Riverside SLT- Privacy Statement & Policy

1. Introduction

Riverside SLT is committed to protecting the privacy and security of your personal information and that of your child. This Privacy Policy describes how we collect, use, and disclose personal data when you use our speech and language therapy services. We are committed to complying with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

2. Data Controller

Riverside SLT is the data controller responsible for you and your child’s personal data.

3. Personal Data We Collect

We may collect the following types of personal data:

Personal Identification Information: Name, date of birth, address, contact details (phone number, email address).
Medical and Health Information: Medical and developmental history, speech and language assessment results, therapy notes, reports from other healthcare professionals.
Guardian Information: Name and contact details of parents or legal guardians.
Payment Information: Billing address, payment details (processed securely by third-party payment processors).
Communication Data: Records of correspondence, including emails, letters, and notes from phone calls.
Session recordings: Audio or video recordings of therapy sessions, with explicit consent.

How do we collect your data?

You directly provide Riverside SLT with most of the data we collect. We collect data and process data when you:

Voluntarily complete a contact form online on our website
Register online with our online client portal provided by Zanda Health –our chosen GDPR compliant, practice management software.
Partake in an introductory phone call and provide verbal information about your child’s health and development.
Attend assessment and/ therapy appointments with Riverside SLT
Provide copies of reports from other third parties, for example your child’s GP, Consultant, allied health professionals, teaching staff, psychologist.
Voluntarily complete a feedback form via email.

Riverside SLT may also receive your data indirectly from the following sources:

Written or verbal communications from other third parties, for example your child’s GP, Consultant, allied health professionals, teaching staff, psychologist. This third-party information is only received and stored if you have provided consent for it.

4. Legal Basis for Processing

We process your personal data based on the following legal bases:

Contractual Necessity: Processing is necessary for the performance of a contract (providing speech and language therapy services).
Legal Obligation: Processing is necessary to comply with legal obligations (e.g., safeguarding requirements).
Consent: We may process your data based on your explicit consent (e.g., for sharing information with other professionals, recording sessions).
Legitimate Interests: Processing is necessary for our legitimate interests (e.g., administrative purposes, improving our services), provided your rights and freedoms are not overridden.
Vital Interests: Processing is necessary to protect someone’s vital interests.

5. Purposes of Processing

We use your personal data for the following purposes:

Providing speech and language therapy assessments and interventions.
Maintaining accurate client records.
Communicating with clients and guardians.
Processing payments.
Complying with legal and regulatory requirements.
Safeguarding children and vulnerable adults.
Improving our services.
Sharing information with other healthcare, social care and education professionals, with explicit consent.

6. Data Sharing and Disclosure

We may share your personal data with:

Other healthcare, social and educational professionals (e.g., doctors, psychologists), with your explicit consent.
Third-party service providers (e.g., payment processors, IT support).
Legal authorities, if required by law.
Safeguarding authorities, as legally required.

We will not sell or rent your personal data to third parties.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include:

Secure storage of electronic records- We mainly use Zanda Health practice management software system, but may sometimes use other such systems that are also GDPR compliant.
Secure disposal of paper records, once electronic copies of these paper records have been made.
Restricted access to personal data.
Data encryption.

8. Data Retention

We will retain your child’s personal data for as long as necessary to fulfill the purposes for which it was collected, including for the duration of time mandated by professional bodies, and to comply with legal obligations. Generally, clinical records relating to children are held for a specific period of time after the last appointment, as defined by Irish law and professional guidelines.

9. Your Rights

Under GDPR, you have the following rights:

Right to Access: You can request a copy of your personal data.
Right to Rectification: You can request that we correct any inaccurate or incomplete data.
Right to Erasure: You can request that we delete your personal data (in certain circumstances).
Right to Restriction of Processing: You can request that we limit the processing of your data.
Right to Data Portability: You can request to receive your data in a portable format.
Right to Object: You can object to the processing of your data.
Right to Withdraw Consent: You can withdraw your consent at any time (if applicable).
Right to lodge a complaint: You have the right to lodge a complaint with the Data Protection Commission in Ireland.

10. Cookies and Website Usage

We do not use cookies to collect or store any information on our website – www.riversideslt.ie

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at:

Address: Riverside SLT, Riverside Lodge, Bettyville, Ballyboughal, Co. Dublin, A41N592
Phone: 0876333911
Email: eibhlin@riversideslt.ie
Website: www.riversideslt.ie

13. Data Protection Commission (DPC)

You have the right to lodge a complaint with the Data Protection Commission (DPC) in Ireland.

Website: dataprotection.ie

Date: 02-04-2025