Privacy Policy
How Ceangal collects, uses and protects personal information
Last updated: July 2026
About this policy
Ceangal Speech & Language Therapy is committed to protecting your privacy and handling personal information responsibly and securely.
This policy explains what information Ceangal collects, why it is used, how it is protected and the rights you have under the General Data Protection Regulation (GDPR) and Irish data-protection law.
Ceangal is operated by Doireann Molloy, a CORU-registered Speech and Language Therapist (SL042707).
Email: hello@ceangalslt.ie
Website: www.ceangalslt.ie
Information we collect
Depending on how you interact with Ceangal, information collected may include:
Your name, date of birth and contact details
Parent, guardian or representative details, where relevant
Emergency contact information
Referral information and relevant professional reports
Information about communication, health, education, employment and support needs
Assessment findings, clinical notes, goals and therapy plans
Appointment, attendance, invoice and payment information
Emails, forms and other communications
Technical information collected when you use the website or an online service
Health information is considered special-category personal data and receives additional protection under the GDPR.
Where information comes from
Information is normally provided directly by you or, where appropriate, by a parent, guardian or authorised representative.
With your knowledge or where otherwise permitted by law, information may also be received from another professional, school, college, employer, healthcare provider or organisation involved in your support.
How we use information
Information may be used to:
Respond to enquiries
Decide whether Ceangal is an appropriate service
Arrange and manage appointments
Provide assessment, consultation and therapy
Develop and review collaborative goals
Prepare clinical notes, recommendations and reports
Communicate with clients and relevant authorised people
Manage invoices and payments
Maintain safe and effective professional practice
Meet legal, regulatory, insurance and safeguarding responsibilities
Improve the quality and accessibility of the service
Legal bases for using information
Ceangal only processes information where there is a lawful basis to do so.
Depending on the circumstances, this may include providing an agreed service, taking steps requested before providing a service, meeting legal and professional obligations, protecting someone’s vital interests, or pursuing a legitimate interest that does not override the individual’s rights.
Where health information is necessary for speech and language therapy assessment or treatment, it is generally processed under Article 9(2)(h) GDPR for the provision of health or social care, subject to professional confidentiality.
Explicit permission may be requested for optional activities such as recording a session, sharing information where another lawful basis does not apply, or sending marketing communications.
Confidentiality and sharing
Clinical information is treated as confidential. Ceangal will normally seek your agreement before sharing identifiable information with another person or service.
Information may need to be shared without prior agreement where this is necessary and lawful, including where there is:
A serious concern about someone’s safety or welfare
A safeguarding concern
A legal or court requirement
A regulatory or insurance obligation
A need to establish, exercise or defend a legal claim
Only information necessary for the relevant purpose will be shared.
Professional supervision or consultation may be used to support safe practice. Information will be anonymised wherever reasonably possible.
Services we use
Ceangal uses trusted service providers to operate the practice. These may include:
Cliniko for client records, forms, appointments, communications, telehealth and invoices
Google Workspace, Google Forms and Google Meet for email, enquiries, documents and online appointments
Squarespace for website hosting and website enquiries
Stripe for secure card and online-payment processing
Revolut Pro for business banking and payment records
Professional advisers, insurers, IT providers and regulatory bodies where necessary
Ceangal does not store complete card details. Payment providers process those details directly.
Some providers may process information outside Ireland or the European Economic Area. Where this occurs, an approved transfer mechanism and appropriate safeguards will be relied upon.
Online appointments
Online appointments may be delivered through Cliniko telehealth or Google Meet, depending on the needs of the appointment.
Sessions are not recorded by Ceangal unless recording has been specifically discussed and separate explicit permission has been obtained. Clients should not record sessions without agreement from everyone involved.
Keeping information secure
Ceangal uses reasonable technical and organisational measures to protect information. These include secure passwords, access controls, device security, restricted access to clinical information and reputable clinical and payment systems.
No method of electronic storage or communication can be guaranteed to be completely risk-free.
How long information is kept
Information is retained only for as long as necessary to provide the service and meet professional, legal, tax, insurance and safeguarding responsibilities.
Ceangal’s current retention approach is:
Enquiries that do not proceed: normally up to 12 months after the last contact
Adult clinical records: normally 8 years after the last clinical contact
Records relating to someone under 18: normally until at least their 25th birthday, or 8 years after the last clinical contact if later
Invoices, payment and accounting records: normally 6 years after the relevant accounting period
Complaints, safeguarding information or material relevant to a claim: for as long as reasonably necessary
Records may be kept longer where a legal, safeguarding, regulatory or insurance requirement applies. At the end of the relevant period, information will be securely deleted or anonymised.
Children and young people
Where a client is under 18, Ceangal may collect information about both the young person and their parent or guardian.
Consent, confidentiality and access to information will be considered in light of the young person’s age, understanding, wishes, best interests and applicable law. Young people will be involved in decisions about their information in a way that is appropriate to them.
Your privacy rights
Depending on the circumstances, you may have the right to request:
Access to your personal information
Correction of inaccurate information
Erasure of information
Restriction of processing
Objection to processing
Data portability
Withdrawal of consent where consent is being relied upon
Some rights may be limited where records must be retained for clinical, legal, safeguarding, insurance or regulatory reasons.
Requests should be sent to hello@ceangalslt.ie. Identity may need to be verified before information is released.
Ceangal does not use solely automated decision-making or profiling that produces legal or similarly significant effects for clients.
Website cookies
Squarespace may use cookies or similar technologies that are necessary to operate and secure this website.
Ceangal does not currently intentionally use advertising cookies or behavioural profiling tools. If optional analytics, advertising or other non-essential technologies are introduced, this policy and any required cookie choices will be updated.
Questions or complaints
Questions or concerns about privacy can be sent to hello@ceangalslt.ie.
You also have the right to complain to the Data Protection Commission:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
www.dataprotection.ie
Changes to this policy
This policy will be reviewed periodically and updated when Ceangal’s services, systems or legal obligations change. The most recent version will remain available on this website.