Legal
Privacy Policy
Last updated: 3 April 2026
Summary: We collect only what we need to provide your care. We do not sell your data. Health information is treated as special category data under the Isle of Man Data Protection Act 2018. You have the right to access, correct, and request deletion of your data.
1
Who we are
Isle Sleep is a private sleep diagnostic service operated by Barrule Medical Group, 53 Victoria Street, Douglas, Isle of Man IM1 2LA.
For the purposes of Isle of Man data protection law, Barrule Medical Group is the data controller in respect of personal information collected through this website and in the provision of Isle Sleep services.
Contact: islesleep.im/contact
2
Legal basis
This policy is governed by the Isle of Man Data Protection Act 2018, which implements equivalent protections to the UK GDPR and EU GDPR for Isle of Man residents. The Isle of Man Information Commissioner oversees data protection compliance on the island.
Health and clinical information constitutes special category data under Schedule 1 of the Act and is subject to additional protections. We process this data only on the basis of explicit consent and for the purpose of providing direct healthcare.
3
What we collect and why
| Information | Purpose | Legal basis |
|---|---|---|
| Name and contact details | To respond to your enquiry and manage your appointment | Legitimate interests / Contract |
| Enquiry and booking details submitted via this website | To process your appointment request | Contract |
| Sleep screening quiz results (Epworth Sleepiness Scale, SNOT-22 subset, STOP-BANG) | To assist clinical triage before your appointment — voluntarily provided | Explicit consent |
| Sleep history and symptom information | Clinical assessment and diagnostic purposes | Explicit consent / Healthcare provision |
| Sleep recording data (from Stowood device) | To produce a diagnostic report reviewed by our consultant | Explicit consent / Healthcare provision |
| Diagnostic report and treatment plan | Your ongoing clinical record and treatment | Explicit consent / Healthcare provision |
| IP address and basic access logs | Website security and fraud prevention | Legitimate interests |
We do not collect any information beyond what is necessary for these purposes. We do not use advertising networks or behavioural profiling. Website analytics are described in section 7.
4
Who we share your information with
We do not sell, rent, or trade your personal information. We may share it with the following parties, strictly for the purpose of providing your care:
- –
Our telehealth respiratory consultant: To review your sleep recording and produce your diagnostic report.
- –
Barrule Medical Group clinical staff: For clinical care, appointment management, and where you are referred to a specialist within BMG (e.g. ENT).
- –
Your GP: Only with your explicit consent, and only to share your diagnostic report or facilitate onward care.
- –
n8n (workflow automation): Booking requests submitted via this website are processed through n8n, a workflow automation platform. n8n Cloud is operated by n8n GmbH and hosted within the European Economic Area. Data is used solely to route your booking to our team and is not retained by n8n beyond processing.
- –
SeaTable (booking records): Confirmed booking requests are logged in SeaTable, a database platform operated by SeaTable GmbH and hosted within the EEA. This record is used for appointment management only.
- –
Google Analytics: If you accept analytics cookies, anonymised usage data (pages visited, session duration) is sent to Google Analytics (Google LLC, USA). No personally identifiable information is included. Google acts as a data processor under standard contractual clauses. You may decline analytics cookies at any time.
Booking and enquiry data submitted via this website (including screening questionnaire responses) is processed by our EEA-based workflow and record providers listed above. If you accept analytics cookies, aggregated usage data is processed by Google in the USA under standard contractual clauses. Clinical records produced after your appointment are held by Barrule Medical Group on Isle of Man infrastructure. Your telehealth consultant review is conducted under appropriate data sharing arrangements.
5
How long we keep your data
| Data type | Retention period |
|---|---|
| Clinical records (sleep study, diagnostic report, treatment records) | 8 years from last contact, in line with NHS and private healthcare standards |
| Enquiry and booking data (non-clinical) | 2 years from the date of enquiry or last contact |
| Website access logs | 90 days |
6
Your rights
Under the Isle of Man Data Protection Act 2018, you have the following rights in respect of your personal data:
- –
Right of access: You may request a copy of the personal data we hold about you (a Subject Access Request). We will respond within one month.
- –
Right to rectification: You may ask us to correct inaccurate or incomplete data.
- –
Right to erasure: You may request deletion of your data where there is no lawful reason for us to continue holding it. Note that we are required to retain clinical records for the period set out above.
- –
Right to restrict processing: You may ask us to restrict how we use your data in certain circumstances.
- –
Right to data portability: You may request your data in a structured, machine-readable format.
- –
Right to object: You may object to processing based on legitimate interests.
- –
Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing that took place before withdrawal.
To exercise any of these rights, please contact us at islesleep.im/contact. We do not charge for Subject Access Requests in normal circumstances.
7
Cookies and analytics
This website uses Google Analytics 4 to understand how visitors use the site (pages visited, session duration, referral source). Google Analytics sets cookies (_ga, _ga_*) that persist for up to 2 years.
These cookies are only placed if you accept analytics cookies via the cookie notice shown on your first visit. You may change your preference at any time by clearing your browser cookies or by contacting us.
Analytics data is aggregated and anonymised. No personally identifiable information — including your name, email, or health screening results — is included in analytics data. Google LLC (USA) acts as a data processor under standard contractual clauses.
We do not use Facebook Pixel, advertising networks, or behavioural profiling technology.
8
Security
This website and clinical records are hosted on Isle of Man infrastructure operated by Barrule Medical Group. Booking and enquiry data is processed by EEA-based third-party processors as disclosed in section 4. Access to your data is restricted to authorised clinical and administrative staff. All data in transit is encrypted using TLS.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Isle of Man Information Commissioner in accordance with our statutory obligations.
9
Complaints
If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. If you remain dissatisfied, you have the right to lodge a complaint with the Isle of Man Information Commissioner:
Isle of Man Information Commissioner
PO Box 69, Douglas, Isle of Man, IM99 1EQ
www.inforights.im
10
Changes to this policy
We may update this privacy policy from time to time. The current version is always available at islesleep.im/privacy. The date at the top of this page reflects when it was last updated. Material changes will be communicated to active patients directly.