Privacy

Privacy Policy

How GLP-1.ie handles the eligibility quiz, analytics, cookies, contact emails, and outbound clicks — and the rights you have over your data.

Last updated: 28 October 2026.

Who operates this site

GLP-1.ie is an independent Irish publisher owned and edited by John Fox, who is the data controller for the personal data described on this page. You can contact us at hello@glp1.ie or by post at GLP-1.ie, Kilbride Manor, Blessington, Co. Wicklow, Ireland.

The eligibility quiz and what happens to your answers

The free eligibility quiz asks for your height, weight, whether certain health conditions apply to you, and which medicine you are interested in. To show you the result, it also asks for your first name and email address. Your height, weight, computed BMI band, and condition answers are health data — special-category data under Article 9 of the GDPR — and we only process them with your explicit consent, which the quiz asks for before anything is submitted.

The quiz is for adults aged 18 or over: it uses adult BMI criteria, and the consent you give includes confirming you are 18 or over. Anyone who tells the quiz they are under 18 is asked to talk to their GP instead, and nothing is saved or sent.

While you answer, your answers so far (the medicine, your height and weight, the conditions you ticked and your first name, never your email address or consent) are kept in your browser tab's session storage, so that a refresh does not lose them. They are not sent anywhere from there, they are cleared as soon as your result is saved or shown without saving, and otherwise they last only as long as that tab's browsing session. When you save, the same storage also keeps a random request number and a one-way check value of the details sent (it cannot be turned back into them), so that pressing again, even after a refresh, cannot save the same request twice. They are removed as soon as the save is confirmed or refused. If we cannot confirm whether a save went through, they stay until a save is confirmed, you choose to see your result without saving, you tell the quiz you are under 18, or the tab’s browsing session ends.

Submitted quiz leads are stored in a database hosted by Supabase in the EU (Ireland region). The secure submission service validates the request and can only add the one record you chose to submit; the public website cannot read quiz records back. Cloudflare Turnstile checks that the request is from a person before Supabase stores it. If the check cannot run on your device, we still store your result, and we limit how many such requests we accept to keep out automated abuse. If secure submission is unavailable, the quiz offers an explicit email fallback and warns that email is less private before you choose whether to send the same details to the site email address. We use your submission to show your result and to email you about it, and to handle an introduction to a provider if you ask for one. Your result appears on the quiz page once your request is saved, with a shortlist of provider routes when your BMI is 27 or above, the lowest BMI the EU licence covers. If saving fails or cannot be confirmed, you can choose to see your result without saving, and nothing more is stored; a save we could not confirm may already have been stored, and a confirmation email shows that it was. After a secure quiz submission is saved, we use Resend to send one email confirming receipt and, unless you unsubscribe, up to two follow-up emails about your request (for example, a check-in a few days later, with one-tap links to tell us whether you found a provider; the page they open counts only the answer you tapped). We send that check-in only when your saved BMI is 27 or above, the same line as the shortlist. We show a provider booking button in the confirmation only when your saved answers are inside the EU licence for Wegovy and Mounjaro: a BMI of 30 or above, or 27 or above with a weight-related condition you ticked. None of these emails repeats your health answers or makes a medical decision. Our email service (Resend) tells us whether each of these emails was delivered, bounced, opened or had a link clicked, so we can see whether they are useful; we keep only the message reference, the event and its time, never the link you chose or your device details. To stop follow-ups, reply to any of them or email hello@glp1.ie. We also send ourselves a short alert with your email address and a reference number, so we can reply to you. That alert never includes your health answers. If delivery fails, your saved request and the on-page shortlist are unaffected. We do not sell your data, and we only share your details with a provider if you ask us to introduce you.

The quiz is an illustrative screening tool, not a medical assessment, and no automated decision with legal or similar effect is made about you. We keep lead records until the requested follow-up is complete and the record is no longer reasonably needed to handle it, unless the law requires longer retention. You can withdraw consent or ask us to delete your record at any time by emailing hello@glp1.ie.

Introductions to a provider

We only pass your details to a provider if you ask us to, and only with your explicit consent.

If you ask to be introduced in the eligibility check, we send your first name, email address, phone number (if you gave one) and the quiz answers listed where you asked: your BMI band, height, weight, the health conditions you ticked and the medicine you are interested in.

Some of our emails have an “Introduce me” link or button. It opens a GLP-1.ie page showing the same wording and button as the eligibility check, and asking there counts exactly as asking in the eligibility check: we send the same details, to the one provider named on that page, and you can withdraw in the same way.

If you ask by replying YES to one of our emails that names a provider, we pass only the contact details that email describes (your name and email address, and a phone number only if you add one to your reply), never your quiz answers, and only once that provider has agreed to receive introductions. We keep your reply as the record of your consent. Otherwise it is handled the same way: we send your details only to the provider that email names, and you can withdraw in the same way.

