Privacy Notice

1. Who is responsible for your information?

Danidu Waditha Loku Pathirage, trading as WadiMedicine, is the data controller. This means WadiMedicine decides why and how personal information is used.

2. Information collected

Depending on how you interact with WadiMedicine, the following information may be collected:

• Contact and identity details: name, email address, phone number and, where relevant, a parent or guardian’s details.
• Booking information: appointment time, time zone and information included with a Google Calendar booking.
• Education and admissions information: qualifications, grades, preferred universities, application status and other circumstances you choose to discuss.
• Communications: emails, WhatsApp messages, call notes and records of requests or complaints.
• Email-list information: email address, opt-in and confirmation records, unsubscribe status, and basic delivery or engagement information generated when Results Week emails are sent.
• Client and transaction records: acceptance-form responses, the service agreed, contract and start-timing choices, receipts and payment records. WadiMedicine does not need or store your full payment-card details.
• Basic technical information: the hosting provider may process information such as IP address, browser type and security logs when the website is visited.

Please do not send medical information, identity documents or other highly sensitive information unless WadiMedicine has specifically explained why it is necessary and how it will be handled.

3. Why the information is used

There is no automated decision-making or profiling that produces legal or similarly significant effects.

4. Who receives the information?

Information is shared only when needed with service providers or advisers, including:

• Google for Calendar bookings, Gmail and Google Meet;
• Meta/WhatsApp when you choose to communicate through WhatsApp;
• Netlify for website hosting, security and storage of customer acceptance and document-checklist form submissions;
• EmailOctopus for the optional signup form, subscriber-list management, double opt-in records and delivery of Results Week emails;
• banks or payment providers used to receive payments;
• accountants, legal advisers, insurers or public authorities where reasonably necessary or legally required.

These providers may also process information under their own privacy notices. Following an external booking, WhatsApp or other link takes you to that provider’s service.

5. International transfers

Some technology providers may process information outside Ireland or the European Economic Area. Where data-protection law requires it, WadiMedicine relies on safeguards such as an adequacy decision or approved contractual protections. Contact WadiMedicine if you want more information about the safeguard relevant to your information.

6. How long information is kept

• Enquiries and unused booking records: normally up to 12 months after the last contact.
• Working application documents: normally deleted within 12 months after the service ends, unless they are still needed for an agreed purpose.
• Contracts, receipts, payment and core client records: normally up to six years after the service ends, where needed for tax, accounting or legal purposes.
• Marketing contact details: until consent is withdrawn or the list is no longer used. A minimal suppression record may be kept to respect an unsubscribe request.

Information may be kept for longer where required by law or for an active legal claim, and deleted sooner when it is no longer needed.

7. Your data-protection rights

Depending on the circumstances, you may ask WadiMedicine to:

• give you access to your personal information;
• correct inaccurate or incomplete information;
• delete information;
• restrict how information is used;
• provide certain information in a portable format;
• stop processing based on legitimate interests; or
• withdraw consent at any time where consent is the legal basis.

These rights are not absolute and may be limited by law. To make a request, email wadimedicine1@gmail.com. WadiMedicine may need to verify your identity before responding.

8. Information about young people

Prospective medical students may be under 18. A parent or guardian should make the booking and take responsibility for the service contract where the student is under 18. Information about a young person will only be used to answer the enquiry or provide the requested service, and communications will be kept clear and age-appropriate.

9. Cookies and external services

This website does not currently set advertising or analytics cookies. It loads web fonts from Google and is hosted by Netlify, which may receive basic technical requests needed to deliver and protect the site. The optional signup form is supplied by EmailOctopus and uses Google reCAPTCHA for bot protection; those services may receive technical information such as IP address, browser details and security signals when the form loads or is submitted. External services such as Google Calendar and WhatsApp have their own cookie and privacy practices when you visit them.

10. Complaints and changes

Please contact WadiMedicine first if you have a privacy concern so it can be investigated. You also have the right to complain to Ireland’s Data Protection Commission.

This notice may be updated when the service or the law changes. Any new version will be published here with a revised effective date. If information is to be used for a materially different purpose, the relevant people will be informed before that use begins.