Privacy Policy

Clíona Brady Healing

Website: clionabrady.ie
Email: hello@clionabrady.ie
Last updated: 02/09/2026
1. Introduction

I'm committed to protecting and respecting your privacy.
This Privacy Policy explains how I collect, use and protect your personal data, in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (Ireland).
By using this website or engaging in my services, you agree to the practices described in this policy.

2. Who I Am

I'm Clíona Brady, trading as Clíona Brady Healing, based in Shrule, Co. Mayo, Ireland. I'm the data controller for the personal data described in this policy.

3. Information I Collect
3.1 Personal Information

I may collect: Name, Email address, Phone number, Postal address

I collect this when you book a session, workshop or event, subscribe to my emails, submit feedback or a testimonial, or contact me directly, including via Instagram, Facebook, or WhatsApp.

3.2 Special Category Data (Health Information)

Some of the information I hold is health data, classed as "special category data" under Article 9 GDPR. The lawful basis for collecting all of it is your explicit consent, given when you complete the relevant form or book a session.

Cacao and EFT sessions: I ask you to complete a short screening form confirming whether you have any heart conditions. This exists purely for your safety. If you indicate a relevant heart condition, I'm unable to offer you a place on that session.

1:1 sessions: before your first session I ask you to complete a short intake form through my booking system. It asks what you'd like to work on and whether there's anything about your health or wellbeing I should know. Both questions are optional and you can answer as much or as little as you wish.

Session notes: I take brief handwritten notes during 1:1 sessions to support continuity of care between sessions. These are scanned to a secure folder in my Google Workspace account and the paper originals are shredded. I retain them for six years, as required by my professional liability insurer.

3.3 Clients Under 16

I occasionally work with clients under the age of 16 in 1:1 EFT and healing sessions. A parent or guardian is present for the full session, and it's the parent or guardian who provides consent for me to process the child's information, not the child themselves. If you're booking on behalf of a child under 16, by doing so you confirm you are their parent or guardian and consent to this policy on their behalf.

3.4 Website and Communication Data

When you visit clionabrady.ie, I use Google Analytics to understand how the site is used, including pages visited and general visitor behaviour. This uses cookies, which are described further in Section 10.

Email communications sent via MailerLite may collect data on opens and link clicks, which I use to understand engagement and improve my communications.

4. How I Use Your Information

I use your information to:

  • Deliver the session, workshop or product you've booked or purchased

  • Communicate with you about appointments, bookings or events

  • Send service-related emails

  • Send newsletters or marketing emails, where you've opted in

  • Collect feedback after events

  • Improve my website and communications

  • Comply with legal or regulatory obligations

You'll only receive marketing emails if you've given explicit consent, and you can unsubscribe at any time using the link in the email.

5. Legal Basis for Processing

I process personal data on one or more of the following bases:

  • Consent — for marketing emails and, separately, explicit consent for the health screening described in Section 3.2

  • Performance of a contract — to deliver a session, event or product you've booked or purchased

  • Legitimate interests — in operating and improving the business

  • Legal obligation — for example, retaining financial records

You can withdraw consent at any time. This won't affect the lawfulness of anything already processed.

6. Data Sharing

I don't sell your data or share it for marketing purposes.

I share data with trusted third parties where necessary to run the business:

  • Squarespace — website hosting and e-commerce

  • Squarespace Payments / Stripe — payment processing (Squarespace Payments runs on Stripe's underlying infrastructure)

  • Klarna — buy-now-pay-later option at checkout, where selected

  • MailerLite — email marketing and newsletters

  • Zapier — automating tasks between my tools

  • Google Calendar — scheduling and appointment management, synced with my booking system

  • Instagram, Facebook and WhatsApp — where you choose to message me directly on these platforms

  • Accounting services — for bookkeeping and tax purposes

  • Acuity Scheduling — appointment booking, intake forms and client records

  • Stripe — payment processing for appointments booked through Acuity

  • Zoom — video conferencing for online 1:1 sessions

  • Google Workspace — secure storage of scanned session notes

Some of these providers may process or store data outside the European Economic Area (EEA), including in the United States. Where this happens, the provider is required to have an appropriate safeguard in place, such as Standard Contractual Clauses or an adequacy decision, to protect your data to the same standard as under GDPR.

Where an event is delivered in collaboration with another facilitator, I may share limited contact information only where necessary for the safe and practical running of that event.

All providers are required to process data securely and only for the purposes I've instructed.

7. Testimonials and Feedback

I may invite feedback following a session or event. Reviews are collected anonymously unless you provide them otherwise, and if I share a testimonial publicly, I only use it with your explicit permission.

8. Payment Information

Payments, including 3- and 7-session packages, are processed securely through Squarespace Payments, Stripe and Klarna. I don't store full card details myself.

9. Data Retention

I retain data for as long as necessary for the purpose it was collected, and no longer:

  • Enquiry and booking contact data is retained for 12 months, after which I delete it if no further engagement has taken place.

  • Financial records (invoices, payment records) are retained for 6 years, in line with Irish Revenue requirements.

  • Health screening data (Section 3.2) is retained only for as long as needed to safely deliver the session it relates to, and I don't keep it beyond that.

    • Cacao and EFT screening data is retained only for as long as needed to safely deliver the session it relates to.

    • 1:1 intake form responses are held in my booking system for six years, alongside the session notes they relate to.

    • Session notes are retained for six years, as required by my professional liability insurer, after which they're deleted.

10. Cookies

This website uses cookies, including those required for Google Analytics, to help me understand how visitors use the site and to improve it. You can control or disable cookies through your browser settings. Where required, I'll ask for your consent before analytics cookies are set.

11. Data Security

I have appropriate technical and organisational measures in place to protect your personal data against unauthorised access, loss or misuse.

12. Your Rights

Under GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Restrict processing in certain circumstances

  • Request data portability

  • Object to processing

  • Withdraw consent at any time

You can also lodge a complaint with the Data Protection Commission (Ireland) if you believe your data has been mishandled: www.dataprotection.ie.

13. Children's Data

My website and general marketing content are intended for adults. I do process data relating to clients under 16 solely in the context described in Section 3.3, with a parent or guardian present and providing consent throughout.

14. Contact

If you have any questions about this Privacy Policy or your personal data, contact me:

Clíona Brady Email: hello@clionabrady.ie