1. This policy outlines the measures and practices adopted by Bernadette Purcell to comply with the General Data Protection Regulation (GDPR) to protect the privacy and confidentiality of our clients’ personal data.
2. Data Controller
2.1 Bernadette Purcell is the Data Controller for Bernadette Purcell Soul Support. As the Data Controller, Bernadette Purcell determines the purposes and means of processing personal data.
3. Data Collected and Processed
3.1 Bernadette Purcell collects and processes the following categories of personal data for the purposes of providing therapy services:
Contact information (name, address, email, phone number)
Demographic information
Session notes and records
Billing and payment information
4. Legal Basis for Processing
4.1 Bernadette Purcell processes personal data based on the legal bases outlined in Article 6 of the GDPR, including the necessity of processing for the performance of a contract (providing services) and compliance with legal obligations.
5. Data Security Measures
5.1 Bernadette Purcell implements appropriate technical and organizational measures to ensure the security and confidentiality of personal data. This includes encryption of sensitive information, regular data backups, and access controls.
6. Data Subject Rights
6.1 Clients have the right to access, rectify, erase, or restrict the processing of their personal data. They also have the right to data portability and to object to the processing.
6.2 Requests regarding data subject rights should be directed to Bernadette Purcell at 105 Tyrconnell Park, Inchicore, Dublin 8 D08 DAOP.
7. Data Retention
7.1 Bernadette Purcell retains personal data for the duration necessary to provide services and as required by legal and regulatory obligations.
8. Third-Party Data Processors
8.1 Bernadette Purcell may engage third-party processors for specific services, such as billing or appointment scheduling. These processors are carefully selected, and contractual agreements are in place to ensure GDPR compliance.
9. Breach Notification
9.1 In the event of a data breach, Bernadette Purcell will notify the affected individuals and the relevant supervisory authority in accordance with GDPR requirements.
10. Updates to the GDPR Policy
10.1 This GDPR policy will be reviewed and updated regularly. Any changes will be communicated to clients and posted on our website.
11. Contact Information
11.1 For any questions or concerns regarding this GDPR policy, please contact Bernadette Purcell at 105 Tyrconnell Park, Inchicore, Dublin 8 D08 DAOP.
