8ráBeo Holistics by Gráinne Staunton
Last updated: 12 October 2026
Who I am
I am Gráinne Staunton, trading as 8ráBeo Holistics in Claregalway, Co. Galway, and the data controller for information collected through my practice.
Contact me about your information at hello@grainnestaunton.ie or 089 441 0498.
What I collect and why
I collect your name, contact details, appointment information and relevant health information to arrange appointments, assess suitability, provide care and keep consultation and treatment records.
Fertility records may include reproductive-health history and session notes. Orthotics records may include assessment findings and recommendations.
For baby appointments, I collect the baby’s date of birth, gestation at birth and concerns reported by their parent or guardian, to assess suitability and adapt the session.
I also collect information needed to respond to enquiries, provide purchased resources and maintain payment and accounting records.
Legal grounds
I process booking and purchase information to fulfil our agreement, and financial information to meet legal obligations. Necessary administration and handling complaints or claims may rely on my legitimate interests, balanced against your rights.
For health information used to assess suitability and provide sessions, I rely on your explicit consent under Articles 6(1)(a) and 9(2)(a) of the GDPR. Where necessary to establish, exercise or defend legal claims, relevant records may be retained on legitimate-interest grounds and under Article 9(2)(f).
You can withdraw consent by contacting me. This does not affect earlier lawful processing. Without information necessary to assess suitability, I may be unable to provide a service safely.
Storage and sharing
Online intake information is held through Google Forms in my business Google Workspace account, with access restricted to me. Paper records are stored in a locked cabinet within my restricted-access clinic.
I use Google Workspace for communications and intake, Fresha for bookings, Kit for newsletters, Payhip for my online course and WordPress.com for my website. Payment providers handle transaction information.
Relevant information may be shared with these providers, my accountant, insurer or professional advisers where necessary, or with authorities where legally required. I do not sell your information.
Some providers process information outside the European Economic Area. Depending on the provider, safeguards may include an applicable adequacy decision or Standard Contractual Clauses. Contact me for details of the safeguards applicable to your information or to request a copy.
Newsletters
With your consent, your name and email address are added to Kit to receive wellbeing resources, news, events and offers. Kit may record email opens and link clicks.
Signup is optional and separate from client care. You can unsubscribe using the link in any newsletter or by contacting me.
AI use
From time to time I use AI for writing, business support and general questions arising from practice. Client-related questions are generalized so that they do not identify an individual. Identifiable client records are not uploaded.
AI responses do not replace my professional judgement.
Retention
Records are kept only for as long as necessary, considering ongoing care, applicable insurance requirements, legal obligations and potential claims. Children’s records are assessed separately because claims and insurance requirements may extend beyond childhood.
Financial records are retained for the applicable statutory period. Newsletter details are kept while you remain subscribed, with limited unsubscribe records retained to respect your preference.
Records are securely deleted or destroyed when no longer required. Contact me for the retention criteria applicable to your records.
Your rights
Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your information, object to processing based on legitimate interests, and withdraw consent. You can object to direct marketing at any time.
I normally respond within one month and may need to verify your identity. Some rights are subject to legal exceptions.
You can complain to Ireland’s Data Protection Commission at www.dataprotection.ie.
Website technologies
WordPress.com and website features may process technical information such as your IP address and use cookies or similar technologies. External services have their own privacy notices.
This notice will be updated when my practices change.
