Privacy Policy

Last updated: 6 May 2026

This Privacy Policy explains how Healing With Steph (“we”, “us”, “Stephanie”) collects, uses, and protects your personal information when you visit healingwithsteph.ie or book a consultation. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR), the Irish Data Protection Act 2018, and the ePrivacy Regulations 2011.

1. Who we are

Healing With Steph is a homeopathic practice run by Stephanie, based in Milltown, County Galway, Ireland.

Stephanie is the data controller for personal information you provide through this website and during consultations.

2. What information we collect

We collect personal information that you give us directly:

  • Contact form: first name, last name, email address, phone number (optional), subject, message.
  • Booking form: full name, email address, phone number, preferred session format, optional notes about your situation.
  • Consultations: health history, lifestyle, symptoms, and other information you choose to share — collected only after you book a session and provide explicit consent.

We also automatically collect limited technical data when you browse the website:

  • IP address, browser type, device information.
  • Pages you visit and how you interact with them (no third-party analytics or marketing trackers are used).

3. How we use your information

  • To respond to your enquiries and confirm bookings.
  • To deliver homeopathic consultations and follow-up care.
  • To prepare personalised remedies and treatment plans.
  • To keep brief case notes for continuity of care between sessions.
  • To send transactional emails (booking confirmations, follow-up reminders) — never for unsolicited marketing.

4. Legal basis for processing

Under GDPR Article 6 we rely on:

  • Consent (Article 6(1)(a)): when you submit a form or check the privacy consent box.
  • Contract (Article 6(1)(b)): to deliver the consultation service you book.
  • Legitimate interest (Article 6(1)(f)): to keep clinical case notes for continuity of care, and to respond to enquiries you initiate.

Health-related data is processed under Article 9(2)(h) GDPR (provision of healthcare and treatment).

5. Who we share your information with

We do not sell your data. We share it only with the following processors who help us run the website and the practice:

  • ClarityWeb (clarityweb.ie), based in Ireland — provides website development, hosting support, and technical maintenance. They may access personal data only as required for technical support.
  • Vercel Inc. — hosts the website infrastructure. See their privacy policy.
  • Brevo (Sendinblue) — sends transactional emails (booking confirmations, replies) on our behalf. See their privacy policy.
  • Google Fonts — used to display website typography. See Google's privacy policy.
  • Google Maps — used to display our location on the contact page. Only loaded after you give cookie consent. See Google's privacy policy.

We may also disclose information if required by law or to protect the rights, property, or safety of our clients or others.

6. How long we keep your information

  • Contact form messages: kept up to 12 months from last contact, then deleted.
  • Booking and consultation records: retained for up to 8 years after your last consultation, in line with Irish healthcare record-keeping guidance.
  • Email correspondence: retained for as long as clinically relevant or until you ask us to delete it.

7. Your rights

Under GDPR, you have the right to:

  • Access the personal information we hold about you.
  • Have inaccurate information corrected.
  • Have your information erased (where there is no overriding clinical or legal reason to keep it).
  • Restrict or object to processing.
  • Receive a copy of your data in a portable format.
  • Withdraw consent at any time.

To exercise any of these rights, email steficoll@icloud.com. We respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC):

8. Cookies

We use only essential cookies to make the website work and a consent record cookie to remember your choice. Third-party services (Google Fonts, Google Maps) may set cookies only after you accept our cookie banner. For full details see our Cookie Policy.

9. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest version. Material changes will be communicated by a notice on the website.

10. Contact us

For any privacy-related questions, please contact: