1. Who is responsible for your information?
The data controller is [your full legal or trading name], trading as Still & Steady EFT.
- Business address: [business correspondence address]
- Email: hello@example.com
- Telephone: [telephone number, if used]
2. Information collected
Depending on how you use the website or services, information collected may include:
- your name, email address, telephone number and contact preferences;
- information you include in an enquiry, contact form or email;
- booking, attendance, invoice and payment information;
- notes you choose to share about your experiences, goals or emotional wellbeing;
- technical information such as your IP address, browser type, device type, referring page and pages visited;
- your consent choices and communications history.
Please do not submit urgent, crisis or highly sensitive information through the website contact form.
3. Special-category information
Information about physical or mental health can be classed as special-category personal data. Where this information is genuinely needed to provide an EFT service, it will only be used where an appropriate legal condition applies, which may include your explicit consent. You may withdraw consent at any time, although this will not affect processing that already took place lawfully.
4. How and why information is used
Personal information may be used to:
- respond to enquiries and communicate with you;
- assess whether the service is suitable and arrange appointments;
- provide agreed services and keep appropriate professional records;
- process payments, issue invoices and maintain financial records;
- manage cancellations, complaints, safeguarding concerns or legal claims;
- maintain website security and understand basic website performance;
- send optional news or marketing messages where you have chosen to receive them.
5. Lawful bases
The lawful basis depends on the purpose. It may be:
- Contract: to take steps at your request or provide a service you have booked.
- Legitimate interests: to operate, secure and improve the business, respond to enquiries and maintain appropriate records, where those interests do not override your rights.
- Consent: for optional marketing and, where appropriate, particular uses of sensitive information.
- Legal obligation: to meet tax, accounting, safeguarding or other legal duties.
- Legal claims or vital interests: in limited situations involving safety, complaints or legal proceedings.
6. Who information may be shared with
Information is not sold. It may be shared only where necessary with trusted providers or authorities, such as:
- website hosting, email, form-processing and IT support providers;
- booking, video-call, accounting and payment providers;
- professional advisers, insurers or supervisors where appropriate;
- regulators, courts, law-enforcement bodies or safeguarding services where required or justified by law.
Current providers should be listed here before publication: [list your actual providers, for example hosting company, Formspree, booking platform, payment processor and video-call platform].
7. International transfers
Some service providers may process information outside the United Kingdom. Where this happens, reasonable steps will be taken to use an approved transfer mechanism and appropriate safeguards. Check each provider’s terms and privacy information and describe the safeguards you rely on here: [details].
8. How long information is kept
Information is kept only for as long as it is reasonably needed for the purpose for which it was collected, and to meet professional, insurance, tax and legal requirements. Suggested retention periods must be replaced with your actual policy:
- unconverted enquiries: [for example, 12 months];
- client and session records: [your documented retention period];
- financial and tax records: [your applicable statutory period];
- marketing preferences: until consent is withdrawn or the information is no longer required.
9. Security
Reasonable technical and organisational measures are used to protect personal information. However, no internet transmission or storage system can be guaranteed to be completely secure. Avoid sending information by ordinary email that you would not be comfortable transmitting in that way.
10. Cookies and similar technologies
This website may use essential technologies needed for it to function. It may also load resources from third parties, such as web fonts, form processors or embedded services, which can receive technical information about your visit.
Non-essential analytics, advertising or tracking technologies should not be activated until the visitor has made a valid choice. Add a separate cookie notice and consent control before enabling them. A list of the cookies and services actually used should appear here: [cookie and service list].
11. Your rights
Depending on the circumstances, you may have the right to:
- ask for a copy of your personal information;
- have inaccurate or incomplete information corrected;
- ask for information to be erased or its use restricted;
- object to certain processing;
- receive information in a portable format;
- withdraw consent at any time where consent is relied upon;
- complain about how your information has been handled.
To exercise a right, contact hello@example.com. Identity may need to be verified before information is released.
12. Complaints
Please contact Still & Steady EFT first so that any concern can be considered. You also have the right to complain to the UK Information Commissioner’s Office. Its current contact details are available on the ICO website.
13. Links to other websites
This website may link to third-party websites. Their privacy practices are outside the control of Still & Steady EFT, so you should read their privacy notices before submitting information.
14. Changes to this notice
This notice may be updated as the website, services or legal requirements change. The date at the top will show when it was last revised.