Privacy Policy

Lynda Nolan Psychotherapy
Dublin Southwest

Lynda Nolan is committed to protecting your privacy and ensuring that your personal data is handled securely and in accordance with:

• The General Data Protection Regulation (EU) 2016/679 (GDPR)
• The Data Protection Acts 1988–2018 (Ireland)
• Professional ethical guidelines of the Irish Association for Counselling and Psychotherapy (IACP) / Psychological Society of Ireland (PSI), where applicable

Your privacy and confidentiality are central to the therapeutic relationship.

1. Who Is Responsible for Your Data

The Data Controller is:

Lynda Nolan
Psychotherapist
Dublin Southwest
Email: [Insert professional email]

2. What Information Is Collected

Depending on your interaction with the practice, personal data collected may include:

• Name
• Address
• Email address
• Telephone number
• Date of birth
• GP details (if relevant)
• Emergency contact information
• Session notes and clinical information
• Payment details (where applicable)

Only information necessary to provide psychotherapy services is collected.

3. How Your Information Is Collected

Information may be collected when you:

• Complete a website contact form
• Send an email
• Make a phone enquiry
• Attend sessions
• Provide information during assessment

When visiting the website, technical information such as IP address and browser type may be collected for statistical and security purposes.

4. Lawful Basis for Processing

Your personal data is processed under one or more of the following lawful bases:

• Consent (for responding to enquiries)
• Contractual necessity (to provide therapy services)
• Legal obligation (professional record-keeping requirements)
• Legitimate interests (practice management and service delivery)

You may withdraw consent at any time where consent is the lawful basis.

5. How Your Information Is Used

Your information is used to:

• Respond to enquiries
• Arrange and manage appointments
• Provide psychotherapy services
• Maintain clinical records
• Comply with legal and ethical obligations
• Manage billing and payments

Your information will never be sold or used for marketing purposes without your explicit consent.

6. Confidentiality

Confidentiality is a core principle of psychotherapy practice.

Information shared in sessions is confidential except in the following circumstances:

• Where there is risk of serious harm to you or others
• Where there are legal obligations (e.g. court order)
• Where required under child protection legislation
• For professional supervision (all supervision is conducted confidentially and anonymised in line with IACP/PSI guidelines)

These limits to confidentiality will be discussed at the beginning of therapy.

7. Storage and Retention of Data

Client records are stored securely (electronically and/or in locked filing systems).

In line with professional and insurance requirements, records are typically retained for 7 years after the end of therapy (or 7 years after a minor reaches the age of 18), unless otherwise required by law.

After this period, records are securely destroyed.

8. Website Contact Forms

Information submitted via the website contact form is stored securely and retained only as long as necessary to respond to your enquiry.

If you do not proceed with therapy, your details will be deleted within a reasonable timeframe.

9. Data Sharing

Your personal data will not be shared with third parties except:

• With your written consent
• Where legally required
• With professional supervisors (anonymised)
• With secure service providers (e.g. encrypted email or hosting services)

Where cloud-based services are used, appropriate GDPR safeguards are in place, including compliance with Chapter 5 GDPR regarding international data transfers.

10. Cookies

The website may use cookies to improve user experience. Cookies do not collect sensitive personal data. You may disable cookies through your browser settings.

11. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure (where applicable)
• Restrict processing
• Object to processing
• Request data portability

Requests will be responded to within 30 days.

If you are not satisfied with how your data is handled, you may lodge a complaint with:

Data Protection Commission (Ireland)
www.dataprotection.ie

12. Changes to This Policy

This Privacy Policy may be updated from time to time. The most current version will always be available on the website.

Contact

If you have any questions regarding this Privacy Policy or your data:

Lynda Nolan
Dublin Southwest
Email: [Insert professional email address]