NeuroBell Website Privacy Policy
Last modified: 17 June 2026
-
Introduction
-
Who We are (Data Controller)
-
What Personal Data We Collect
-
Legal Basis for Processing
-
How We Use Your Personal Data
-
Marketing Communications
-
Cookies
-
Sharing Your Personal Data
-
How Long We Keep Your Data
-
Your Rights Under GDPR
-
Data Protection Officer
-
Right to Complain to the Supervisory Authority
-
Data Security
-
Children’s Data
-
Changes to This Privacy Policy
Introduction
NeuroBell (“we”, “us”, “our”) is a medical device company incorporated and operating in Ireland. We are committed to protecting your personal data and respecting your privacy inaccordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Data Protection Acts 2018. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website. Please read it carefully. If you have any questions, please contact our Data
Protection Officer (details in Section 10).
Who We Are (Data Controller)
We are the data controller in respect of your personal data collected through this website.
NeuroBell
Registered address: Core House, Link Rd, Ballincollig, Co, Cork
Company registration number: 743738
VAT number: IE4169254PH
Email: info@neurobell.com
We are registered with the Companies Registration Office in Ireland and regulated in our activities as a medical device company in accordance with applicable EU medical device regulations.Protection Officer (details in Section 10).
What Personal Data We Collect
We collect the following categories of personal data through our website:
3.1 Contact Form Data
When you complete a contact or enquiry form, we collect:
• Your name
• Your email address
• Any additional information you choose to provide in your message
3.2 Cookies and Browsing Data
When you visit our website, we automatically collect certain technical data, including:
• IP address
• Browser type and version
• Pages visited and time spent on pages
• Referring website
• Device type and operating system
This data is collected via cookies and similar tracking technologies. Please see our Cookie
Policy for full details.
3.3 Special Category Data
As a medical device company, some visitors to our website may be patients or individuals
with health-related enquiries. We do not ask for or require health or medical data through our
website contact forms. If you voluntarily include health-related information in a message to
us, we will treat it as special category data under Article 9 GDPR and handle it with
additional care. We will only process such data with your explicit consent or where another
lawful basis applies.
Legal Basis for Processing
We rely on the following legal bases under Article 6 GDPR to process your personal data:
Legitimate interests (Article 6(1)(f)): We process contact form submissions and
browsing/analytics data to operate and improve our website and respond to your enquiries.
Our legitimate interests do not override your rights and freedoms.
Consent (Article 6(1)(a)): We rely on your consent for non-essential cookies and for future
marketing communications (e.g. email newsletters). You may withdraw consent at any time.
Legal obligation (Article 6(1)(c)): We may process your data where required to comply
with a legal obligation, including applicable medical device regulations and Irish law.
Where we process special category data (e.g. health information voluntarily provided), we
rely on your explicit consent under Article 9(2)(a) GDPR.
How We Use Your Personal Data
We use your personal data for the following purposes:
• To respond to your enquiries submitted via our contact form
• To improve our website content, structure, and user experience (via analytics data)
• To send you marketing communications about our products and services, where you
have given consent
• To comply with our legal and regulatory obligations as a medical device company
• To protect the security of our website and prevent fraud or misuse
We employ industry-standard security measures to safeguard your data from unauthorized access, alteration, disclosure, or destruction. Despite these efforts, please be aware that no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Marketing Communications
We intend to send marketing emails to individuals who have provided their contact details
and given explicit consent to receive such communications. Every marketing email will
include a clear and easy option to unsubscribe at any time.
We will not send marketing communications to healthcare professionals in a manner that
conflicts with applicable codes of practice for the promotion of medical devices.
Cookies
Our website uses cookies to distinguish you from other users and to improve your
experience. We use Google Analytics to collect anonymised data about how visitors use our
website. Google Analytics uses cookies to collect information such as how often users visit
the site, what pages they visit, and what other sites they used prior to coming to ours.
We also use a CRM platform (HubSpot) which may set cookies to track interactions with our
website. These are used to understand engagement and to follow up on enquiries.
Non-essential cookies are only placed on your device after you provide informed consent via
our cookie consent banner. You can adjust your cookie preferences at any time through the
banner or your browser settings.
For full details of the cookies we use, please refer to our separate Cookie Policy.
Sharing Your Personal Data
We do not sell, rent, or trade your personal data to third parties.
We share your personal data only with the following categories of processors who act on our
behalf and are bound by appropriate data processing agreements:
• Google LLC — Google Analytics (website analytics). Google may transfer data
outside the EEA; we rely on Standard Contractual Clauses for such transfers.
• Our CRM provider (HubSpot) — for managing contact enquiries and marketing
communications. Where data is transferred outside the EEA, we rely on Standard
Contractual Clauses or equivalent safeguards. Beyond the above, we do not share your data with any other third parties, unless required to
do so by law (e.g. in response to a court order or request from the Data Protection
Commission).
How Long We Keep Your Data
We retain personal data only for as long as necessary for the purposes described in this
Policy, or as required by law.
• Contact form data: retained for up to 7 years from the date of collection, in line with
our general record-keeping obligations and potential regulatory requirements
applicable to medical device companies.
• Analytics data: retained in accordance with Google Analytics default retention
settings (up to 26 months unless adjusted).
• Marketing consent records: retained until consent is withdrawn and for a reasonable
period thereafter to demonstrate compliance.
When data is no longer required, it is securely deleted or anonymised.
Your Rights Under GDPR
Under the GDPR and Data Protection Acts 2018, you have the following rights in relation to
your personal data:
• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure (‘right to be forgotten’) — to request deletion of your data in certain
circumstances
• Right to restriction of processing — to request that we limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable
format
• Right to object — to object to processing based on legitimate interests or for direct
marketing
• Right to withdraw consent — where processing is based on consent, you may
withdraw it at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint — with the Data Protection Commission (see below)
To exercise any of these rights, please contact our Data Protection Officer using the details
in Section 11. We will respond within one month of receipt of your request.
Data Protection Officer
We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection practices. You may contact our DPO at:
Name/Title: Mark O’Sullivan, Data Protection Officer
Email: dataprotection@neurobell.com
Address: Core House, Link Rd., Ballincollig, Co. Cork
Right to Complain to the Supervisory Authority
If you are unhappy with how we have handled your personal data, you have the right to
lodge a complaint with the Data Protection Commission (DPC), which is the supervisory
authority for data protection in Ireland:
Data Protection Commission
Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: www.dataprotection.ie
Phone: +353 57 868 4800
We would, however, appreciate the opportunity to address your concerns before you contact
the DPC, so please contact us in the first instance.
Data Security
We implement appropriate technical and organisational measures to protect your personal
data against unauthorised access, accidental loss, destruction, or damage. These include
secure server infrastructure, access controls, and staff training on data protection.
Where we engage third-party processors, we ensure they provide sufficient guarantees as to
their security measures and that appropriate data processing agreements are in place.
Children’s Data
Our website is not directed at children under the age of 16. We do not knowingly collect
personal data from children. If you believe we have inadvertently collected data from a child,
please contact our DPO immediately and we will take steps to delete it.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or
legal requirements. The ‘Last updated’ date at the top of this document indicates when the Policy was last revised. Where changes are material, we will take reasonable steps to bring them to your attention.
We encourage you to review this Policy periodically.
Ready to bring
continuous EEG to your NICU ?
Contact our team to learn more