Last reviewed: 7 September 2026
Who we are
This website and our occupational therapy services are operated by Playfit Limited, trading as Everyday OT (Company No. 661179, VAT No. IE3732251NH), registered address 34 Bramley View, Castleknock, Dublin 15, D15 W7CT. We are the data controller. For anything in this policy, or to exercise any right below, email hello@everydayotireland.com.
What we collect
- Shop orders — name, email, delivery and billing address, phone, order details. Card details go straight to our payment providers and never reach us.
- Enquiries and bookings — your contact details, your child’s name and age, and what you tell us about your child.
- Assessments and therapy — health information about your child (see below).
- Schools and organisations — the booker’s contact details and what we need to invoice and run the session.
- Emails and free resources — your name, email, and whether you open or click.
- Website use — pages visited, how you arrived, approximate location, device. Only if you agree to cookies.
Health information about children
To assess a child or provide therapy we record their developmental and medical history, what we observe in screening and sessions, assessment results, our reports and recommendations, attendance and progress, and any reports shared with us by you or, with your permission, others involved in their care. This is “special category” data with stronger protection.
Our lawful basis is Article 9(2)(h) GDPR — provision of health care by a professional bound by a duty of confidentiality. Kevin Prior is CORU registered and works under CORU’s Code of Professional Conduct and Ethics. We cannot provide the service without this information.
Everyone we see clinically is under 18, so consent is given by a parent or guardian.
In schools
Where a school books us to work with its pupils, the school is normally the controller and we act on its instructions. Where a family comes to us directly, we are the controller.
Why we use it, and our legal basis
- Orders and deliveries — contract
- Answering enquiries — legitimate interest
- Assessments, therapy and programmes — contract; health information under Article 9(2)(h)
- Keeping clinical records — legal obligation and professional duty
- Accounts, tax and VAT — legal obligation
- Marketing emails — consent, withdrawable at any time
- Website statistics — consent, via the cookie banner
- Complaints, insurance and legal claims — legitimate interest
We do not sell your information or use it to make automated decisions about you.
Who we share it with
Service providers acting on our instructions: Shopify, our payment providers, our couriers, Klaviyo, Google Analytics, Fera, Pandectes, Acuity Scheduling, Zoom and Google Workspace. Also our accountants, insurers and professional advisers where necessary.
We share information about your child with other professionals only where you have asked us to or given permission. Under the Children First Act 2015 we are mandated persons and must report certain child protection concerns to Tusla; we will normally tell you if we do, unless that would place a child at risk.
Some providers store information outside the European Economic Area. Those transfers are covered by GDPR-approved safeguards such as the European Commission’s standard contractual clauses.
How long we keep it
- Clinical records about a child — until their 25th birthday, or 26th if they were 17 when last seen
- Orders, accounts and bookings — 6 years, for tax and accounting
- Enquiries that don’t lead to a booking — 12 months
- Newsletter — until you unsubscribe, then a minimal record so we don’t email you again
- Website statistics — 14 months
Your rights
You can ask for a copy of your information, have it corrected, have it deleted, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. There is no charge and we respond within one month. Some rights work differently for clinical records, which we have professional and legal obligations to keep — we’ll explain if that applies.
Email hello@everydayotireland.com. We may need to verify your identity, and for a request about a child, that you have authority to make it.
Cookies
We use four categories: strictly necessary (needed for the site and checkout to work, cannot be switched off), functional (your preferences, such as country and currency), analytics (how the site is used) and marketing (measuring and targeting our advertising). Everything except strictly necessary is set only if you agree. Change your choices any time using the cookie icon on any page, or by clearing cookies in your browser.
Security, changes and complaints
Access is limited to those who need it, clinical information is held separately from shop records, and our systems are password protected with two-factor authentication where available.
We may update this policy; the date above shows when it was last reviewed.
If you are unhappy with how we have handled your information, contact us first. You also have the right to complain to the Data Protection Commission at dataprotection.ie.
