GDPR Policy Statement
GDPR - Data Policy
This practice is subject to the requirement of the General Data Protection Regulation 2018 (GDPR) and the Irish Data Protection Act 2018.
Our compliance with these Acts and Regulations and in line with the FTAI Code of Professional and Practice and the FTAI Code of Ethics ensure that we will apply appropriate protection and management of any information that you share with us. The information that you submit will be subject to the highest standards of security using a clinician management platform that requires encryption and a dual system of authentication for access.
The personal contact information that you have supplied to the practice will only be used to:
-Deliver therapy
-Schedule appointments
- Invoicing and billing
-Used for an emergency contact or interdisciplinary practice with the written and signed consent of the client.
Only the clinician, Oonagh Ryan will have access to this information. In extraordinary circumstances, she may be required by law to surrender records to a legal authority.
Data Controller
Please contact the data controller in all matters relating to your records. The data controller for this practice is Oonagh Ryan. Oonagh can be contacted by email at: oonaghryanfamilytherapy@outlook.com and by phone on 089 435 7715. Oonagh can also be reached by mail at 9 Mine Hill Business Centre, Kilternan, Co Dublin, D15 P5Y0.
Where is the data stored?
All Client data is stored electronically on a secure clinical management system. Access to this system is held only by Oonagh Ryan. Data held on this system is encrypted and clinician access requires a dual authentication process with two separate devices. Client notes are anonymised and coded to further protect confidentiality and privacy.
Phone numbers for clients will be stored on the practice phone in case of emergency - clients numbers will be stored using a non identifying code - no names will be used.
Who has access to your data?
Oonagh Ryan will have access to your data to access notes and records for the purpose of delivering therapy. Oonagh will also have access to your data for the purposes of scheduling appointments and invoicing.
At no time, nor under any circumstances will your data be shared with any commercial enterprise or organization. We will not share any records or data with any other therapist, GP, or allied professional unless give clear and written permission by the client as part of the therapeutic process.
How long is data retained?
All records must be retained for a period of seven years. However all records can be requested to be destroyed as part of GDPR article 17 - the right to be forgotten.
Your rights regarding your data…
Your can request to see your data at anytime. We will ensure that you have access to them within 14 days. Your records will be sent to you as an encrypted file that will require a separately sent code to access your requested information or data..