1. Who We Are

Trust Therapy is a psychotherapy and counselling practice operated by Aoife Farrell.

For the purposes of the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, Trust Therapy is the Data Controller for personal data collected through this website.

Contact details:

2. What Personal Data We Collect

We collect the following types of personal data through this website:

Contact Form

  • Full name

  • Email address

  • Phone number

Please be aware that if your message contains information about your mental or physical health, this constitutes Special Category Data under GDPR (Article 9) and is afforded additional protection. We recommend keeping initial enquiries general where possible.

E-Commerce (Gift Cards/Events)

  • Name and billing address

  • Email address

  • Any personal information you include in your message

  • Payment details — these are processed securely by Squarespace/Stripe and are not stored by us directly

Website Usage Data

  • IP address

  • Browser type and version

  • Pages visited and time spent on the site

  • Cookie data (see Section 8)

3. How We Use Your Data

We use your personal data only for the following purposes:

  • To respond to enquiries submitted via the contact form

  • To process gift card/event purchases and handle related transactions

  • To communicate with you about your enquiry or appointment

  • To deliver online therapy sessions via Whatsapp/Zoom/Microsoft Teams when agreed

  • To comply with our legal and professional obligations

  • To maintain the security and functionality of this website

We do not use your personal data for marketing or promotional communications.

4. Legal Basis for Processing

Under GDPR, we are required to identify a lawful basis for processing your personal data. We rely on the following:

  • Consent — where you submit a contact form or enquiry, we process your data on the basis of your consent

  • Contractual necessity — to process gift card/events purchases and fulfil service agreements

  • Legitimate interests — to respond to general enquiries, maintain website security, and improve our services

  • Legal obligation — where we are required to retain records under Irish law

For any Special Category Data (such as health information you may include in an enquiry), we will only process this data on the basis of your explicit consent.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We may share your data only with the following third-party service providers who assist us in operating this website and practice:

  • Squarespace Inc. — our website hosting and e-commerce platform (USA; transfers protected by Standard Contractual Clauses)

  • Stripe — payment processing for gift card purchases (USA; transfers protected by Standard Contractual Clauses)

  • Whatsapp/Zoom Video Communications / Microsoft Teams — for the delivery of online therapy sessions

All third-party processors are required to handle your data securely and in accordance with GDPR. We do not authorise them to use your data for their own purposes.

We may also disclose your data where required to do so by law, court order, or regulatory authority.

6. International Data Transfers

Some of our third-party service providers (including Squarespace and Stripe) are based in the United States. Where your personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in line with GDPR requirements.

7. How Long We Keep Your Data

We retain your personal data only for as long as is necessary for the purposes for which it was collected:

  • Contact form enquiries: up to 12 months, unless they lead to an ongoing client relationship

  • Client session and correspondence records: a minimum of 7 years in line with Irish professional and legal guidelines

  • Payment and transaction records: 7 years as required by Irish tax legislation

  • Website analytics data: as determined by Squarespace’s data retention settings

After the applicable retention period, data is securely deleted or anonymised.

8. Cookies

This website uses cookies — small text files stored on your device — to help the site function correctly and to analyse visitor behaviour. Cookies used include:

  • Essential cookies: required for the website to function (e.g. shopping cart, session management)

  • Analytics cookies: used by Squarespace to understand how visitors use the site

Under Irish ePrivacy Regulations, we require your consent before placing non-essential cookies on your device. You will be asked to accept or manage your cookie preferences when you first visit the site. You can update your preferences at any time.

9. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

  • Right of access — you may request a copy of the personal data we hold about you

  • Right to rectification — you may ask us to correct inaccurate or incomplete data

  • Right to erasure — you may request deletion of your data (subject to legal retention obligations)

  • Right to restrict processing — you may ask us to limit how we use your data

  • Right to data portability — you may request your data in a structured, commonly used format

  • Right to object — you may object to processing based on legitimate interests

  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at contact@trusttherapy.ie. We will respond within one month of receiving your request.

10. Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC):

  • Website: www.dataprotection.ie

  • Phone: +353 (0)57 868 4800

  • Address: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28

We would, however, appreciate the opportunity to address your concerns directly before you contact the DPC. Please reach out to us at contact@trusttherapy.ie in the first instance.

11. Data Security

We take the security of your personal data seriously. Appropriate technical and organisational measures are in place to protect your data against unauthorised access, loss, or disclosure. Our website is hosted on Squarespace, which maintains industry-standard security infrastructure.

Online therapy sessions are conducted via Whatsapp, Zoom or Microsoft Teams, both of which offer end-to-end encryption and comply with data protection standards. Clients are advised to use a private and secure connection when attending online sessions.

12. Children’s Data

This website is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has submitted personal data to us, please contact us immediately at contact@trusttherapy.ie and we will delete it promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The “Last Updated” date at the top of this page will indicate when the most recent changes were made. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the use of your personal data, please contact: