Privacy Policy
Last Updated: September 15 2026
At Inherent, we treat your personal and health information with the same reverence and care we treat your physical body. We are committed to transparency, security, and the ethical handling of your data in accordance with the Irish Data Protection Acts and the General Data Protection Regulation (GDPR).
1. The Controller
The data controller for Inherent is: Ms. Lavinia Messina, Cork City, Ireland. Email: lavinia@inherentholistic.com
2. Information We Collect
To provide safe and effective integrative bodywork and Reiki, we collect the following categories of information:
Identification & Contact: Name, address, phone number, and email.
Health & Lifestyle (Special Category Data): Medical history, current symptoms, medications, lifestyle factors, and treatment notes.
Transaction Data: Details of the services you have booked and paid for.
3. How We Collect Your Data
We collect data through two primary methods:
Physical Intake Forms: Paper forms completed in person at our treatment location in Cork.
Scheduling & Billing: Information provided when you book through Setmore or pay via Square.
4. Lawful Basis for Processing
Under GDPR, we process your data under the following legal bases:
Contract: To fulfill the service you have booked.
Explicit Consent: For the processing of "Special Category" health data (provided by you when you sign your intake form).
Legal Obligation: To maintain records for insurance and tax purposes.
5. Third-Party Data Processors
We use a "Privacy-First" selection of tools to manage your data. Each provider is vetted for GDPR compliance:
| Service | Purpose | Data Residency & Security |
|---|---|---|
| Squarespace | Website Hosting | Basic browsing/cookie data. |
| Setmore | Appointment Scheduling | Name and contact details only. |
| Square | Payment Processing | Secure, PCI-compliant transactions. |
| Tuta | Email Communication | End-to-end encrypted (German-based). |
For information on how we use cookies and tracking technologies via Squarespace, please refer to our Cookie Policy.
For information on how each of these third-party providers processes data, you can view their individual privacy commitments below:
Website Hosting: Squarespace Privacy Policy
Payment Processing: Square GDPR Privacy Notice (Specific to Ireland and the EEA).
Secure Communication: Tuta Privacy Policy (German-based, end-to-end encrypted).
6. Storage & Security
We employ a multi-layered security approach to protect your "Inherent" records:
Digital Data: Protected by Two-Factor Authentication (2FA) and end-to-end encryption where possible.
Physical Records: Paper intake forms are stored in a secure, locked filing cabinet at a private location in Cork. Access is strictly limited to your therapist.
Data Minimization: We only collect what is necessary for your safety and treatment.
7. Data Retention
In compliance with Irish health insurance standards and professional liability requirements, we retain client records for 7 years from the date of your last treatment. For minors, records are kept for 7 years after they reach the age of 18. After this period, digital data is permanently deleted and physical records are professionally shredded.
8. Your Rights
Under the GDPR, you have the following rights:
Access: You can request a copy of the data we hold about you at any time.
Rectification: You can ask us to correct any inaccurate information.
Erasure: You can request the deletion of your data (subject to our 7-year legal retention requirements for medical/insurance records).
Withdrawal of Consent: You can withdraw your consent for us to hold your health data at any time.
Restriction: You can ask us to "pause" the use of your data.
Portability: You can ask for your digital data in a format that you can take to another therapist.
9. Automated Decision Making
We do not use automated decision-making or profiling to process your data or make decisions regarding your care. Every treatment plan is created through human clinical judgment.
10. Contact & Complaints
If you have questions about your privacy, please contact us directly at lavinia@inherentholistic.com. If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Data Protection Commission (DPC) at www.dataprotection.ie.