Privacy Notice
Last Updated: June 2026
Introduction
New Insight Therapy and Wellbeing is committed to protecting your privacy and handling your personal information in a transparent and secure manner.
This Privacy Notice explains how I -Fiona Burton- collect, use, store and protect your personal information when you visit my website, contact me, enquire about services, or work with me as a client.
Data Controller
Fiona Burton, New Insight Therapy and Wellbeing
Location: Burbage, Leicestershire LE10 2UA
Email: fiona@newinsighttherapy.co.uk
Website: www.newinsighttherapy.co.uk
Tel: 07988 354635
ICO Registration Number: ZB357360
For the purposes of UK data protection law, Fiona Burton is the Data Controller responsible for your personal information.
What Information I Collect
Depending on your interaction with my business, I may collect:
Website Enquiries
- Name
- Email address
- Telephone number
- Information you choose to provide in contact forms or emails
Therapy, Coaching and Wellbeing Services
- Personal details
- Contact information
- Emergency contact information
- Health and wellbeing information
- Information relating to your therapy or coaching goals
- Session notes
- Relevant correspondence
Website Usage Information
When you visit my website, certain information may be collected automatically through cookies and website analytics, such as:
- IP address
- Browser type
- Device information
- Pages visited
- Website usage statistics
Please see the Cookie Policy for further information.
Special Category Data
As a therapist and coach, I may process special category personal data relating to your health, mental wellbeing, emotional wellbeing and personal circumstances.
This information is only collected where necessary to provide services and is handled with appropriate safeguards and confidentiality.
How Your Information Is Used
Your personal information may be used to:
- Respond to enquiries
- Arrange appointments
- Provide therapy, coaching, hypnotherapy, EFT, BLAST Technique and related services
- Maintain client records
- Process payments
- Comply with legal, professional and insurance obligations
- Safeguard clients where necessary
- Improve website performance and user experience
I will only process your information where I have a lawful basis to do so under UK GDPR.
Lawful Bases for Processing
The lawful bases relied upon may include:
- Consent
- Contract
- Legitimate interests
- Legal obligations
- Provision of health and wellbeing services
Where consent is required, you may withdraw consent at any time.
Confidentiality
Information shared during therapy and coaching sessions is treated confidentially.
However, confidentiality may need to be broken where:
- There are serious concerns regarding your safety or the safety of another person
- There are safeguarding concerns involving a child or vulnerable adult
- Disclosure is required by law
- A court order requires disclosure
Where possible, this would be discussed with you first.
How Information Is Stored
I take reasonable steps to ensure your information is stored securely.
Client information may be stored using:
- Dubsado
- Microsoft 365
- Paper records stored in a locked cabinet
- Calendly
- Stripe
- PayPal
These providers may process information on my behalf and have their own privacy and security measures in place.
International Transfers
Some of the service providers I use may store or process data outside the United Kingdom.
Where this occurs, appropriate safeguards are used to protect personal information in accordance with UK data protection legislation.
Retention of Records
Client records are generally retained for 7 years following the end of therapy, coaching or related services.
After this period, records are securely destroyed unless there is a legal, regulatory or insurance-related reason for retaining them longer.
Digital records: email addresses, emails, telephone numbers and messages are deleted after 1 year.
Children and Young People
I may provide services to young people from the age of 11.
Where required, parental or legal guardian consent will be obtained before services commence.
Information relating to children and young people is handled with additional care and protection.
Your Rights
Under UK GDPR, you have the right to:
- Access your personal information
- Request correction of inaccurate information
- Request deletion of information where appropriate
- Restrict processing
- Object to processing
- Request transfer of your data where applicable
- Withdraw consent where processing is based on consent
Requests can be made by contacting:
Complaints
If you are unhappy with how your personal information has been handled, please contact me first so that I can try to resolve the issue.
You can contact me via email:
- I will acknowledge receipt of your complaint within 30 days
- Investigate the complaint without undue delay and keep you updated
- Inform you of the outcome
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Website: www.ico.org.uk
Telephone: 0303 123 1113
Changes to This Privacy Notice
This Privacy Notice may be updated from time to time to reflect changes in legislation, business practices or services.
The most current version will always be available on this website.