Privacy Policy
Last updated: 15 October 2026
At still., we believe that trust begins with transparency. That includes being clear about how we collect, use and protect personal information.
This Privacy Policy explains how we handle personal data when you visit our website, contact us, arrange a meeting or enquire about our consultancy services.
1. Who we are
still. is an independent web consultancy and management service operated by CKS Studio Ltd, a company registered in England and Wales.
For the purposes of UK data protection legislation, CKS Studio Ltd is the data controller for the personal information described in this policy.
Company: CKS Studio Ltd
Trading name: still.
Registered office: 86–90 Paul Street, London, EC2A 4NE, United Kingdom
Company registration number: 14907090
Website: https://withstill.co.uk
Email: hello@withstill.co.uk
If you have questions about how we use your personal information, you can contact us using the email address above.
2. Information we collect
Depending on how you interact with still., we may collect the following information.
Information you provide directly
When you email us, arrange a meeting or enquire about our services, we may collect:
- Your name and contact details.
- Your business name and professional role.
- Your website address.
- Information about your website, business objectives or project requirements.
- Meeting details and correspondence.
- Any additional information you choose to share with us.
Information collected through website use
When you visit our website, certain technical information may be processed automatically, including:
- Your IP address.
- Browser and device information.
- Pages requested and access times.
- Technical information relating to website security and performance.
If we introduce website analytics, we may also collect information about how visitors interact with the website. The details will depend on the tools we use and your applicable privacy preferences.
Information collected during client engagements
If you become a client, we may additionally process:
- Business contact and billing information.
- Project documentation and correspondence.
- Website performance information.
- Details of systems and services relevant to the agreed work.
- Access information necessary to carry out authorised consultancy activities.
Where we need access to client systems, we aim to use appropriately permissioned accounts rather than shared personal login credentials.
3. How and why we use your information
We use personal information only where we have an appropriate lawful basis under applicable data protection legislation.
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and communicating with prospective clients | Legitimate interests, or steps taken at your request before entering into a contract |
| Arranging and conducting introductory meetings | Legitimate interests, or steps taken before entering into a contract |
| Providing consultancy services | Performance of a contract, or legitimate interests where appropriate |
| Managing invoices, accounting and statutory records | Legal obligation, or legitimate interests where appropriate |
| Maintaining website security and preventing misuse | Legitimate interests |
| Understanding website performance | Legitimate interests or consent, depending on the specific processing and applicable requirements |
| Sending optional marketing communications | Consent or another lawful basis where permitted by applicable marketing rules |
Where we rely on legitimate interests, these may include operating our business effectively, responding to enquiries, maintaining security and improving our services.
We consider whether these interests are outweighed by the rights and interests of the individuals concerned.
We do not use personal information for unrelated purposes without identifying an appropriate legal basis and providing any additional information required by law.
4. How we share information
We do not sell your personal information.
We may share information with trusted third-party service providers where necessary to operate our website and business.
These may include:
Website hosting and email providers
For hosting, website administration and business communications.
Appointment scheduling and video conferencing providers
For arranging and conducting meetings, where those services are used.
Analytics and website management providers
For understanding and maintaining website performance, where those tools are enabled.
Professional advisers and business service providers
Such as accountants, legal advisers and relevant administrative service providers.
We may also disclose information where required by law or where necessary to establish, exercise or defend legal rights.
Where service providers process personal information on our behalf, we take appropriate steps to ensure suitable contractual and security arrangements are in place.
5. International data transfers
Some of the service providers we use may process or store personal information outside the United Kingdom.
Where personal data is transferred internationally, we will ensure that an appropriate transfer mechanism or other applicable legal protection is in place, as required by UK data protection legislation.
6. How long we retain information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including meeting legal, accounting and regulatory requirements.
Our retention periods depend on the type of information involved.
For example:
- General enquiries: Retained for a reasonable period to respond and manage subsequent correspondence.
- Meeting information: Retained as necessary for scheduling, follow-up and business administration.
- Client records: Retained for the duration of the engagement and any subsequent period required for contractual, legal or accounting purposes.
- Technical website information: Retained according to operational security requirements and the settings of the relevant systems.
We review retained information and delete or anonymise it when it is no longer required, unless continued retention is legally justified.
7. Cookies and similar technologies
Our website may use cookies and similar technologies to support essential functionality, maintain security and understand website performance.
Some cookies are necessary for the website to operate. Others may require your consent or another applicable legal exemption.
Where required, we will provide appropriate information and controls before using non-essential technologies.
For further information, please see our [Cookie Policy].
8. Your data protection rights
Under applicable UK data protection legislation, you may have rights to:
- Request access to your personal information.
- Ask us to correct inaccurate or incomplete information.
- Request the deletion of your personal information.
- Ask us to restrict certain processing activities.
- Object to processing, including processing based on legitimate interests.
- Request the transfer of your information in certain circumstances.
- Withdraw consent where processing relies on consent.
These rights are not absolute and may depend on the circumstances and legal basis for processing.
You have the right to object to processing based on legitimate interests. You also have the right to object to direct marketing at any time.
To exercise your rights, please contact:
We will consider and respond to requests in accordance with applicable law.
9. Data security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration or loss.
These measures may include appropriate access controls, secure connections, software maintenance and the use of reputable service providers.
No online system can guarantee absolute security, but protecting the information entrusted to us is an important part of how we operate.
10. Third-party websites and services
Our website may contain links to third-party websites or services, including external booking platforms.
We are not responsible for the privacy practices of independent third parties.
We encourage you to review their privacy policies when using their services.
11. Making a complaint
If you have concerns about how we handle personal information, please contact us at:
We will review your concern and respond in accordance with applicable data protection requirements.
You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).
Website: https://ico.org.uk
12. Changes to this policy
We may update this Privacy Policy to reflect changes to our services, technology, business practices or legal obligations.
The latest version will be published on this page with an updated revision date.
Where required, we will provide additional notice of material changes.