Gealach Psychotherapy: Privacy & Data Protection Policy

1. Data Collection I collect personal information (name, contact details, GP details) and sensitive "Special Category" data (session notes) to provide safe and ethical psychotherapeutic services.

2. Purpose of Processing Your data is used solely to:

• Manage your appointments and communicate regarding your care.

• Maintain clinical records in accordance with IACP ethical guidelines and Irish law.

3. Data Storage & Security

• Digital Data: Any information stored electronically (emails or contact details) is kept on password-protected, encrypted devices.

• Clinical Notes: Session notes are anonymised (using a client code) and stored securely, separate from your identifiable contact information.

4. Confidentiality & Its Limits Confidentiality is a cornerstone of therapy. However, I am legally obliged to break confidentiality in the following circumstances:

• If there is a risk of serious harm to yourself or others.

• In cases involving the protection of children or vulnerable adults (Children First Act 2015).

• If ordered by a court of law.

5. Retention & Your Rights I retain records for 7 years following the end of our therapeutic relationship (as per insurance and professional requirements). Under GDPR, you have the right to:

• Access a copy of your personal data.

• Request the correction of any inaccurate information.

• Lodge a complaint with the Data Protection Commission (DPC).