Privacy Policy

CBT Online Ireland is committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988-2018 of Ireland. This privacy policy outlines how we collect, use, store, and protect your personal data when you visit our website and engage with our services.

1. Who We Are

CBT Online Ireland provides online psychotherapy and counselling services to adults in Ireland. Our registered business address is [insert address here], and we are responsible for handling your personal information in accordance with Irish data protection laws.

2. What Information We Collect

When you visit our website or use our services, we may collect and process the following types of personal data:

- Personal identification information: such as your name, email address, phone number, and billing details when you book or inquire about our services.

- Health information: data you provide during therapy sessions or consultations (this is considered sensitive personal data and handled with the highest confidentiality).

- Technical data: such as IP address, browser type, and browsing patterns through cookies (see below for cookie policy).

We will never collect more data than is necessary for the provision of our services.

3. How We Use Your Information

We process personal data to:

- Provide, manage, and improve our online therapy services.

- Respond to your inquiries and appointments.

- Ensure secure communication between you and your therapist.

- Maintain accurate client records.

- Comply with legal obligations or as required for audit purposes.

All sensitive health data collected during therapy sessions will only be processed with your explicit consent.

4. Legal Basis for Processing

Under GDPR, we rely on the following legal bases for processing your personal data:

- Contractual necessity: To provide the psychotherapy services you have requested.

- Legal obligation: To comply with regulatory requirements.

- Consent: For sensitive data related to health. You may withdraw your consent at any time by contacting us at [insert contact email].

5. How Long We Retain Your Data

We will retain your personal data only for as long as is necessary to fulfill the purpose for which it was collected or as required by legal, accounting, or reporting obligations. In most cases, client records will be kept for a minimum of seven years following the end of therapy to comply with professional and legal obligations.

6. Sharing of Data

Your data will not be shared with any third parties unless required by law or to comply with legal obligations. We do not sell, rent, or share personal information for marketing purposes.

Where it is necessary to share your data (e.g., with payment processors or in the case of a legal request), we ensure that all third parties adhere to GDPR requirements and have appropriate safeguards in place.

7. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

- Right to access: You can request a copy of the personal data we hold about you.

- Right to rectification: You have the right to correct any inaccurate data.

- Right to erasure: You can request that we delete your personal data, subject to legal and professional retention obligations.

- Right to restrict processing: You may request a restriction on the processing of your data under certain conditions.

- Right to data portability: You can request that your personal data be transferred to another service provider.

- Right to object: You can object to the processing of your data in some instances.

To exercise any of these rights, please contact us at [insert contact email]. We will respond to your request within one month.

8. Data Security

We take your privacy and the security of your data very seriously. We have implemented technical and organizational measures to safeguard your personal information against unauthorized access, loss, or misuse. All communications between you and our therapists are encrypted, and sensitive information is securely stored and accessed only by authorized personnel.

9. Cookies

Our website uses cookies to improve user experience and analyze website traffic. A cookie is a small text file placed on your device. You can manage or disable cookies through your browser settings, but this may affect the functionality of our website. For more information, please review our [Cookie Policy].

10. Changes to This Privacy Policy

CBT Online Ireland reserves the right to update this Privacy Policy at any time. We will notify you of any significant changes by posting the new policy on our website. Please review this policy periodically to stay informed about how we protect your personal data.

11. Contact Us

If you have any questions or concerns about this privacy policy or how your data is handled, please contact:

Data Protection Officer  

CBT Online Ireland  

[fitzsimons.paul@gmail.com]  

[+353 876279632]

If you believe your data has been processed unlawfully, you have the right to file a complaint with the Data Protection Commission (DPC) in Ireland at [www.dataprotection.ie](https://www.dataprotection.ie).

This privacy policy is effective as of [12/10/2024] and complies with GDPR regulations applicable in Ireland.