Last updated: 9.11.2026
Privacy Policy
1. About This Policy
Your trust and privacy are important to me. This Privacy Policy explains how I collect, use, and protect personal information when you visit www.wellandrooted.eu, contact me, book a Discovery Call, or use the services offered through Well & Rooted.
The data controller is:
Monika Zápotocká, trading as Well & Rooted
Business Registration Number (IČO): [insert]
Registered Business Address: 32, Korno, 267 27, Czech Republic
Email: hello@wellandrooted.eu
Personal data is handled in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR).
2. What Information I Collect
Depending on how you interact with Well & Rooted, I may process:
Enquiries: Your name, email address, and information you provide through the contact form or by email.
Discovery Call bookings: Your name, email address, appointment details, and any information you choose to include in the Google Calendar booking form.
Paid sessions: Your contact details, agreed services, appointment information, relevant correspondence, and brief notes of key themes, goals, or intentions discussed during our work.
Payments: Information necessary for invoicing, payment administration, and legal record-keeping.
Website usage: Technical information such as IP addresses, browser or device information, cookies, and basic website statistics processed through Webnode.
Contact details and booking information are necessary to respond to enquiries, arrange appointments, and provide services. Certain billing details may also be required by law. Other information you choose to share is generally voluntary, although some information may be needed to understand and agree on the requested service.
3. Why I Process Your Data
Personal data is processed for the following purposes and legal bases under Article 6 GDPR:
Responding to enquiries and arranging services: Taking steps before entering into an agreement or performing an existing agreement (Article 6(1)(b)), or legitimate interests in responding to general enquiries (Article 6(1)(f)).
Providing services and maintaining continuity: Performing an agreed service (Article 6(1)(b)) and, where appropriate, legitimate interests in maintaining brief, relevant working notes (Article 6(1)(f)).
Payments and legal records: Performing an agreement and complying with accounting, tax, and other legal obligations (Articles 6(1)(b) and 6(1)(c)).
Website operation and security: Legitimate interests in maintaining a functional and secure website (Article 6(1)(f)).
Optional cookies and analytics: Consent, where required (Article 6(1)(a)).
Protecting legal rights: Legitimate interests in establishing, exercising, or defending legal claims, where applicable (Article 6(1)(f)).
Where I rely on legitimate interests, I take account of your rights and freedoms.
4. Sensitive Information & Younger Clients
Coaching, mentoring, and integration support may involve personal experiences or sensitive subjects. You decide what you wish to share during sessions.
Please avoid submitting unnecessary medical information, mental health details, or other sensitive personal information through booking forms or ordinary email.
I keep only brief working notes where useful for continuity and aim not to record unnecessary information about health, religious or philosophical beliefs, or other special categories of personal data.
Where processing of special-category data is necessary, an appropriate legal basis under Article 6 and a valid condition under Article 9 GDPR must apply. If explicit consent is required and relied upon, it will be requested separately.
Holistic Coaching & Mentoring and Integration Support are available only to adults aged 18 and over. English Language Coaching may be offered to clients aged 15–17 by prior arrangement and with parental or legal guardian consent. Only information reasonably necessary for providing and administering this service is processed.
5. Service Providers & International Transfers
I do not sell or rent personal information.
To operate Well & Rooted, I use selected service providers, including:
Webnode for website hosting, contact forms, email hosting, and basic website statistics.
Google Calendar for Discovery Call bookings and appointment administration.
Google Meet or another agreed platform for online sessions.
Banking and, where applicable, accounting services for payments and financial records.
These providers may process certain personal data according to their respective roles and privacy arrangements. Information may also be disclosed where required by law.
Some providers may process personal information outside the European Economic Area (EEA). Where an international transfer requires safeguards under GDPR, the applicable protections may include an adequacy decision or appropriate contractual safeguards, such as the European Commission's Standard Contractual Clauses.
You may contact me for further information about relevant transfers and safeguards.
6. Cookies & Website Statistics
This website is hosted by Webnode, which uses cookies and similar technologies to support website functionality, security, technical performance and basic visitor statistics.
Essential cookies are used where permitted without prior consent. Optional cookies, including those used for preferences, analytics or marketing, are only activated with consent where required by law.
You can choose which optional cookie categories to allow through the website's cookie banner and its advanced settings. You may withdraw your consent at any time.
Further information about Webnode's data processing practices is available in its Privacy Policy.
7. How Long I Keep Your Data
I retain personal data only for as long as necessary for its purpose, unless a longer period is required or justified by law.
General enquiries: Normally up to six months after the last correspondence, where no collaboration follows.
Discovery Call bookings: Normally up to three months after the appointment or cancellation, where no paid collaboration follows.
Client agreements and administrative correspondence: Generally up to three years after the collaboration ends, where necessary for administration or potential legal claims.
Brief session notes: Normally deleted within three months of the end of our collaboration. Notes are limited to what is relevant for continuity and are not clinical or therapeutic records.
Financial records: Retained for the periods required by applicable Czech accounting and tax legislation.
Cookies and technical information: Retained according to their purpose and the relevant service providers' settings.
Information may be retained for longer where necessary to meet a legal obligation or deal with an unresolved legal claim. Data that is no longer needed is deleted or anonymised, subject to applicable technical and legal limitations.
8. Confidentiality & Security
I treat personal information shared during our work with care and discretion, and use appropriate measures to protect it against unauthorised access, loss, or misuse.
Sessions are not routinely recorded. Any proposed recording would be discussed separately in advance.
Confidentiality may be subject to exceptions permitted or required by law, as further explained in the Scope, Safety & Disclaimer and Terms & Conditions.
I do not use personal information for solely automated decisions that produce legal or similarly significant effects.
9. Your Rights & Contact
Under GDPR, you may have the right to access, correct, erase, or restrict the processing of your personal data; object to certain processing; and request data portability where applicable.
Where processing is based on consent, you may withdraw that consent at any time without affecting processing lawfully carried out before withdrawal.
To exercise your rights or ask any questions, please email:
I will respond within the time limits required by law, normally within one month.
You also have the right to lodge a complaint with the relevant data protection authority, including:
Úřad pro ochranu osobních údajů (Czech Office for Personal Data Protection)
www.uoou.gov.cz
Where applicable, you may also contact the relevant supervisory authority in your country, including the UK Information Commissioner's Office.
This Privacy Policy may be updated to reflect changes in my services, data processing practices, or applicable law. The latest version and its update date will be published on this page.