Privacy Policy

1

Who we are

Isle Sleep is a private sleep diagnostic service operated by Barrule Medical Group, based on the Isle of Man.

For the purposes of Isle of Man data protection law, Barrule Medical Group is the data controller in respect of personal information collected through this website and in the provision of Isle Sleep services.

Contact: islesleep.im/contact

2

Legal basis

This policy is governed by the Isle of Man Data Protection Act 2018, which implements equivalent protections to the UK GDPR and EU GDPR for Isle of Man residents. The Isle of Man Information Commissioner oversees data protection compliance on the island.

Health and clinical information constitutes special category data under Schedule 1 of the Act and is subject to additional protections. We process this data only on the basis of explicit consent and for the purpose of providing direct healthcare.

3

What we collect and why

We do not collect any information beyond what is necessary for these purposes. We do not use tracking cookies, advertising networks, or behavioural analytics.

4

Who we share your information with

We do not sell, rent, or trade your personal information. We may share it with the following parties, strictly for the purpose of providing your care:

• –

  Our telehealth respiratory consultant: To review your sleep recording and produce your diagnostic report.

• –

  Barrule Medical Group clinical staff: For clinical care, appointment management, and where you are referred to a specialist within BMG (e.g. ENT).

• –

  Your GP: Only with your explicit consent, and only to share your diagnostic report or facilitate onward care.

• –

  Our technology providers: Our website and booking system runs on our own infrastructure. Enquiry and booking data is stored in a database on Barrule Medical Group servers on the Isle of Man.

We do not transfer your personal data outside the Isle of Man or UK except where this is necessary for the provision of the telehealth consultant service, in which case appropriate data transfer agreements are in place.

5

How long we keep your data

6

Your rights

Under the Isle of Man Data Protection Act 2018, you have the following rights in respect of your personal data:

• –

  Right of access: You may request a copy of the personal data we hold about you (a Subject Access Request). We will respond within one month.

• –

  Right to rectification: You may ask us to correct inaccurate or incomplete data.

• –

  Right to erasure: You may request deletion of your data where there is no lawful reason for us to continue holding it. Note that we are required to retain clinical records for the period set out above.

• –

  Right to restrict processing: You may ask us to restrict how we use your data in certain circumstances.

• –

  Right to data portability: You may request your data in a structured, machine-readable format.

• –

  Right to object: You may object to processing based on legitimate interests.

• –

  Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of these rights, please contact us at islesleep.im/contact. We do not charge for Subject Access Requests in normal circumstances.

7

Cookies and analytics

This website uses Plausible Analytics — a privacy-first, cookieless analytics platform. Plausible does not use cookies, does not track individuals across websites, and does not collect personal data. No cookie consent banner is required.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking or advertising technology.

8

Security

Your data is stored on servers located on the Isle of Man, operated by Barrule Medical Group. Access is restricted to authorised clinical and administrative staff. All data in transit is encrypted using TLS. Clinical data is handled in accordance with NHS information governance standards.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Isle of Man Information Commissioner in accordance with our statutory obligations.

9

Complaints

If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. If you remain dissatisfied, you have the right to lodge a complaint with the Isle of Man Information Commissioner:

10

Changes to this policy

We may update this privacy policy from time to time. The current version is always available at islesleep.im/privacy. The date at the top of this page reflects when it was last updated. Material changes will be communicated to active patients directly.