top of page

Privacy Notice

Stephanie Birnstiel – Birnstiel Coaching & Mentoring Ireland
Email: StephanieCoachingIreland@gmail.com
Country: Ireland
Last updated:  22 October 2026

This notice explains how I handle your personal information as your coach and/or mentor.  I am the data controller, which means I decide how and why your data is used. I comply with the GDPR and the Irish Data Protection Act 2018.

​

1. What I collect

  • Contact and booking details: name, email, phone number, and your employer if relevant.

  • Session information: notes I make, goals, action plans, and anything you choose to share during coaching.

  • Payment details: invoices and payment records (I do not store card numbers).

  • Sensitive information: if you choose to share health-related information, I treat it as special category data (see section 3).

 

2. Why I use it and my legal basis

​

Purpose: Delivering and administering our coaching, scheduling, communicating with you

Legal basis:  Performance of our contract

​

Purpose: Invoicing and keeping accounting records

Legal basis: Contract and legal obligation (Revenue requirements)

​

Purpose: Safeguarding or legal disclosures where required

Legal basis: Legal obligation / protecting vital interests

​

Purpose: Recording sessions or noting health information you share

Legal basis: Your explicit consent

​

I do not use your data for marketing unless you separately ask to receive it, and I never sell it.

​

3. Sensitive information and recordings

I do not record sessions or keep notes of health-related information. If for any reason you would like to have a session recorded or notes of health-related information kept, I can do so with your explicit consent, given separately in an agreement. You can withdraw consent at any time by contacting me, and I will stop recording or delete the relevant material (unless I am legally required to keep it).

​

4. Who I share it with

Sessions and records are confidential, in line with the EMCC and ICF Codes of Ethics. I share data only with:

  • Service providers who help me run my practice, who process data on my behalf: e.g. Zoom, GoogleMeet, Microsoft 365, Calendly calendar tool.

  • Sponsors in B2B Contracts, where my coaching/mentoring is sponsored by an employer, I share only attendance / progress themes with the Sponsor. The content of sessions stays confidential to the Client(s) unless they agree otherwise.

  • My professional supervisor, in anonymised form where possible.

  • Authorities or others where I am legally required to, or where there is a serious safeguarding concern.

  • Anyone else only with your explicit consent.

​

Some providers may store data outside the EEA (for example in the US). Where this happens, it is protected by safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

​

5. How long I keep it

  • Session notes and coaching records: 12 months after our work ends, then securely deleted.

  • Session recordings (if any): deleted within 30 days or immediately on your request.

  • Invoices and payment records: 6 years, as required for Revenue purposes.

  • Contact details: until you ask me to delete them or 2 years after our last contact.

6. How I keep it safe

My devices are password-protected and encrypted, my accounts use strong passwords and two-factor authentication where available, and paper notes (if any) are locked away. If a breach ever put your rights at risk, I would tell you and the Data Protection Commission as the law requires.

​

7. Your rights

You have the right to:

  • Access the personal data I hold about you and get a copy.

  • Correct anything inaccurate.

  • Delete your data (subject to legal retention requirements such as invoices).

  • Restrict or object to certain uses of your data.

  • Receive your data in a portable format.

  • Withdraw consent at any time, where I rely on it.

To use any of these rights, email me at StephanieCoachingIreland@gmail.com. I will respond within one month.

​

8. Complaints

If you are unhappy with how I have handled your data, I would appreciate if you please contact me first so I can put it right.

You also have the right to complain to the Data Protection Commission:

dataprotection.ie | info@dataprotection.ie | 21 Fitzwilliam Square South, Dublin 2, D02 RD28.

​

9. Changes

I may update this notice from time to time. The current version is always available on this webpage, and I will tell you about any significant changes.

bottom of page