Privacy Policy
Last updated: 21.07.25
River and Stone is committed to protecting your personal information and being transparent about how we collect, use, and safeguard it. This policy outlines how we handle your data when you visit our website, engage with our services, or contact us.
1. Who We Are
River and Stone is a trauma-informed consultancy and training service based in the UK. We work with professionals, teams, and organisations supporting children and young people who have experienced trauma.
Contact Details:
River and Stone
Email: jackelliott@riverandstone.uk
Phone: 07702285274
We are the “data controller” of any personal data we collect, meaning we determine how and why your data is used.
2. What Personal Data We Collect
We may collect and store the following types of personal data:
* Name, email address, phone number, and organisation details
* Information provided via contact forms, enquiry emails, or consultation bookings
* Notes from consultations or client communications
* Website usage data (e.g. IP address, browser type, pages visited)
* Payment information (handled securely via third-party processors)
We do not collect unnecessary or excessive personal data, and we only collect what is needed to provide and improve our services.
3. How We Collect Your Data
We collect data in the following ways:
* When you contact us via the website, email, or phone
* When you book or attend a consultation, training session, or request resources
* When you purchase a resource pack
* When you browse our website (through cookies and analytics tools)
4. Why We Collect Your Data
We use your data to:
* Respond to your enquiries and provide relevant information
* Deliver training, consultations, and resources effectively
* Maintain accurate internal records
* Improve our services and understand client needs
* Send you relevant updates (with your consent)
5. Lawful Basis for Processing
We only use your data when we have a lawful basis to do so. The lawful bases we rely on are:
* Legitimate interests – to respond to enquiries or provide services you have requested
* Consent – for email updates or optional communications
* Contract – where we are providing paid-for services or resources
* Legal obligation – where we must retain information for safeguarding, tax, or regulatory purposes
6. Who We Share Your Data With
Your data is treated with confidentiality and is never sold.
We may share your information with:
* Trusted associates working under strict confidentiality agreements
* Our website, cloud storage, and email providers (e.g. Google Workspace)
* Legal or safeguarding authorities, only if legally required
We ensure all third parties adhere to strong data protection standards.
7. How We Store and Protect Your Data
We take data security seriously. Your information is stored securely using encrypted, password-protected platforms, and only accessed by authorised individuals.
We keep consultation and service records for up to 7 years, in line with ethical guidance. After this period, data is securely deleted or anonymised.
8. Your Rights
Under UK data protection law, you have the right to:
* Access your personal data
* Request correction of inaccurate or incomplete data
* Request deletion of your data (in certain circumstances)
* Object to or restrict processing
* Withdraw consent (where applicable)
To exercise any of these rights, contact us at jackelliott@riverandstone.uk
9. Cookies and Website Analytics
Our website may use cookies or tracking tools (such as Google Analytics) to understand how visitors use the site. This helps us improve your experience.
You can set your browser to refuse cookies or alert you when cookies are being used.
10. Changes to This Policy
We may update this policy from time to time to reflect changes in law or our services. Any significant updates will be posted on this page.
11. Contact Us
If you have any questions about this policy or how your data is used, please contact:
River and Stone
Email: jackelliott@riverandstone.uk
Phone: 07702285274
If you're unhappy with how your data is handled, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO)* at www.ico.org.uk