However you ask, we send your details only to the one provider named when you asked, so they can contact you about a consultation, and only with your explicit consent. From then on, that provider looks after your details under its own privacy policy.

Changed your mind? Email hello@glp1.ie at any time. We will record that you withdrew, stop any introduction not yet made and ask the provider to delete what we sent.

We keep a record of your request, the provider named in it, the exact wording you agreed to and when. If no introduction happens, we delete the request after 12 months.

Price and stock alerts

If you request price and stock updates, we store your email address, consent, page path, and the source label for that request. The same Turnstile-protected submission service checks and stores it. We do not send an automatic signup confirmation for price alerts. We have not started sending price update emails yet; we will use the address only for those updates, if and when we start. You can withdraw that request at any time by emailing hello@glp1.ie.

HSE decision alert

If you ask to be told when the HSE decides on funding, we store your email address, consent, page path, and the source label for that request, checked and stored by the same Turnstile-protected submission service. We do not send a signup confirmation. We will send you one email shortly after the HSE announces a reimbursement decision on Wegovy or Mounjaro for weight management, and nothing more unless you ask. We never use that address for price updates or anything else. You can withdraw that request at any time by emailing hello@glp1.ie.

Ireland availability alerts

On our pages about weight-loss medicines that are not yet available in Ireland, such as retatrutide, you can ask to be told when one becomes available through an Irish prescriber. We store your email address, consent, page path, and the source label that names the medicine, checked and stored by the same Turnstile-protected submission service. We do not send a signup confirmation. We will send you one email once we confirm that medicine has become available through an Irish prescriber, and nothing more unless you ask. We never use that address for anything else. You can withdraw that request at any time by emailing hello@glp1.ie.

Cookies and consent

Analytics cookies are optional and the analytics tools load only after you accept them in the cookie banner. If you decline, neither Google Analytics nor PostHog loads or transmits analytics data. Your choice is remembered in your browser, and you can change it at any time using the “Cookie preferences” link in the footer. Quiz answers are never sent to analytics tools whichever choice you make.

Analytics

The site uses Google Analytics 4 and PostHog to understand aggregate page views, traffic sources, outbound provider clicks, and whether key comparison tools are being used. Analytics data helps improve the site and does not let us prescribe, diagnose, or identify your medical suitability. Google may process analytics data outside the EU under the EU–US Data Privacy Framework.

Separately, we count page views with Vercel Web Analytics, which is built into our hosting. It sets no cookies and stores nothing on your device, so it runs whether or not you accept analytics cookies. It records the page address (without any query string), the referring site, and your broad location, device and browser type. Vercel does not store your IP address; it uses a daily-changing hash that cannot identify you or follow you across sites. It also counts anonymous steps through the site's tools: seeing and reaching each quiz step, the measurement units chosen, whether a request saved or the security check failed to load, which provider page a visitor was sent to, use of the cost planner, the price alerts, the HSE decision alert and the availability alerts, which one-tap answer was chosen on the page our check-in email links to and the answer to its one follow-up question, and whether the cookie banner was accepted or declined. These counts never include your quiz answers, measurements, BMI, name, email or any price you enter, and the quiz counts that its result was shown without saying which result. The quiz shows provider links only for results with a BMI of 27 or above, so a counted click on one of them came from such a result; the count itself carries only the provider and its place in the list. We use these aggregate counts, under our legitimate interest in knowing which pages and tools people use, to maintain and improve the site.

Session replay

PostHog session replay is only allowed on general public content pages. It is switched off on the homepage and for eligibility, provider, outbound, contact, partnership, privacy, and private pitch routes. Inputs and form areas are masked or blocked, and analytics events must not include names, emails, phone numbers, BMI, weight, medical answers, payment identifiers, tokens, or raw search text.

Outbound links

When you click a provider link, the site may record an outbound click event and then send you to the provider website. The provider's own privacy policy applies once you leave GLP-1.ie.

Contact emails

If you email us, we use the information you provide to respond to your message, handle corrections, or discuss partnerships. Do not send sensitive medical records or emergency medical information by email.

Partner subscriptions

Businesses that buy a verified partner profile are billed through Stripe. Stripe processes the card payment. We receive the business name, email address, billing address and payment status from Stripe, never the full card number, and use them only to run that subscription and profile. We process them to perform the subscription contract and to meet our legal accounting and tax duties, and we keep the billing records for as long as Irish tax and company law requires us to keep accounting records. Visitors to the site are never billed.

Affiliate links

Some links may become affiliate links. Affiliate tracking may involve a partner network or provider website setting cookies after you leave GLP-1.ie.

Your rights

Under the GDPR you can ask for a copy of the personal data we hold about you, ask us to correct or delete it, and withdraw any consent you have given, at any time, by emailing hello@glp1.ie. You also have the right to lodge a complaint with the Data Protection Commission (dataprotection.ie), Ireland's supervisory authority.