Legal
Your Data Rights
Last updated: August 2026
Under the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988–2018, you have a number of rights regarding your personal data and the personal data of your child. This page explains those rights and how to exercise them.
Right of access
You can request a copy of all personal data we hold about you or your child. We will provide this within one month of your request at no charge.
Right to rectification
If any data we hold is inaccurate or incomplete, you can ask us to correct it. We will update records within one month.
Right to erasure
You can ask us to delete your personal data. Note that health records are subject to legal retention requirements (minimum 8 years, or until a child turns 25) and cannot be deleted within that period.
Right to restriction
You can ask us to pause processing your data (for example, while a dispute is being resolved) without requesting full deletion.
Right to portability
You can request your data in a structured, commonly used, machine-readable format (such as PDF or CSV) so it can be transferred to another provider.
Right to object
You can object to processing carried out on the basis of legitimate interests. We will stop unless we can demonstrate compelling grounds that override your interests.
Right to withdraw consent
Where processing is based on your consent, you can withdraw that consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.
How to make a request
Email engageotie@gmail.com with your name, the nature of your request, and (for requests relating to a child) confirmation that you are the child's parent or legal guardian. We will respond within one month. There is no charge for making a request.
How we protect your data
Session notes and reports are stored in Google Workspace with EU data residency. Video sessions are delivered via Google Meet, which is GDPR compliant as part of Google Workspace. Payment data is handled by Stripe and never stored on our systems. Access to records is restricted to the treating therapist only.
If you are unhappy with how we handle your data
You have the right to lodge a complaint with the Data Protection Commission (DPC), the supervisory authority in Ireland.
Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28
info@dataprotection.ie · dataprotection.ie