Still Waters

AROMA FREEDOM

Privacy & Cookie Policy

Last updated: April 2025

This Privacy & Cookie Policy explains how Still Waters (operated by Dr. Andrea Smith, referred to as ‘we’, ‘us’ or ‘our’) collects, uses and protects your personal information when you visit www.stillwaters-wellbeing.com and use our services.

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

PART ONE — PRIVACY POLICY

1. Who We Are

Data Controller: Dr. Andrea Smith

Trading as: Still Waters

Email: hello@stillwaters-wellbeing.com

Website: www.stillwaters-wellbeing.com

If you have any questions about how we handle your data, please contact us at the email above.

2. What Information We Collect

Information you provide directly

When you contact us or complete a form on our website (via Elementor Forms), we may collect:

  • Your name
  • Your email address
  • Your phone number (if provided)
  • The content of your message or enquiry
  • Any other information you choose to share with us

Information collected automatically

When you visit our website, certain technical information is collected automatically:

  • Your IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent on each page
  • Referring website (how you found us)
  • Date and time of your visit

This information is collected via StatCounter, a web analytics service. See the Cookie Policy section below for full details.

3. How We Use Your Information

We use the information we collect to:

  • Respond to your enquiries and booking requests
  • Provide and manage our therapy and coaching services
  • Send you information you have requested about our services
  • Understand how visitors use our website so we can improve it
  • Comply with our legal and professional obligations

We do not use your information for automated decision-making or profiling.

4. Our Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

  • Contractual necessity — to fulfil a booking or service agreement with you
  • Legitimate interests — to respond to enquiries and improve our website
  • Consent — where you have given us clear consent (e.g. by submitting a contact form or accepting cookies)

Where we rely on consent, you have the right to withdraw it at any time by contacting us at hello@stillwaters-wellbeing.com.

5. Who We Share Your Information With

We do not sell, rent or trade your personal information. We may share it with:

  • StatCounter (website analytics) — see Cookie Policy section
  • Email service providers used to receive and manage enquiries
  • Professional supervisors or insurers where legally required
  • Law enforcement or regulatory bodies where we are legally obliged to do so

All third parties we work with are required to handle your data securely and in accordance with data protection law.

6. International Data Transfers

Still Waters operates across the UK, Europe and the Middle East. If your data is transferred outside the UK, we ensure appropriate safeguards are in place, including standard contractual clauses or adequacy decisions recognised under UK GDPR.

StatCounter is based in Ireland (EU) and operates under GDPR-compliant data processing agreements.

7. How Long We Keep Your Data

We retain your personal data only for as long as necessary:

  • Enquiry and contact form data — up to 2 years from last contact
  • Client session records — 7 years, in line with professional practice guidelines
  • Website analytics data (StatCounter) — as per StatCounter’s own retention policy

After these periods, data is securely deleted or anonymised.

8. Your Rights

Under UK GDPR, you have the following rights:

  • Right of access — to request a copy of the personal data we hold about you
  • Right to rectification — to ask us to correct inaccurate or incomplete data
  • Right to erasure — to request deletion of your data in certain circumstances
  • Right to restrict processing — to ask us to limit how we use your data
  • Right to data portability — to receive your data in a structured, machine-readable format
  • Right to object — to object to processing based on legitimate interests
  • Right to withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, please contact us at hello@stillwaters-wellbeing.com. We will respond within one calendar month.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Our website uses HTTPS encryption. However, no internet transmission is entirely secure and we cannot guarantee absolute security.

10. Children’s Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. The ‘Last updated’ date at the top of this page will always reflect the most recent version. We encourage you to review this policy periodically.

 

PART TWO — COOKIE POLICY

12. What Are Cookies

Cookies are small text files placed on your device when you visit a website. They help websites remember your preferences and understand how you use the site. Cookies cannot harm your device or access any other information on it.

13. Cookies We Use

Strictly necessary cookies

These cookies are essential for the website to function and cannot be switched off. They do not store any personally identifiable information.

  • Session cookies — temporary cookies that expire when you close your browser, used to maintain basic website functionality
  • Security cookies — used by WordPress and Elementor to protect the site against malicious activity

Analytics cookies (StatCounter)

We use StatCounter to understand how visitors interact with our website. StatCounter places the following cookies:

  • is_unique — determines whether a visit is a first-time or returning visit. Expires after 365 days.
  • statcounter — session-based cookie used to track page views within a visit. Expires at end of session.
  • sc_is_visitor_unique — similar to is_unique, used to identify unique visitors. Expires after 365 days.

StatCounter collects data including: pages visited, time on site, referring site, browser type, operating system and approximate geographic location (country/city level, derived from IP address). It does not collect your name, email or any directly identifying information.

StatCounter is operated by Aodhan Cullen, based in Dublin, Ireland, and processes data in compliance with GDPR. Full details: www.statcounter.com/about/legal/

Functional cookies (Elementor)

Elementor (our website builder) may place functional cookies to remember your preferences and ensure the site displays correctly:

  • elementor — stores the Elementor editor version. Expires after 365 days.
  • wp-settings cookies — WordPress user preference cookies. Expire after 365 days.

14. Managing Your Cookie Preferences

When you first visit our website, you will be shown a cookie consent banner. You can choose to accept or decline non-essential cookies at that point.

You can also control cookies through your browser settings. Most browsers allow you to:

  • View what cookies are stored and delete them individually
  • Block all cookies from all or specific websites
  • Set preferences for first-party and third-party cookies

Please note that disabling analytics cookies will not affect your ability to use our website, but it will prevent us from understanding how visitors use the site.

For guidance on managing cookies in your specific browser, visit: www.allaboutcookies.org

15. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or cookie policies of those sites. We encourage you to read their policies before providing any personal information.

16. Contact Us

If you have any questions about this Privacy & Cookie Policy, please contact:

Dr. Andrea Smith — Still Waters

Email: hello@stillwaters-wellbeing.com

Website: www.stillwaters-wellbeing.com

 

Where stillness meets emotional freedom