Vera Mental Health Clinic

 

1. Introduction

 

This Privacy Policy explains how Vera Mental Health Clinic (“Vera”, “we”, “our”) collects, uses, stores, and protects personal and clinical information provided by individuals who access our services.

 

Vera Mental Health Clinic is committed to safeguarding privacy, confidentiality, and personal dignity in accordance with:

​

- The General Data Protection Regulation (GDPR)

- The Data Protection Acts 1988–2018 (Ireland)

- Applicable ethical, professional, and safeguarding obligations within psychological practice

​

This policy applies to all services provided by Vera Mental Health Clinic, including but not limited to psychological therapy, clinical assessments, consultations, administrative processes, and digital communications.

 

2. Lawful Basis for Processing

 

Personal and clinical data are processed lawfully, fairly, and transparently under one or more of the following GDPR lawful bases:

- Explicit consent of the client

- Provision of healthcare or psychological services

- Compliance with legal or regulatory obligations

- Protection of vital interests, including safeguarding and risk management

 

By engaging with Vera Mental Health Clinic services, clients acknowledge and consent to the collection and processing of personal data as outlined in this policy, subject to their GDPR rights.

 

3. Categories of Personal and Clinical Data Collected

 

Vera Mental Health Clinic collects only data that is necessary, relevant, and proportionate for clinical and operational purposes. This may include:

​

- Identifying information (name, date of birth, contact details)

- Emergency contact details

- Relevant medical, psychological, or mental health history

- Assessment outcomes, session notes, and clinical records

- Administrative and correspondence records

 

Information is collected directly from clients and, where appropriate, from authorised third parties (such as GPs or healthcare professionals), only with client consent or where legally required.

 

4. Purpose of Data Processing

 

Personal and clinical data are processed strictly for the following purposes:

​

Delivery of psychological and mental health services

Clinical assessment, formulation, and treatment planning

Continuity, safety, and quality of care

Appointment scheduling, communication, and administration

Clinical governance, supervision, and quality assurance

Safeguarding, risk assessment, and legal compliance

 

All data is processed on a strict need-to-know basis and is never used in a manner incompatible with therapeutic, ethical, or professional standards.

 

5. Confidentiality and Disclosure

 

All therapy sessions, assessments, and clinical records are treated as strictly confidential.

 

Information may only be disclosed where:

​

- There is a legal or regulatory obligation

- There is a risk of serious harm to the client or others

- Safeguarding concerns arise

- The client has provided explicit, informed consent

​

Where appropriate and safe to do so, disclosures are discussed with the client in advance.

​

6. Data Storage, Retention, and Security

 

Client information is stored securely using encrypted, GDPR-compliant clinical record systems.

​

Access to personal and clinical data is restricted to authorised clinical or administrative personnel only.

 

Vera Mental Health Clinic implements appropriate technical and organisational measures to protect data against unauthorised access, accidental loss, misuse, or disclosure.

 

Data is retained only for as long as necessary to meet clinical, legal, and professional obligations.

 

7. Payments and Financial Data

 

Payment information is processed securely via GDPR-compliant third-party payment providers.

​

Vera Mental Health Clinic does not store full card or sensitive financial details. All financial processing adheres to recognised data security and confidentiality standards.

 

8. Website, Cookies, and Digital Data

 

The Vera Mental Health Clinic website may use essential cookies and limited analytics tools to ensure functionality and improve user experience.

 

Website data does not include clinical, therapeutic, or session-related information. Users may manage cookie preferences through their browser settings. A separate Cookies Policy may apply.

 

9. Client Rights under GDPR

 

Under the GDPR, clients have the right to:

​

- Access their personal data

- Request rectification of inaccurate or incomplete data

- Request erasure where legally appropriate

- Request restriction of processing

- Object to certain processing activities

- Lodge a complaint with the Data Protection Commission (Ireland)

 

Requests can be made by contacting Vera Mental Health Clinic directly. Requests will be responded to within the timeframes required by law.

 

10. Policy Updates

 

This Privacy Policy may be updated periodically to reflect changes in legal requirements, clinical practice, or operational procedures.

 

The most current version will always be available on our website.

 

11. Contact

 

For any questions, concerns, or requests relating to this Privacy Policy or data protection practices, please contact:

 

Vera Mental Health Clinic

Email: info@veramentalhealth.ie

www.veramentalhealth.ie