Legal
Privacy Policy
Last updated: August 2026
Who we are
Engage OT is a paediatric occupational therapy service operating in Ireland. We are the data controller for personal data collected through this website and in the course of providing OT services. You can contact us at engageotie@gmail.com.
What data we collect
We collect the following categories of personal data: • Contact information: name, email address, phone number, and county of residence • Child's information: name, date of birth, school, and presenting concerns • Health information: diagnosis, referral history, developmental history, and assessment findings (this is special category data under GDPR) • Session records: notes, home programmes, and progress summaries • Reports: written clinical reports produced following assessment or intervention • Payment information: processed by Stripe; we do not store card details • Communications: emails and messages you send us
Legal basis for processing
We process your personal data on the following legal bases: • Contract performance (Article 6(1)(b)): to book and deliver sessions you have requested • Consent (Article 6(1)(a) and Article 9(2)(a)): for health and special category data, we obtain your explicit written consent before processing • Healthcare provision (Article 9(2)(h)): for processing health data as part of delivering occupational therapy services by a health professional • Legitimate interests (Article 6(1)(f)): for follow-up communications and service improvement
How we use your data
Your data is used to: • Schedule and deliver occupational therapy sessions • Produce clinical reports for your records, schools, or other professionals (with your consent) • Communicate with you about your appointments and progress • Process payments for sessions • Comply with professional and regulatory obligations
Who we share data with
We use the following third-party processors: • Calendly: appointment scheduling (US-based, operates under Standard Contractual Clauses) • Stripe: payment processing (compliant with PCI-DSS) • Google Meet: video sessions (GDPR compliant, part of Google Workspace) • Google Workspace: email and document storage (EU data residency enabled) We do not sell or share your personal data with any third parties for marketing purposes. Reports are shared with schools or other professionals only with your explicit written consent.
Data retention
We retain health records for a minimum of 8 years from the date of last contact, or until a child reaches the age of 25, whichever is longer, in line with Irish health service guidance. Contact and billing records are retained for 7 years for tax and accounting purposes. You may request deletion of your data subject to these legal retention requirements.
Your rights
Under GDPR, you have the right to: • Access: request a copy of the personal data we hold about you • Rectification: ask us to correct inaccurate data • Erasure: ask us to delete your data, where no legal retention obligation applies • Restriction: ask us to restrict processing while a dispute is resolved • Portability: receive your data in a structured, machine-readable format • Object: object to processing based on legitimate interests To exercise any of these rights, email us at engageotie@gmail.com. We will respond within one month.
Cookies
This website uses only essential cookies required for the site to function. We do not use advertising or tracking cookies. No third-party analytics scripts are loaded without your consent.
Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Data Protection Commission (DPC), the supervisory authority in Ireland. Data Protection Commission 21 Fitzwilliam Square South Dublin 2, D02 RD28 info@dataprotection.ie www.dataprotection.ie
Changes to this policy
We may update this policy from time to time. The current version will always be available at this URL. Material changes will be communicated by email.
Questions about this policy? engageotie@gmail.com