Privacy Policy & Data Protection Policy

Effective Date: July 2026

Data Controller: The Tallest Branch Limited (CRO: 812437)

Responsible Director: Anthony Kolodziej Behan (anthony@thetallestbranch.ie)

1. Overview

The Tallest Branch Limited is committed to protecting your privacy and personal data in strict compliance with the General Data Protection Regulation (GDPR), the Irish Data Protection Acts 1988–2018, and Irish statutory legal requirements. This document outlines how we collect, process, store, and safeguard your personal information across our website (thetallestbranch.ie) and operational workflows.

2. Information We Collect and Legal Basis for Processing

  • Contact & Course Inquiries: Name, email address, and phone number provided via contact forms. Legal Basis: Legitimate interest and contract pre-entry steps.

  • Pre-Course Screening & Health Data (Special Category): During onboarding for Mindfulness-Based Stress Reduction (MBSR) cohorts or 1:1 Somatic Integration sessions, we collect health-related and somatic background information to ensure safety within your window of tolerance. Legal Basis: Explicit Consent (GDPR Article 9).

  • Audio & Neural Media Access: Name and contact details required to deliver streamable or downloadable acoustic practice tracks and course materials. Legal Basis: Contractual performance.

  • Financial & Transaction Data: Payment processing details handled securely via encrypted third-party payment gateways (Stripe / Squarespace). The Tallest Branch Limited does not store credit or debit card numbers on its servers. Legal Basis: Legal obligation and contract execution.

3. Data Sovereignty, AI Governance & Storage

  • Secure Workspace Storage: All personal data, intake records, and communication logs are stored in hardware-encrypted corporate Google Workspace architecture under domain-level security controls.

  • AI Privacy Guarantee: In accordance with our internal Clinical Governance Policy (01-TTB-SOP-04), no personal client data, clinical session notes, or intake forms are ever processed through open-source or public consumer artificial intelligence models.

4. Data Retention

  • General Inquiries: Retained for up to 12 months following initial contact.

  • Client & Course Records: Retained for the duration of the service plus 7 years to satisfy professional liability insurance criteria.

  • Financial Records: Retained for 6 years in compliance with Section 886 of the Irish Taxes Consolidation Act 1997.

5. Your Data Protection Rights

Under Irish and EU Data Protection Law, you have the right to:

  • Request access to a copy of the personal data we hold about you.

  • Request the correction or rectification of inaccurate personal data.

  • Request the erasure of your personal data ("Right to be Forgotten"), subject to statutory record-keeping mandates.

  • Withdraw your consent for processing special category health data at any time.

To exercise any of these rights, please contact our Data Controller directly at anthony@thetallestbranch.ie.

6. Complaints

If you have concerns about how your data is handled, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at www.dataprotection.ie.