1. Who We Are
The Stephen Moylan Foundation ("the Foundation", "we", "us") is a registered charity in Ireland (Charity Registration Number 20206728). We provide free, trauma-informed bereavement counselling for children and young people aged 5–18 who have lost a parent.

Contact us:
  Email: thestephenmoylanfoundation@gmail.com
  Phone: +353 89 213 9637
  Website: www.thestephenmoylanfoundation.ie

2. Our Commitment to Your Privacy
We are committed to protecting the privacy and dignity of every family, child, and young person who contacts us. We process personal data in accordance with the General Data Protection Regulation (GDPR) as enacted in Ireland, the Data Protection Acts 1988–2018, and any applicable guidance from the Data Protection Commission (DPC).

Because our services involve children and sensitive health-related information, we apply the highest standard of care to how we collect, use, and protect your data.

3. What Personal Data We Collect;

3.1 Contact and Referral Information
•    Name, address, phone number and email address of the parent, guardian or referrer
•    Name, age and date of birth of the child or young person
•    Nature of bereavement and brief background information relevant to the counselling referral
•    Name and contact details of the child's school (if provided)

3.2 Counselling and Service Data
•    Notes and records relating to counselling sessions (held by the assigned accredited counsellor)
•    Correspondence between us and the family or the counsellor
•    Donation or fundraising information (name, contact details, payment reference — we do not store full card details)

3.3 Website Usage Data
Our website is hosted on Wix.com. Wix may automatically collect certain technical data including your IP address, browser type, device, and pages visited. Please also refer to Wix's Privacy Policy at wix.com/about/privacy for full details of how Wix processes data.

4. Legal Basis for Processing
We rely on the following lawful bases under GDPR Article 6 and Article 9:
•    Consent — where you have freely given us clear consent to contact you or refer a child for support
•    Legitimate interests — to manage our charitable operations, respond to enquiries, and maintain records of our work
•    Vital interests — in emergency or safeguarding situations where a child's safety may be at risk
•    Legal obligation — where processing is required to comply with Irish law (e.g. mandatory reporting under the Children First Act 2015)

Where we process special category data (health information, bereavement details), we rely on Article 9(2)(a) explicit consent, and/or Article 9(2)(b) processing necessary for obligations in the field of social protection.

5. How We Use Your Data
•    To assess and arrange appropriate bereavement counselling for a child or young person
•    To communicate with families about their referral and the progress of support
•    To match families with accredited counsellors in their area
•    To manage donations and fundraising activities
•    To comply with our obligations as a registered charity under the Charities Act 2009
•    To carry out our safeguarding duties under the Children First Act 2015

We will never sell, rent or trade your personal data. We will never use your data for marketing by third parties.

6. Sharing Your Data
We only share personal data on a strictly need-to-know basis:
•    Accredited counsellors — to enable them to deliver counselling to your child. Counsellors operate under their own professional codes of ethics and confidentiality obligations.
•    Wix.com — our website platform provider, which processes data in accordance with GDPR. Data may be stored on EU or US servers under appropriate data transfer safeguards.
•    Tusla (Child and Family Agency) or An Garda Síochána — only where we have a mandatory reporting obligation under the Children First Act 2015 or where there is an immediate risk to a child's safety.
•    Our professional advisors (accountants, legal advisers) — bound by confidentiality.

7. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law. As a general guide:
•    Counselling referral and communications with counsellors: until the child reaches the age of 18, plus 7 years (i.e. until they turn 25), in line with the Statute of Limitations and guidance from Irish professional bodies including IACP and CORU.

•    Donation and financial records: 7 years (as required under Irish tax and charity law)
•    General enquiry correspondence: 2 years from the date of last contact
•    Website analytics data: as set by Wix (typically up to 26 months)

8. Your Rights
Under GDPR you have the following rights:
•    Right of access — to request a copy of the personal data we hold about you
•    Right to rectification — to ask us to correct inaccurate data
•    Right to erasure — to ask us to delete your data (subject to legal and safeguarding obligations)
•    Right to restrict processing — to limit how we use your data
•    Right to data portability — to receive your data in a machine-readable format
•    Right to object — to object to processing based on legitimate interests
•    Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at thestephenmoylanfoundation@gmail.com. We will respond within one month. You also have the right to lodge a complaint with the Data Protection Commission (Ireland) at dataprotection.ie.

9. Children's Data
Because our services are specifically for children and young people, we take particular care with their data. We will always seek consent from a parent or legal guardian before collecting information about a child. We process children's data only to the minimum extent necessary to deliver counselling support and ensure their safety.

10. Security
We take appropriate technical and organisational measures to protect your personal data against accidental loss, destruction, alteration, unauthorised access or disclosure. Access to personal data within the Foundation is restricted to those who need it to fulfil their role.

11. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be available on our website at www.thestephenmoylanfoundation.ie. Material changes will be communicated to families currently in receipt of our services.

12. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact:

​

The Stephen Moylan Foundation
Email: thestephenmoylanfoundation@gmail.com
Phone: +353 89 213 9637
Registered Charity No. 20206728