Last updated: 15 October 2026
Who we are
Eamonn Sheehan trading as Goodnight Tails, Castlemitchell, Athy, Co. Kildare, is the controller for the personal information described here. Contact care@goodnighttails.ie about this notice or a privacy request.
Information we collect
We receive information from you, your authorised representative and referring veterinary professionals. We use necessary names, contact and visit details, information about the animal and requested care, correspondence, agreements and consent records, billing references and limited security information. We do not hold payment-card details in our clinical application; payments use Stripe's hosted Checkout. Please do not include unnecessary information about anyone's health or other sensitive personal circumstances in enquiry forms.
How information is used
We use information to answer requested enquiries, arrange and deliver agreed veterinary services, communicate preparation and follow-up information, manage payments/refunds, maintain appropriate clinical/business records and protect the service. Requested pre-contract steps and delivery of your agreement are the basis for relevant service processing. Identified accounting/legal obligations apply where relevant. Necessary professional continuity, record defence and security use documented legitimate interests, with people's rights considered. Veterinary treatment consent is separate from these data-processing purposes. We do not use enquiry or clinical records for marketing, profiling or optional AI.
Who information is shared with
Necessary information is processed through the approved website/hosting, clinical database, payment and communications providers: Vercel, Cloudflare, Supabase, Stripe, Resend and Zoho. Provider roles differ; Stripe and other providers also process certain information for their own purposes under their notices. Veterinary professionals or authorised representatives receive information only where appropriate to their role and authority. Any aftercare supplier receives only necessary information for an agreed service after its operational/data-handling arrangements are accepted. We may disclose information where required by law or necessary for an appropriately assessed rights/incident response. We do not sell personal information.
International processing
The clinical database and encrypted owner backup arrangement use Ireland/EU locations, but this does not mean all processing stays in the EU. Providers may operate internationally, including Zoho's need-based India support and service-dependent overseas processing. Transfer arrangements depend on the provider, service and account and may include adequacy decisions and contractual safeguards. Applicable processor DPA coverage has not been established for the temporary Vercel Hobby hosting arrangement; the owner has accepted this unresolved gap pending a later hosting move. Details can be requested from care@goodnighttails.ie.
Retention
Unconverted nonclinical enquiries are normally retained for 12 months after the last meaningful contact. Clinical records, signed consent and linked clinical audit are retained for at least seven years from the last clinical entry for the case, then reviewed annually. Finance records are generally retained for six years after the relevant year, with applicable longer duties/overlapping record periods considered. Routine configurable technical logs have a 30-day policy; encrypted daily/monthly backup policies are 31 days/12 months. Necessary documented legal, regulatory, clinical, complaint or other justified holds can extend retention. Provider deletion and backup cycles can delay removal of residual copies; we do not promise immediate automated deletion. Authoritative records, lawful holds and correction/erasure decisions must be reconciled before restored information is used.
Security and records release
Access is restricted and protected by measures including MFA, role/organization controls, private record storage and audit history. Transactional messages are minimised and do not replace the clinical record. These measures are not a promise of end-to-end encryption or guaranteed security. Rights/continuity releases use verified identity/authority and an approved minimum-necessary secure route.
Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction, objection or portability. These rights are subject to applicable professional, legal and third-party protections. Where a particular use relies on consent, you can withdraw that consent without affecting earlier lawful processing. Contact care@goodnighttails.ie; you may also complain to the Irish Data Protection Commission at https://www.dataprotection.ie/. Necessary contact/visit/service information is needed to arrange care; if it is not provided, we may be unable to arrange that service. We do not make solely automated decisions producing legal or similarly significant effects.
Changes to this notice
The notice will be updated if the actual service or processing changes. No privacy request requires you to disclose your app password/MFA code.