Safety

GDPR & Data Protection Policy

Play Therapy with Barbara · Barbara Keogh

I recognise the importance of protecting your privacy and the confidentiality of the personal and sensitive information shared with me during your child's therapeutic journey. Personal information is handled in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018, the Children First Act 2015, and relevant professional and ethical standards.

My commitment

• Protecting your privacy and the confidentiality of your family's information
• Safeguarding children and vulnerable persons
• Managing client records securely
• Processing personal data lawfully, fairly and transparently
• Using personal information only for legitimate clinical and administrative purposes

How information is used

Information you provide is used only for purposes directly related to your child's care and the running of the practice, including:

• Providing play therapy and related services
• Booking and managing appointments
• Communicating with you about appointments or therapy
• Maintaining clinical records
• Meeting legal, ethical and professional obligations

Data controller

Where information is stored

• Paper records are stored securely in a locked filing cabinet.
• Electronic records are password protected and stored using secure systems.
• Access to records is limited to Barbara Keogh, and, where relevant, to clinical supervision with identifying details anonymised.

Who your information may be shared with

Your information is never shared with commercial organisations. It will only be shared with another professional (such as a GP, psychologist, or other therapist) with your written consent, where required by law, or where there is a legal or ethical obligation to protect the safety or welfare of a child or another individual.

Record retention

In line with the retention schedule set out by Play Therapy Ireland (PTIRL) and Play Therapy UK (PTUK), clinical records — including client details, session records and confidential reports — are retained until the child's 26th birthday, after which they are securely destroyed.

Withdrawing consent

Where any data processing relies on your consent, you may withdraw that consent at any time, with future effect — an email to the address below is sufficient. Data already processed before a request is received may still be lawfully retained, particularly where clinical or legal record-keeping obligations apply.

Your rights

Under GDPR, you have the right to:

• Request access to the personal information held about you
• Request correction of inaccurate or incomplete information
• Request restriction of processing, where appropriate
• Request deletion of your information, where legally permissible

Please note there may be legal or professional reasons why certain records cannot be deleted immediately.

Right to complain

If you believe your personal information has not been handled appropriately, you have the right to lodge a complaint with Ireland's Data Protection Commission.

Website enquiries

Contacting Play Therapy with Barbara by phone or email is handled directly and personally — the website itself does not collect or store any information through a contact form. Any details you share by phone or email are used only to respond to your enquiry and are never sold, rented, or added to a mailing list without your explicit consent.

This website

This website does not use cookies, analytics, or any third-party tracking tools, and does not include a contact form. Visiting the site does not involve any personal data being collected or stored by this practice.

As with any website, the hosting provider may automatically record basic technical server data as part of normal operation — such as browser type, approximate time of access, and IP address — purely to keep the site running securely. This data is handled by the hosting provider, not by Play Therapy with Barbara directly, and is not used to identify individual visitors.

This site uses SSL/TLS encryption, shown by the padlock icon and "https://" in your browser's address bar, to protect any connection to the site.

If cookies, analytics, or a contact form are added to this website in future, this policy will be updated accordingly, along with any consent options required at that time.