Privacy Notice

At a glance

Responsible: Tiong Eng Phua, sole proprietorship “Mind Insights by Krish Phua”, Sumatrastrasse 25, 8006 Zurich, Switzerland.

No tracking: This website sets no cookies and uses no analytics, advertising or social media tools.

Hosting and email: cyon AG, Basel, Switzerland.

Booking and online sessions: Calendly, Google Calendar and Zoom (USA). You can also book by phone, email or WhatsApp.

Clients: How I handle data within counselling is explained in a separate client privacy information, which you receive before the first session.

Your rights: access, correction, deletion and more: krish.phua@mindinsights.ch

1. Who is responsible

This privacy notice explains how I process personal data when you visit my website www.mindinsights.ch, contact me or book a session.

Responsible for the processing (controller):

Tiong Eng Phua Sole proprietorship “Mind Insights by Krish Phua” Sumatrastrasse 25, 8006 Zurich, Switzerland Email: krish.phua@mindinsights.ch Phone: +41 78 335 39 19

For all questions and requests about data protection, please contact me at the email address above. I have not appointed a data protection advisor; I handle privacy matters personally.

2. Scope

This notice covers my website, communication with me and appointment booking.

It does not cover:

the processing that external providers such as Calendly, Zoom, Google or Meta carry out for their own purposes; their own privacy notices apply;

booking and payment through independent counselling platforms; the respective platform is responsible for the data it processes, while the separate client privacy information applies to the counselling itself;

services of Inside Mind Insights LLP, Singapore, which has its own privacy policy.

How I process personal data within the counselling relationship (case notes, online sessions, invoicing, confidentiality) is explained in a separate client privacy information. Clients receive it together with the service agreement and informed consent form before the first session.

3. Visiting this website

Hosting: This website is hosted by cyon AG, Brunngässlein 12, 4052 Basel, Switzerland, in a data centre in Switzerland. cyon processes data on my behalf under a data processing agreement. To protect the website against attacks, cyon uses specialised security service providers: DDoS protection in Germany and protection against security vulnerabilities in the Netherlands. The current list of cyon's subprocessors is available at www.cyon.ch/legal/avv.

Server log files: When you visit the website, the server automatically records technical data: IP address, date and time of access, page requested, referring website, browser type and version, operating system and amount of data transferred. This data is used only to deliver the website, keep it stable and secure, and detect attacks. It is not combined with other data and not used to create profiles. Log files are deleted automatically after 24 hours at the latest. Website statistics based on these log files are deactivated.

No cookies, no tracking: This website sets no cookies and stores no information in your browser. It uses no analytics, advertising or social media tools and loads no content from third parties. The website uses system fonts and does not load external fonts.

Links: The website contains links to other websites, for example to Calendly for booking. When you click such a link, you leave this website.

4. Contacting me

You can contact me by email, phone or WhatsApp. I use the information you provide only to answer your enquiry, arrange appointments and provide my services.

Email: My email is hosted by cyon AG in Switzerland (see section 3). Standard email is not end-to-end encrypted. Please keep personal details in emails to the minimum needed for scheduling and share sensitive topics in the session instead.

WhatsApp: WhatsApp is a service of Meta (WhatsApp Ireland Limited; WhatsApp LLC, USA). Messages are end-to-end encrypted, but Meta processes metadata such as phone numbers and the time and frequency of communication, also in the USA. I use WhatsApp only for organisational matters such as scheduling. If you prefer not to use WhatsApp, please contact me by email or phone.

Phone: Phone calls are not recorded.

5. Booking appointments

Calendly: You can book sessions online via Calendly (Calendly LLC, USA). Calendly is not embedded in this website; the booking link takes you to Calendly's own website. Calendly processes your name, email address, the type of session, the selected appointment and any information you enter in the booking form on my behalf. For data Calendly collects for its own purposes, for example if you have your own Calendly account, Calendly is itself responsible: calendly.com/legal/privacy-notice.

Calendar: Bookings are transferred to my Google Calendar (Google).

Online sessions: For online sessions, a Zoom meeting link is created automatically and sent to you by email.

Please note: The fact that you book a counselling session can itself reveal something about your personal situation. Please do not enter details about your concerns or health in the booking form. Your name, email address and the type of session are all I need. Alternatively, you can book by phone, email or WhatsApp.

6. Recipients

I do not sell your data and do not use it for marketing. Service providers that process data on my behalf may do so only according to my instructions. Your data is shared only with:

7. Disclosure abroad

Some providers process data outside Switzerland:

EU/EEA (Germany, Netherlands, Ireland and others): The Swiss Federal Council recognises these countries as providing an adequate level of data protection.

USA (Calendly, Zoom, Google, Meta): I use only providers certified under the Swiss-U.S. Data Privacy Framework. The Federal Council recognises an adequate level of data protection for certified companies. Where a provider is not certified, I rely on standard contractual clauses recognised under Swiss law.

8. How long I keep data

I keep data longer only where this is necessary to establish, exercise or defend legal claims. Deleted data may remain in my hosting provider's backups for a limited time, generally up to two weeks.

9. Data security

I protect personal data with appropriate technical and organisational measures, including encrypted transmission of the website (HTTPS), two-factor authentication for email and cloud accounts, encrypted devices, access restricted to me.

If a data security breach is likely to result in a high risk for you, I report it to the Federal Data Protection and Information Commissioner (FDPIC) and inform you where required by law.

10. Your rights

Under the FADP, you have the right to:

request information about the personal data I hold about you;

have incorrect data corrected;

have your data deleted, unless I am legally required to keep it;

object to processing and withdraw your consent at any time with effect for the future;

receive data you have provided to me in a common electronic format (data portability).

Please send your request to krish.phua@mindinsights.ch. I may ask you to confirm your identity. I respond within 30 days, generally free of charge.

You can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.

11. No automated decisions

I do not make decisions based solely on automated processing and do not use your data for profiling.

12. Applicable law

This processing is governed by the Swiss Federal Act on Data Protection (FADP) and the Data Protection Ordinance (FDPO). My counselling services are aimed at people resident in Switzerland.

13. Changes to this privacy notice

I update this privacy notice when my services or tools change. The version published on this website applies.

Last updated: 16.10.2026