Privacy Policy

Therapy depends on trust, and that includes trusting what happens to your information. This page explains, in plain language, what Owen Lynch Psychotherapy collects, why, where it is kept, and the rights you have over it under the General Data Protection Regulation (GDPR).

Who is responsible for your data

Owen Lynch is the data controller for all personal information handled by this practice. You can reach me about anything on this page at info@owenlynchtherapy.com or 085 147 1689. In-person sessions take place at Insight Matters, 106 Capel Street, Dublin.

What I collect, and why

• Contact and waiting-list enquiries — your name, email and phone number, so I can reply to you. Waiting-list entries are kept only until you become a client, ask to be removed, or the entry goes stale.
• Intake information — when you become a client you complete an intake form covering your contact details, relevant history and consent. This is clinical information and is treated with the highest level of care.
• Session and payment records — appointment dates, attendance, fees and receipts, kept because I am professionally and legally required to keep accurate records.
• Basic website analytics — anonymous usage statistics that help me understand how people find the site. Nothing here identifies you.

The lawful bases are: taking steps to enter and perform our therapy agreement (contract), legal obligations around records and accounts, and your consent for the waiting list and reminder emails — which you can withdraw at any time (every reminder includes an opt-out link).

Where your data lives

Records are stored in a private, access-controlled database hosted in the European Union (Supabase). Email is sent through Resend. Card payments are processed by Stripe — your card details go directly to Stripe and are never seen or stored by this practice. Appointments sync with Google Calendar. The website is hosted on Vercel. Each of these providers processes data under a GDPR data-processing agreement. Your information is never sold or shared for marketing.

How long I keep it

• Clinical records (intake, sessions) — 7 years after our last contact, in line with professional record-keeping guidance, then deleted.
• Unused intake links — deleted automatically 30 days after they expire.
• Waiting-list entries — deleted once no longer needed, or immediately on request.
• Financial records (receipts) — kept as required by Revenue rules.

Your rights

You can ask at any time to see the information I hold about you, have mistakes corrected, receive a copy, or — subject to the record-keeping obligations above — have it deleted. Just email info@owenlynchtherapy.com. If you are unhappy with how your information has been handled you can complain to the Data Protection Commission (dataprotection.ie).

Confidentiality

Beyond data protection law, everything you share in therapy is held in professional confidence, with the narrow exceptions required by law or to prevent serious harm — which I explain fully before we begin working together.