1. Who we are

A New Chapter Coaching provides private therapy services in the UK.

For the purposes of data protection law, Donna Shillinglaw is the Data Controller of personal data collected via this website.

If you have any questions about this policy or how your data is handled, please contact: donna@anewchaptercoaching.com 

2. What information is collected

When you use the website, we may collect:

a) Information you provide directly

When you complete the enquiry form:

• Your name

• Email address

• Telephone number (if provided)

• The content of your message

Please note: The enquiry form is for initial contact only. You are advised not to include detailed medical history or highly sensitive personal information at this stage.

b) Technical information

We may automatically collect:

• IP address

• Browser type

• Device information

• Website usage data

This is collected via standard website analytics tools to help improve the site.

3. How your information is used

Your information is used to:

• Respond to your enquiry

• Arrange an initial consultation

• Provide therapy services

• Maintain website performance and security

We do not use your information for marketing.

4. Lawful basis for processing

Under UK GDPR, we rely on:

• Article 6(1)(b) – Processing necessary to respond to your enquiry or provide services

• Article 9(2)(h) – Processing of health-related data for the provision of healthcare services

5. How enquiry forms are handled

Enquiries submitted via the website:

• Are sent directly to the therapist’s secure professional email address.

• May be temporarily processed by Squarespace (our website hosting provider) in order to deliver the message.

• Are not shared with third parties for marketing purposes.

Website performance support is provided by Cada Creative. 

Cada Creative may access website analytics and submission volume metrics to monitor website performance, but does not routinely access or retain the content of enquiries. 

A data processing agreement is in place to ensure compliance with UK GDPR.

6. Third-party services

We use the following service providers:

Squarespace

Our website is hosted by Squarespace. Squarespace may process personal data submitted via forms in order to operate the website.

You can view their privacy policy here: https://www.squarespace.com/privacy 

We may also use secure email hosting services (such as Google Workspace or Titan Email) to receive enquiries.

7. Data retention

If you contact us but do not proceed with therapy, your enquiry information will be retained for no longer than four weeks before being securely deleted.

If you become a client, information will be retained in accordance with professional and legal requirements.

8. Your rights

Under UK data protection law, you have the right to:

• Access your personal data

• Request correction of inaccurate information

• Request deletion (where appropriate)

• Restrict or object to processing

• Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO website: https://www.ico.org.uk 

9. Data security

Appropriate technical and organisational measures are in place to protect your personal data, including:

• Secure password management

• Two-factor authentication, where available

• Encrypted devices

10. Changes to this policy

This privacy policy may be updated periodically. The most recent version will always appear on this website.