Privacy Notice
How we handle your information.
Effective June 2026. Aligned with HIPAA (USA) & GDPR (EU/Ireland).
01. Who we are
Neurological Communication Partners is a private speech & language therapy practice operated by Kathleen McGrath, M.S. CCC-SLP, licensed in New Hampshire and Vermont (ASHA CCC-SLP) and Ireland (CORU). We act as a covered entity under HIPAA and a data controller under the GDPR for personal data collected through this website and during therapy.
02. What we collect
- Contact & appointment details you provide (name, email, phone, region, brief note).
- Clinical information necessary for assessment and therapy (Protected Health Information / PHI).
- Session-join metadata: your initials, the meeting reference, a one-way hashed IP, and your browser’s user agent — used as an audit trail of consent.
03. How we use it
Information is used only to schedule, deliver and document therapy. We do not sell, rent or use your data for marketing or analytics.
04. Telehealth platform
Live sessions are delivered via Zoom for Healthcare, a HIPAA-eligible service operated under a Business Associate Agreement. Sessions are encrypted in transit and are not recorded unless you provide explicit verbal consent during the session.
05. Legal bases (GDPR)
- Consent — for processing health data and contacting you about scheduling.
- Contract — to provide the therapy service you request.
- Legitimate interest — security, fraud prevention, and minimal audit logging.
06. Your rights
You may request access, correction, deletion, restriction or portability of your data, withdraw consent at any time, and lodge a complaint with the Irish Data Protection Commission (Ireland) or the U.S. Department of Health & Human Services Office for Civil Rights (USA). To exercise any right, email neurocompartners@gmail.com.
07. Retention
Clinical records are retained per applicable U.S. state and Irish professional requirements (typically 7 years; longer for minors). Website inquiry data is kept for 24 months and then deleted.
08. Security
We apply administrative, technical and physical safeguards including encryption in transit (TLS), least-privilege access, and minimum necessary data collection. No internet system is perfectly secure — please do not transmit sensitive health information through the public contact form.
This notice is provided for transparency. It is not legal advice. Kathleen will provide a fuller Notice of Privacy Practices and consent forms before therapy begins.
