Privacy Notice
Stephanie Birnstiel – Birnstiel Coaching & Mentoring Ireland
Email:Â StephanieCoachingIreland@gmail.com
Country: Ireland
Last updated:Â 22 October 2026
This notice explains how I handle your personal information as your coach and/or mentor. I am the data controller, which means I decide how and why your data is used. I comply with the GDPR and the Irish Data Protection Act 2018.
​
1. What I collect
-
Contact and booking details: name, email, phone number, and your employer if relevant.
-
Session information: notes I make, goals, action plans, and anything you choose to share during coaching.
-
Payment details: invoices and payment records (I do not store card numbers).
-
Sensitive information: if you choose to share health-related information, I treat it as special category data (see section 3).
Â
2. Why I use it and my legal basis
​
Purpose:Â Delivering and administering our coaching, scheduling, communicating with you
Legal basis:Â Â Performance of our contract
​
Purpose: Invoicing and keeping accounting records
Legal basis: Contract and legal obligation (Revenue requirements)
​
Purpose: Safeguarding or legal disclosures where required
Legal basis: Legal obligation / protecting vital interests
​
Purpose: Recording sessions or noting health information you share
Legal basis: Your explicit consent
​
I do not use your data for marketing unless you separately ask to receive it, and I never sell it.
​
3. Sensitive information and recordings
I do not record sessions or keep notes of health-related information. If for any reason you would like to have a session recorded or notes of health-related information kept, I can do so with your explicit consent, given separately in an agreement. You can withdraw consent at any time by contacting me, and I will stop recording or delete the relevant material (unless I am legally required to keep it).
​
4. Who I share it with
Sessions and records are confidential, in line with the EMCC and ICF Codes of Ethics. I share data only with:
-
Service providers who help me run my practice, who process data on my behalf: e.g. Zoom, GoogleMeet, Microsoft 365, Calendly calendar tool.
-
Sponsors in B2B Contracts, where my coaching/mentoring is sponsored by an employer, I share only attendance / progress themes with the Sponsor. The content of sessions stays confidential to the Client(s) unless they agree otherwise.
-
My professional supervisor, in anonymised form where possible.
-
Authorities or others where I am legally required to, or where there is a serious safeguarding concern.
-
Anyone else only with your explicit consent.
​
Some providers may store data outside the EEA (for example in the US). Where this happens, it is protected by safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses.
​
5. How long I keep it
-
Session notes and coaching records: 12 months after our work ends, then securely deleted.
-
Session recordings (if any): deleted within 30 days or immediately on your request.
-
Invoices and payment records: 6 years, as required for Revenue purposes.
-
Contact details: until you ask me to delete them or 2 years after our last contact.
6. How I keep it safe
My devices are password-protected and encrypted, my accounts use strong passwords and two-factor authentication where available, and paper notes (if any) are locked away. If a breach ever put your rights at risk, I would tell you and the Data Protection Commission as the law requires.
​
7. Your rights
You have the right to:
-
Access the personal data I hold about you and get a copy.
-
Correct anything inaccurate.
-
Delete your data (subject to legal retention requirements such as invoices).
-
Restrict or object to certain uses of your data.
-
Receive your data in a portable format.
-
Withdraw consent at any time, where I rely on it.
To use any of these rights, email me at StephanieCoachingIreland@gmail.com. I will respond within one month.
​
8. Complaints
If you are unhappy with how I have handled your data, I would appreciate if you please contact me first so I can put it right.
You also have the right to complain to the Data Protection Commission:
dataprotection.ie | info@dataprotection.ie | 21 Fitzwilliam Square South, Dublin 2, D02 RD28.
​
9. Changes
I may update this notice from time to time. The current version is always available on this webpage, and I will tell you about any significant changes.