Last updated: October 2026
Gabadoo Limited (“Gabadoo”, “we”, “us” or “our”) is committed to respecting and protecting your privacy.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, enquire about our services, book an appointment, register for training or otherwise interact with us online.
This policy should be read alongside our Data Protection & GDPR Policy, which provides further information about how we manage and protect personal data across our services.
Gabadoo Limited provides occupational therapy, speech and language therapy, consultation, education, training and related support to children, young people, adults, families, schools, professionals and organisations.
Our services include Gabadoo and My OT & Me.
For the purposes of applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, Gabadoo Limited acts as a data controller in respect of personal data for which we determine the purpose and means of processing.
Depending on how you interact with us, we may collect information including:
Where you contact us regarding a child, young person or another individual, you may also provide information about that person.
Some of our clinical services involve the processing of health, disability, developmental or other information which may constitute special category personal data under GDPR. This information is handled with additional safeguards and in accordance with our Data Protection & GDPR Policy.
Our website is built and hosted using Webflow.
When you submit a contact or enquiry form through our website, the information you enter may be processed through Webflow and sent to authorised members of the Gabadoo team.
We ask that you provide only the information reasonably necessary for us to respond to your enquiry.
Where possible, please avoid including detailed clinical reports, medical records or other sensitive information in a general website contact form.
If additional information is required to provide a service, we will advise you on the appropriate way to provide it.
We may use personal information to:
We will only use personal information where we have an appropriate lawful basis for doing so.
Depending on the circumstances, this may include performance of a contract, taking steps at your request before entering into a contract, compliance with a legal obligation, our legitimate interests, or your consent.
Where special category data is processed, we ensure that an appropriate condition under data protection legislation also applies.
We use Cliniko to support appointment scheduling, client management and the secure management of clinical information.
Information collected through our website may therefore be transferred to Cliniko where this is necessary to arrange or provide a service.
Clinical notes and records are not intended to be stored within our general website.
We operate our own secure Gabadoo platform to provide services to families, schools and professionals, including the sharing of plans, information and resources.
Client information required for these services may be securely stored within the Gabadoo platform.
Our platform uses Amazon Web Services infrastructure, including Amazon S3, for data storage.
Access is restricted to authorised personnel and appropriate security measures are used to protect information.
We use Google Workspace/Gmail for business email communications.
If you send information to us by email, it will be processed for the purpose of responding to your enquiry or providing the relevant service.
Families, schools and professionals sometimes choose to send reports, assessments or other sensitive information by email. Where this occurs, we will only use that information for the purpose for which it was provided and will transfer relevant clinical information to the appropriate client record or secure system where necessary.
We encourage users not to send sensitive information unless it is necessary for the service being provided.
We use Brevo to manage some of our email communications, including newsletters, service updates, training information and other communications.
Where consent is required for marketing communications, we will obtain it before sending them.
You can unsubscribe from marketing communications at any time using the unsubscribe option included in our emails.
Unsubscribing from marketing communications will not prevent us from sending essential communications relating to a service, appointment, booking or existing relationship with you.
Where you purchase or book a service online, payments may be processed through secure third-party payment providers.
We do not require you to provide payment card details directly to Gabadoo where payment is processed securely by the relevant payment provider.
Payment providers process information in accordance with their own privacy and security requirements.
Our website may use cookies and similar technologies to ensure that the website functions correctly and, where applicable, to understand how visitors use our website.
Some cookies are strictly necessary for the operation of the website.
Where cookies or tracking technologies require consent, they will only be used after you have made an appropriate choice through our cookie consent system.
You can change or withdraw your cookie preferences where this functionality is provided on the website.
More detailed information about the cookies and tracking technologies used on our website is available through our Cookie Policy or cookie preferences tool.
We use appropriate technical and organisational measures to protect personal information.
These include:
We regularly review how information is accessed and managed as our services develop.
We do not sell personal information.
We may share information with trusted service providers where this is necessary to operate our business or provide our services.
These may include providers supporting:
Where appropriate, these organisations act as data processors on our behalf and are required to process information securely and in accordance with applicable data protection requirements.
Information may also be shared where required by law, for safeguarding purposes, to meet professional obligations or where otherwise permitted under data protection legislation.
Some of the technology providers we use may process or store information outside Ireland or the European Economic Area (EEA).
Where personal information is transferred internationally, we take appropriate steps to ensure that a valid legal mechanism or safeguard is in place, such as an adequacy decision or approved contractual safeguards, where required.
We retain personal information only for as long as necessary for the purpose for which it was collected and to meet our legal, professional, clinical and insurance obligations.
Different types of information have different retention periods.
Clinical and health records are generally retained for a minimum of 8 years following the end of our involvement with the client.
Where the client is a child or young person, records may need to be retained for a longer period. We generally retain children's clinical records until at least the person's 25th birthday, where applicable, in line with our professional and record-retention requirements.
General enquiries, website submissions, administrative correspondence and other non-clinical information will normally be retained for a shorter period and only for as long as it is reasonably required.
Records may be retained for longer where there is a legal, regulatory, safeguarding, insurance or other legitimate requirement to do so.
Further information about our retention and deletion procedures is contained within our Data Protection & GDPR Policy.
We may use artificial intelligence (AI) and other digital tools to improve efficiency, support administrative processes, develop resources and assist with aspects of our work.
We do not enter identifiable client clinical information or other sensitive personal information into general-purpose AI services that have not been specifically approved for processing such information.
AI-generated content or suggestions do not replace professional clinical judgement. Where AI tools support our work, responsibility for clinical and professional decisions remains with the relevant professional.
Many of our services support children and young people.
We recognise that children's personal information requires particular protection. We seek to collect only the information necessary to provide the relevant service and apply appropriate safeguards to its storage, access and use.
Where appropriate, information may be provided to us by a parent, guardian, school or another professional involved in supporting the child.
Depending on the circumstances, you may have rights under data protection legislation including the right to:
These rights are not absolute. In some circumstances, we may be required to retain information despite a request for deletion, for example where clinical records must be retained to meet legal, professional, safeguarding or insurance requirements.
If you wish to exercise a data protection right, please contact us using the details below.
If you have a concern about how we have handled your personal information, we encourage you to contact us first so that we can review and address the matter.
You also have the right to raise a concern or make a complaint to the Data Protection Commission (DPC), Ireland's independent data protection supervisory authority.
Our website may contain links to websites or services operated by other organisations.
We are not responsible for the privacy practices of third-party websites. We recommend reviewing the relevant privacy information when using an external website or service.
We may update this Privacy Policy from time to time to reflect changes to our services, systems, technology or legal obligations.
The most recent version will be published on our website and the date at the top of this policy will be updated accordingly.
If you have a question about this Privacy Policy, how we use personal information or wish to exercise a data protection right, please contact:
Gabadoo Limited
Coolscart
Hospital
Co. Limerick
V35 YK27
Ireland
Email: support@gabadoo.com
Further information about our approach to data protection is available in our Data Protection & GDPR Policy.