Privacy Policy — New Horizons by Claire Wallace

Last Updated · June 2026

1. Who We Are

This website is operated by New Horizons by Claire Wallace, a sole trader providing online hypnotherapy, psychotherapy, energy healing, mediumship and related spiritual wellbeing services.

For the purposes of UK data protection law — including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 — New Horizons by Claire Wallace is the data controller of any personal information collected through this website.

If you have questions about how your data is used, please contact us at hello@newhorizonsbyclaire.co.uk or by phone on 07368 123 355.

2. Information We Collect

We only collect personal information that you actively provide to us. This website does not use tracking cookies, advertising networks, or analytics software.

Via the contact form

When you use the contact form on this website, we collect:

Name — to address you personally
Email address — to respond to your enquiry
Service interest — the service you've selected
Message content — what you share in your message

During service delivery

If you become a client, we may collect additional information as part of providing our services — including health information, session notes, and details shared during intake consultations. This is collected directly from you with your knowledge.

A note on sensitive data. The nature of our services means that health-related and other sensitive personal information may be shared during sessions. We treat all such information with the utmost care, discretion and confidentiality. By engaging with our services, you consent to us holding this information for the purposes of delivering your sessions and maintaining appropriate records.

Technical data

This website is hosted by Netlify. Netlify may collect standard server log data — such as IP addresses and page request information — as part of normal hosting operations. This is governed by Netlify's Privacy Policy. We do not have direct access to or control over this data.

3. How We Use Your Information

We use the information you provide solely to respond to your enquiry and — if you become a client — to arrange, manage and deliver your sessions.

We will never sell, rent or share your personal information with third parties for their own marketing purposes.

Lawful basis for processing

Under UK GDPR, we rely on the following legal bases depending on the context:

Enquiries Legitimate interests Responding to your message in the way you would reasonably expect.

Active clients Contract performance Managing bookings and delivering sessions as part of our agreement.

Sensitive data Explicit consent Health and spiritual information shared by you during the course of sessions.

Legal obligations Legal compliance Retaining records as required by law, including financial records.

4. How Long We Keep Your Data

We retain your information only for as long as is necessary for the purposes for which it was collected:

Enquiries that don't proceed — deleted within 6 months of last contact.
Client session records — retained for the duration of the client relationship.
Former client records — retained for up to 6 years after the relationship ends, in line with HMRC requirements and professional practice guidance.
Health and sensitive data — held only for as long as is reasonably necessary and securely deleted once no longer needed.

Once the relevant retention period passes, your data is securely deleted or anonymised.

5. Your Rights

Under UK GDPR, you have the following rights regarding your personal data. You can exercise any of these rights by contacting us directly — we will respond within one calendar month.

Right of access — request a copy of the personal data we hold about you.
Right to rectification — ask us to correct inaccurate or incomplete information.
Right to erasure — ask us to delete your data where there is no compelling reason to continue holding it.
Right to restrict processing — ask us to pause the use of your data while a query is resolved.
Right to object — object to processing based on legitimate interests.
Right to data portability — request your data in a structured, machine-readable format.
Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would always appreciate the opportunity to address any concern directly first.

6. Who We Share Your Data With

We do not sell or trade your personal information. We share it only in the following limited circumstances:

Netlify — our hosting and form-processing provider, acting as a data processor. See Netlify's Privacy Policy.
Legal requirement — if required to do so by law, court order or regulatory obligation.
Professional supervision — where required as part of professional practice obligations, information may be shared in anonymised or pseudonymised form.

No personal data is transferred outside the United Kingdom or European Economic Area except where service providers have appropriate safeguards in place.

7. Confidentiality of Sessions

Everything shared within a session is treated as confidential. Session content will not be disclosed to third parties except in the following circumstances, which are standard practice across all talking therapies:

Where there is a serious and immediate risk of harm to you or another person
Where disclosure is required by law or court order
Where anonymised information is discussed in professional supervision

Where possible, we would seek to inform you before any disclosure is made.

8. Cookies

This website does not use cookies for analytics, advertising or tracking. Netlify may set strictly necessary session-level cookies as part of standard hosting and form submission operations. These are technically essential for the site to function and are not used to identify or track you across other websites.

No cookie consent banner is required for strictly necessary cookies under UK law.

9. Security

This website is served over HTTPS, and contact form submissions are processed via Netlify's secure infrastructure. Client session records are stored securely and accessed only when necessary to manage your bookings and sessions.

We take reasonable steps to protect your personal information. No method of transmission over the internet is entirely risk-free. If you have concerns, please contact us to discuss alternative arrangements.

10. Links to Other Websites

This website contains links to external services including Facebook, TikTok and Instagram. Once you leave this site, we are not responsible for the privacy practices of those platforms. We encourage you to read their respective privacy policies.

11. Changes to This Policy

We may update this privacy policy from time to time — for example, if our services evolve or data protection law is updated. The "Last Updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.

Continued use of this website after an update constitutes acceptance of the revised policy.

Questions about your data?

We will respond to all data-related requests within one calendar month, as required by UK GDPR.

If you are not satisfied with our response, you may contact the ICO at ico.org.uk or on 0303 123 1113.

Return to Site