Privacy Policy

Data Controller: Lorna Boyle of Lorna Boyle Therapy

Email: lornaboyletherapy@gmail.com

Phone: 083 381 5651

Website: https://www.lornaboyletherapy.com/

As a practising psychotherapist based in Ireland, I am committed to protecting and respecting your privacy. This Privacy Policy explains how I collect, use, store, share and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Changes to this policy:

I may update this Privacy Policy from time to time to reflect changes in practices or legal requirements. Any updates will be posted on this page with a revised date.

Last Updated: 03.01.2026

What Personal Data I Collect

I collect and process personal data about you when you engage with my services, including when you:

Contact me via email, phone or website forms

Attend therapy sessions

Complete intake forms or questionnaires

Types of personal data may include:

• Name and contact details (email, phone, address)

• Personal and health information relevant to your therapy

• Emergency contact information

• Session notes and therapeutic records

• Payment/billing information

• Communication records (email/text)

Sensitive personal data (e.g., health information) is only collected if it is essential for the assessment and provision of therapy services.

Legal Basis for Processing Your Data

Your personal data is processed on the following lawful bases:

• Performance of a contract — to provide psychotherapy services to you.

• Legal obligation — to maintain records for professional and regulatory purposes.

• Explicit consent — where required (especially for sensitive personal data).

• Legitimate interests — to communicate with you, respond to enquiries, and manage appointments.

How Your Data Is Used

Your personal data is used for:

Assessing and delivering therapy services

Communicating with you about appointments and queries

Treatment planning and clinical records

Processing billing and payments

Meeting legal and professional record-keeping obligations

Your data will not be used for marketing or shared with third parties for advertising purposes.

Data Sharing and Confidentiality

Your personal information will be kept strictly confidential and will not be shared with third parties except when:

You have given explicit consent

Required by law (e.g., in cases of risk of serious harm)

Required for professional supervision while maintaining confidentiality

Required by regulatory or statutory bodies

Any service providers involved (e.g., secure record-keeping or IT support) are GDPR-compliant.

Data Retention

I retain personal and therapy records only for as long as necessary to fulfil clinical, legal, and professional obligations. In line with Irish guidelines, clinical records are usually retained for a minimum of 7 years after the end of therapy. After this period, data is securely deleted or anonymised.

Website Data and Cookies

My website may collect basic technical data (e.g., IP address, browser type) to help with website analytics.

If any cookies or tracking tools are used on this site beyond essential functionality, you will be notified and asked to consent.

Your Rights Under GDPR

You have legal rights concerning your data, including:

Right of access — request a copy of personal data held about you

Right to rectification — correct inaccurate data

Right to erasure — request your data be deleted (where lawful)

Right to restrict processing — limit how your data is used

Right to object — oppose certain types of processing

Right to data portability — where applicable

Right to withdraw consent at any time

dublinpsychotherapist.ie

To exercise any of these rights, please contact me at lornaboyletherapy@gmail.com

.

Data Security

I take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure or damage. These include encrypted digital storage, secure files, and access-controlled systems.

Complaints

If you believe your data has been handled improperly, you can lodge a complaint with the Data Protection Commission (DPC) in Ireland:

Data Protection Commission

21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland

Website: https://www.dataprotection.ie

Phone: +353 76 110 4800