1.1 Wellbuddy is a trading name of Web2 Systems Ltd, a company registered in the United Kingdom. In this policy, "we", "us" and "our" refer to Wellbuddy.
1.1 This policy describes what information we collect when you use Wellbuddy’s site, services and content (“Services”). It also provides information about how we store, transfer, use, and delete that information, and what choices you have with respect to the information. This policy is designed to ensure that we safely handle your personal data in accordance with relevant regulations and legislation such as the EU General Data Protection Regulations 2018 (“GDPR”). These privacy rules explain what data we may collect from you, what we will do with that data.
1.2 This policy applies to Wellbuddy’s main website and Wellbuddy’s software (collectively “the Company”), as well as other interactions you may have with Wellbuddy (e.g. customer support conversations etc).
1.4 This policy applies where we are acting as a Data Controller with respect to the personal data of users of our Services; in other words, where we determine the purposes and means of the processing of that personal data.
2.1 Wellbuddy is committed to safeguarding the privacy of our users. Our business model is to provide a service to users to support their physical and mental health. We will only collect and process information that we need to deliver the service to you, and to continue to maintain and develop the service.
2.2 We may collect, store and process data. For the categories of data that require your consent, we will actively ask you for consent before collecting or processing any data.
2.3 The following is a list of data we collect, process or store, with the purpose for each item or group of items:
A. User account information. If you choose to use the Wellbuddy Service, you will have to download this from www.wellbuddy.co and provide your name and a valid email address. We use this information to contact you about Service updates and obtain feedback.
B. User Calendar data. We require read/write permission to your calendar in order to schedule physical and mental health breaks. We will request your consent before you use the Service. We do not store your Calendar data or have visibility to your events. It is solely used for the purpose of delivering a valuable Service to you.
C. User analytics. Like most digital services, our systems automatically collect information about how you use Wellbuddy website. This may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your use. The source of the usage data is Google Analytics. We require this information in order to analyse how many people visited the website, downloaded the Service and subscribe to our Service. This helps us build aggregate quantitative usage reports for the company that paid for your access to the service (e.g. “15 people downloaded this month”). You cannot be identified from this information.
D. User enquiry data. This is information you give us when you subscribe to our newsletter or join our waiting list. We use this information to keep you in contact with updates on Wellbuddy.
E. User personal information. This is information you may give us during your use of the Service to ensure we deliver a personalised wellness offering. Personal Information may include types of exercises you accept/ignore, types of exercises you prefer, time of exercise and information about your working week. We do not store any of your personal information. This helps us build aggregate quantitative usage reports for the company. For example, we may aggregate your personal data to calculate the percentage of users accessing a specific Service feature. You cannot be identified from this information as it is anonymised.
F. User service and transactional notifications. Sometimes we’ll send you emails about your account, service changes, or new policies to ensure you are kept up-to-date.
2.4 We may process any of your personal data identified in this policy where necessary for administrative purposes including in the exercise or defence of legal claims. The legal basis for this processing is our legitimate interests, namely for administrative record keeping, processing transactions and maintaining business records or for the protection and assertion of our legal rights.
2.4 We do not transfer personal data outside of the European Economic Area (EEA).
2.5 Where you use the Service in a country outside the EEA, your personal data will be transferred to and processed in the country from where you have accessed it. You acknowledge and agree that such a transfer of your personal data out with the EEA is entirely your responsibility.
4.2 You will still be able to request your data to be deleted, in accordance with GDPR, even if your data is stored outside of the EEA.
5.1 Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
5.3 To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
6.1 We may update this policy from time to time, to reflect changes in legal requirements or changes in the way the Service works. If we do, we will publish a new version on our website.
6.2 We may notify you of changes to this policy by email, if we have your email.
7.1 As an individual you are granted rights according to the applicable data protection law, listed below. The rights are not absolute, and you may read more about your rights in the EU general data protection regulation Chapter III, or here.
● The right to access to your personal data
● The right to data portability.
● The right to rectification of your personal data
● The right to completion of your personal data
● The right to be forgotten; erasure of your data.
● The right to restrict processing of your personal data
● The right to object to processing of your personal data
● The right to complain to a supervisory authority
● The right to withdraw consent.
7.3 To exercise your rights or if you otherwise have any questions regarding our processing of your personal data, please contact us at firstname.lastname@example.org. We reply within one working day.