Last updated: 12 May 2026

Who I am

I’m Fiona Flew, a qualified counsellor working in private practice in the UK. For data protection purposes I am the “data controller” for any personal information you provide. I’m registered with the Information Commissioner’s Office: ICO Registration: ZC147596 You can contact me at: fionaflew@outlook.com

What data I collect

If you use the contact form on this site, I collect: your name, email address, phone number and any message you choose to send. Please do not include sensitive health or mental health details in the initial form.

Why I collect it & lawful basis

I use this data solely to respond to your enquiry about counselling services. My lawful basis under UK GDPR is ‘legitimate interests’ — to run my practice and respond to potential clients. I will not add you to a mailing list without your explicit consent.

How it’s stored

This website is built on Squarespace. When you submit the form, your data is securely transmitted and stored by Squarespace in line with their Data Processing Addendum. A copy is also sent to my professional email account. I do not keep enquiry data longer than 6 months if you do not become a client. If we work together, I’ll explain record-keeping in our client agreement. Client notes are kept for 7 years as required by my insurer and professional body.

Sharing your data

I do not share, sell, or transfer your data to third parties for marketing. Squarespace acts as my data processor to host this site and store form submissions. I may share data if required by law or to prevent serious harm, in line with my ethical framework.

Cookies

This site uses only essential cookies to make it work and remember your cookie preferences. No tracking or analytics cookies are used.

Your rights

Under UK GDPR you have the right to access, correct, delete, or restrict use of your personal data. You can also object to processing. To exercise these rights, email me at the address above. You also have the right to complain to the ICO at ico.org.uk.

Security

This site uses HTTPS encryption. I use strong passwords and two-factor authentication on my email. Please be aware that email is not 100% secure, which is why I ask you not to send sensitive details via the contact form.