Data Protection Notice

1.Rainbow Community Services (“RCS”) is committed to protecting the privacy and personal data of all individuals whose information we hold.
This notice explains how we manage personal information in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988–2018.

2. Who We Are

Rainbow Community Services (RCS) provides residential care and support to young people.
Address: Rainbow Community Services HQ, Fitzwilliam Court, Dyer Street, Drogheda, Co. Louth, A92 X9PV.
RCS acts as both a data controller and, in certain cases, a data processor on behalf of Tusla  the Child and Family Agency.

3. Personal Data We Collect

We collect and process personal data including:

  • Names, contact details, and identification information;

  • Care records and support information for young people in our care;

  • Employment and training records for staff;

  • Professional communications with partner agencies and contractors.

4. How We Use Your Data

Personal data is used for legitimate purposes including:

  • Providing safe and effective care;

  • Fulfilling our legal and contractual obligations;

  • Managing staff, HR, and operational functions;

  • Ensuring compliance with Tusla and statutory regulations.

5. Lawful Basis for Processing

RCS processes personal data under lawful bases including:

  • Legal obligation (e.g., compliance with care and child protection legislation);

  • Performance of a contract;

  • Legitimate interests;

  • Consent (where applicable).

6. Sharing Your Data

We may share information with authorised third parties, including Tusla, healthcare professionals, education providers, and regulatory authorities — always in line with GDPR and on a strict need-to-know basis.

7. Data Retention

Records are retained only for as long as necessary and in line with our Data Retention Schedule.
Care records are securely returned to Tusla within six weeks of discharge from placement.

8. How We Keep Data Secure

We apply robust technical and organisational measures, including:

  • Password protection and encryption;

  • Restricted access and confidentiality obligations;

  • Secure disposal procedures for both paper and electronic files.

9. Your Rights

Under GDPR, you have rights including:

  • Access to your personal data;

  • Rectification of inaccurate or incomplete data;

  • Erasure (“right to be forgotten”);

  • Restriction or objection to processing;

  • Data portability.

Requests can be made by emailing info@rainbows.ie

10. International Data Transfers

We do not transfer personal data outside the European Economic Area (EEA) unless appropriate safeguards are in place to protect your data.

11. Contact Us

If you have questions or concerns about how your data is processed, please contact:
Data Protection Manager
Rainbow Community Services HQ
Fitzwilliam Court, Dyer Street, Drogheda, Co. Louth, A92 X9PV
📧 info@rainbows.ie

You also have the right to contact the Data Protection Commission (DPC) at
www.dataprotection.ie.

12. Review and Updates

This notice is reviewed annually or as required to reflect changes in data protection law and best practice.