and auditing advisers.
• Healthcare organisations and professionals where necessary and lawfully authorised.
• Regulators, public authorities, law-enforcement bodies or courts where disclosure is required or permitted by law.
• A purchaser, successor or adviser in connection with a proposed sale, transfer or restructuring of all or part of our business.

Service providers processing personal data on our behalf are required to protect it, act only on our documented instructions and use it only for the agreed purpose.

8. International Transfers

Some technology or service providers may process personal data outside Ireland or the European Economic Area.

Where personal data is transferred outside the European Economic Area, we will use an approved transfer mechanism where required, such as an adequacy decision, the European Commission’s Standard Contractual Clauses or another safeguard permitted under data protection law.

9. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, including to meet applicable legal, regulatory, contractual, medical-device, accounting and reporting requirements.

The appropriate retention period depends on the type of information, why it was collected, the applicable legal requirements and whether it may be needed to establish, exercise or defend a legal claim. Information that is no longer required will be securely deleted, anonymised or otherwise disposed of.

10. Information Security

We use appropriate organisational and technical measures designed to protect personal data against accidental or unlawful loss, alteration, unauthorised access, disclosure or destruction.

Access to personal data is restricted to authorised personnel and service providers who require access for legitimate business purposes. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

11. Your Data Protection Rights

Subject to the conditions and limitations set out in data protection law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of your personal data.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Object at any time to the use of your personal data for direct marketing.
• Request transfer of certain personal data in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Data Protection Commission.

Data protection requests will ordinarily be handled without charge. A reasonable fee may be charged, or a request may be refused, only where permitted by law, including where a request is manifestly unfounded or excessive.

We may need to request information to verify your identity before acting on a request. To exercise your rights, contact: sales@respicare.ie.

12. Direct Marketing

We will send electronic marketing communications only where permitted by law. You may unsubscribe at any time by using the unsubscribe facility included in a communication or by contacting us.

Opting out of marketing will not prevent us from sending necessary service, safety, account, order or contractual communications.

13. Cookies and Similar Technologies

Cookies are small text files placed on your computer, phone or other device when you visit a website. Cookies may be set directly by RespiCare or by third-party services used on our website.

Strictly Necessary Cookies

These cookies are required for the website to operate, maintain security, remember essential choices or provide a service you have expressly requested. Consent is not generally required for strictly necessary cookies.

Preference Cookies

These cookies remember choices such as language, display or website preferences. Where legally required, these cookies will only be used after you have provided consent.

Analytics Cookies

Analytics cookies help us understand how visitors use the website, such as which pages are visited and whether technical errors occur. Where analytics cookies are not strictly necessary, they will only be used after you have provided consent.

Third-Party and Embedded Content Cookies

Some pages may contain content or functionality supplied by third parties, such as videos, maps or social-media services. These providers may place cookies or collect technical information when their content is enabled. Where consent is required, such technologies should remain disabled until you choose to accept them.

You can accept, reject or change your preferences for non-essential cookies through the cookie-control facility made available on the website. You may also control cookies through your browser settings, although blocking strictly necessary cookies may affect website functionality.

14. Links to Other Websites

Our website may contain links to websites operated by other organisations. RespiCare is not responsible for the privacy practices, security or content of external websites. You should review the privacy information provided by the relevant website before submitting personal data.

15. Providing Information About Another Person

If you provide personal data relating to another person, you should ensure that you are lawfully permitted to do so and that the person understands how their information may be used.

16. Complaints

If you have concerns about how we handle personal data, please contact us first so that we can investigate and respond.

You also have the right to raise a concern with the Irish Data Protection Commission. Information about making a complaint is available at www.dataprotection.ie.

17. Changes to This Notice

We may update this notice to reflect changes in our services, website, legal obligations or data-processing activities. The current version will be published on this page and identified by its “Last updated” date.