Privacy policy

This policy explains what information New Leaf Training & Coaching ("New Leaf", "we", "us") collects through newleaftrainingandcoaching.com, how we use it, who we share it with, how long we keep it, and the choices you have.

Last updated: October 25, 2026

Please do not send health information through this website

This website is for learning about our services, taking courses, booking a consultation and downloading resources. Please do not enter clinical or health information in any form on this site, including the sign-up, booking and contact forms.

If you become a counseling client, your clinical records are handled separately under our Notice of Privacy Practices, which you receive at intake. This policy covers the website only.

Information you give us

Your account: your name, email address and password. Your password is stored by our authentication provider in hashed form; we never see it. You can also choose to tell us your phone number, what you are interested in, how you heard about us, and whether you are a social worker or mental-health professional (with your license type and state).
Your professional profile: if you take continuing education courses, the name, license type, license number and state of licensure you enter, so they can appear on your certificates.
Bookings: your name, email address, phone number (optional), an optional note, and the time you choose.
Email sign-ups: your email address and name when you subscribe to updates.
Purchases: what you bought, the amount, any discount code and any refund. Payments are processed by Stripe on Stripe's own pages; we never receive or store your full card number.
Course activity: your lesson progress, quiz and post-test attempts and scores, and the certificates and transcripts you earn.

Information we collect automatically

When you create an account (with a password, an email link or Google): your IP address and the approximate location derived from it (country, region and city), your browser, operating system and device type, your timezone, language and screen size, and how you first found this site — the address of the site that referred you (without any query string), the first page you visited, and any campaign tags in that link (for example utm_source).
Downloads: which free or paid resources you download, and when.
Security records: sign-ins and account actions, kept to protect your account and the site.
Error reports: technical details when something on a page fails, which may include your IP address. Error reporting does not set cookies or record your activity on the site.
Site analytics: aggregate page-view statistics from our hosting provider's analytics, which do not use cookies.
Abuse protection: your IP address is used briefly to limit repeated sign-in attempts and excessive requests to the site.

Cookies

We use a small number of cookies, and none for advertising:

Sign-in cookies keep you signed in. They are required for your account to work.
Security check: Cloudflare Turnstile runs on the sign-in, sign-up and booking forms to stop automated abuse.
First-visit cookie (nl_attrib): on your first visit to our public pages we store how you found the site (referring site without any query string, first page, campaign tags) for 90 days. It is read only if you create an account.
Lesson videos play from YouTube (privacy-enhanced mode), Vimeo or Cloudflare Stream, which may set their own cookies when you play a video.
Payments take place on Stripe's pages, which use Stripe's own cookies under Stripe's privacy policy.

How we use your information

To provide your account, courses, downloads, certificates and transcripts.
To send the emails the service needs: account confirmation and sign-in links, receipts, certificates, course reminders and booking confirmations.
To schedule and manage consultations you book.
To send news, free resources and course updates, including a reminder if you start a checkout and don't finish — only if you opted in. Contacts created before October 2026 were subscribed by default. Every one of these emails has an unsubscribe link.
To keep accounts and the site secure and to prevent abuse.
To understand who we are reaching and how people find us, so we can improve our services.
To keep the records continuing education and professional rules require of us.

When you sign up or first download a free resource, the site owner is notified by email with your name, contact details, what you told us when you signed up, and your approximate location.

Who we share it with

We do not sell or rent your personal information, and we do not share it for targeted advertising.

We use these service providers, who process information on our behalf and only to provide their service:

Supabase: database, sign-in and file storage (United States).
Vercel: website hosting and analytics (United States).
Resend: email delivery.
Stripe: payment processing.
Google: our booking calendar (booking details appear in our calendar), and Google sign-in if you choose it.
Cloudflare: the Turnstile security check.
PostHog: error reporting.
Inngest: scheduling the emails described above.
Upstash: rate limiting that protects sign-in and the site (receives IP addresses).
YouTube, Vimeo and Cloudflare: lesson video playback.

We may also disclose information when the law requires it, or to protect the rights, safety and security of our clients, the public or New Leaf.

How long we keep it

Your account and course records: kept while your account is open. You can close your account at any time from your profile, or ask us to. Closing deletes your sign-in, course progress and personal details. Because continuing-education completion records must be verifiable, we keep your certificates and the passing quiz results behind them for 5 years after you close your account, then delete them. We keep purchase and payment records as described below.
Sign-up technical details (IP address, location, device, how you found us): erased from our database 24 months after you sign up. What you told us when you signed up, such as your interests, is kept with your account. The notification email we receive when you sign up includes your approximate location.
Security records: 7 years.
Booking records: deleted from our database 2 years after the appointment. Appointments also appear in our booking calendar, which we manage separately.
Contact details, purchases and downloads: kept while needed to provide our services and for our business, tax and accounting records.
Email subscriptions: until you unsubscribe.

Your choices and rights

Marketing emails: use the unsubscribe link in any marketing email, or contact us.
Your account details: you can see and update your professional details on your profile page.
Access, correction and deletion: you can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing us at the address below. We will respond within 45 days; if we need more time, we will tell you why. If we decline a request, you can ask us to reconsider by replying to our response. We may need to keep some records where the law requires it.

Depending on where you live, you may have additional rights under local law. Contact us and we will help.

How we protect it

Our website is served over encrypted (HTTPS) connections. Access to personal information is limited to staff who need it, and staff accounts use multi-factor authentication. Downloads and certificates are served through private links that expire shortly after they are created. No system is perfectly secure, but we work to protect your information and to respond promptly to any problem.

Children

This website and our services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

If we change this policy, we will post the updated version here and update the "Last updated" date above. For material changes, we will also let account holders know by email.

Contact us

Email hello@newleaftrainingandcoaching.com with any question or request about your information.