Jo Stavraki
Book a Free Call
Legal, But Make It Human

The Privacy Policy
You'll Actually Read.

Most privacy policies are written by lawyers, for other lawyers, in a language that stopped making sense to normal humans sometime around 1994. This one is different. Everything here is legally real. It is just written by someone who thinks you deserve to understand it.

Last updated: 25 June 2026 Reading time: About 4 minutes Jargon level: Zero. Genuinely.
What is in here (click to jump)
Who is behind all this? What data do I collect? Why do I need it? How long do I keep it? Do I sell your data? Your rights (they are good ones) Cookies (the digital kind) Questions? Come talk to me.
01

Who is actually
behind all this?

Hello. I am Jo Stavraki. A real person, not a faceless corporation. Not a data-harvesting operation dressed up as a wellbeing website. Just a neuropsychologist and wellbeing specialist who has a website and a legal obligation to tell you how it works.

For the purposes of this policy, "I", "me", and "Jo" all mean the same person: Jo Stavraki, operating at jostavraki.com. "You" means you, the human reading this. "The site" means jostavraki.com and all its pages.

I am the data controller. Which is an official-sounding title that basically means: I decide how your data is handled, and I take responsibility for it. Given that I spend my professional life helping people feel safe and understood, I take this seriously.

The short version: It is me, Jo. I run this. I am responsible. If something goes wrong, you can come to me directly. That is a feature, not a bug.

02

What data do I
actually collect?

Let us be specific. Here is precisely what I collect and from where:

When you fill in a form on this site (like the contact form), I collect your first name, last name, email address, mobile number if provided, and your message. I also log the time of submission. That is it.

When you browse the site, analytics tools may collect anonymised data such as which pages you visited, how long you spent on them, your approximate geographic location (country or city level, not your address), the device and browser you used, and how you found the site. Think of it as a shop owner knowing "roughly 120 people came in today, most from Cyprus." Nothing more specific than that.

I do not collect your date of birth, financial information, health data, relationship status, political opinions, or anything that is not relevant to whether I can help you with your wellbeing. I am not that kind of data collector.

A note on automatic data: Browsers send information automatically when you visit any website. I cannot stop that any more than a cafe can stop customers leaving footprints on the floor. What I can do is make sure that data is handled responsibly, anonymised where possible, and never used against you. So I do that.

03

Why do I even
need any of this?

Fair question. Here are the legitimate reasons, presented without legal padding:

  • To reply to you. If you fill in a form and ask me something, I need your contact details to respond. This will not surprise you.
  • To send a confirmation email. When you submit a form, a confirmation goes out automatically. I need your email address for that.
  • To understand how the site is performing. Analytics help me know which pages are useful and which are not. I use this to make the experience better for the next person.
  • To measure whether my marketing is working. If I run an ad and someone fills in a form, I need to know the ad worked. Conversion pixels on success pages only. I am upfront about this.
  • To meet legal obligations. Sometimes records need to be kept for legal or administrative reasons. I do the minimum required and nothing more.

What I will never do with your data: sell it, rent it, share it with third parties who will spam you, or use it to contact you about things you did not ask about. If you reach out to me, I will reach back. That is the extent of it.


04

How long do I
keep your data?

Not forever. I keep your data for as long as there is a legitimate reason to have it, and then I delete it.

Form submissions are kept for up to two years, or until our relationship ends, whichever comes first. If we work together, I keep your contact details for the duration of that relationship plus a reasonable period afterwards.

Analytics data is aggregated and anonymised, meaning it stops being about you specifically fairly quickly. Raw data is retained for no more than 14 months in line with standard analytics settings.

Email correspondence is kept for up to three years, because sometimes context matters when picking up a conversation. After that, unless there is a legal reason to keep it, it goes.

Want your data deleted sooner? Just ask. Email jo@jostavraki.com and say "please delete my data." I will confirm it is done within 30 days. No forms, no chatbots, no holding music.

05

Do I sell your
data? Absolutely not.

Let me be clear: I do not sell your personal data. I never have. I never will. Your name, your email, your phone number are yours, not a commodity.

There are a small number of third-party tools I use to run this site, and some data passes through them. In the interest of full transparency:

  • Email delivery services to send confirmation emails when you submit a form. They see your email address to deliver the message. That is all.
  • Analytics platforms (Google Analytics) to understand site traffic. Data is anonymised where possible.
  • Advertising platforms (Meta, Google Ads) for conversion tracking on success pages only. They are told "a conversion happened." They are not given your personal details.
  • Website hosting providers who serve the pages. Standard server logs are unavoidable on any website.

All third-party tools I use are required to handle data responsibly under their own privacy policies and, where applicable, under GDPR.


06

Your rights.
They are quite good, actually.

Under GDPR and applicable data protection law, you have a proper set of rights. Here they are, front and centre:

  • The right to know. You can ask at any time what personal data I hold about you. I will tell you clearly within 30 days.
  • The right to a copy. You can request a copy of the data I hold, in a readable format. No charge.
  • The right to correct it. If something I have about you is wrong, ask me to fix it. I will.
  • The right to delete it. You can ask me to delete your personal data. Unless I have a legal obligation to keep it, I will do exactly that.
  • The right to object. If you think I am using your data in a way that is not justified, you can object. I will respond within 30 days.
  • The right to restrict processing. You can ask me to stop actively using your data while something is being sorted out.
  • The right to withdraw consent. If you gave consent for something and change your mind, you can withdraw it at any time. No penalties.
  • The right to complain to a regulator. If you feel your data has been handled badly and I have not resolved it, you can complain to the relevant data protection authority. In Cyprus, that is the Commissioner for Personal Data Protection. In the UK, it is the ICO. I would rather you came to me first, but the right is yours.

To exercise any of these rights, email jo@jostavraki.com with the subject line "Data Request." I will handle the rest.


07

Cookies.
Not the homemade kind.

This site uses cookies. Cookies are small text files placed on your device when you visit. They do things like remember your preferences and help analytics tools track visits. They are not a way of spying on you. They are more like a sticky note on your browser that says "this person has visited before."

For the full, surprisingly readable breakdown of exactly which cookies are used, why they exist, and what you can do about them:

Read the Cookies Policy


08

Changes to this policy
and how to reach me.

I will update this policy when needed. The date at the top of this page will always reflect the last update. If I make a significant change, I will do my best to make sure you know.

If you have questions about any of this, please do not sit there wondering. I am a real person and I respond to emails. This policy is written in plain English precisely so you can ask a specific question and get a specific answer.

Get in touch about privacy

Email: jo@jostavraki.com
Subject line: "Privacy Question" or "Data Request" both work.
Response time: Within two working days. Usually same day if it is urgent.

I will not forward your question to a legal team in a country you have never visited. I will just answer it myself. Because that is how this should work.

Last updated: 25 June 2026  |  Effective immediately

Now that the legal bit is sorted.
Fancy a proper conversation?

You now know exactly how your data is handled. More than most people know about any site they visited this week. If you would like to talk about something that actually matters to you, the free call is a good place to start.

Book a Free Call
Jo Stavraki

Wellbeing is a performance strategy. Redesign your mind to redefine your life.

Home About FAQ Contact
Resources Blog Videos
Services Corporate Individuals
✉ jo@jostavraki.com
☎ +357 99 428 549
Book My Free Call
© Jo Stavraki 2026. All rights reserved. Privacy Policy · Cookies Policy