Privacy Policy
Your privacy is important to us. Learn how we protect your personal information.
Last updated: September 2, 2025
Our Privacy Commitment
At WellnessFlow, we are committed to protecting your privacy and ensuring transparency in how we collect, use, and safeguard your personal information. This Privacy Policy outlines our practices in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
We believe that trust is fundamental to any wellness journey, and that includes trust in how we handle your personal data. This policy explains your rights and our responsibilities regarding your personal information.
Information We Collect
Personal Information You Provide
When you interact with our services, you may voluntarily provide us with personal information, including:
- Name, email address, and phone number when contacting us
- Health and wellness goals and preferences during consultations
- Communication preferences and feedback
- Payment information (processed securely through third-party providers)
- Any other information you choose to share with us
Automatically Collected Information
We automatically collect certain information when you visit our website:
- IP address and approximate geographic location
- Browser type, operating system, and device information
- Pages visited, time spent on pages, and click patterns
- Referral source (how you arrived at our website)
- Cookies and similar tracking technologies (with your consent)
Health-Related Information
As a wellness service provider, we may collect health-related information:
- Wellness goals and health objectives
- Lifestyle preferences and dietary restrictions
- Fitness levels and activity preferences
- Progress tracking and assessment data
Note: All health-related information is treated with the highest level of confidentiality and security.
How We Use Your Information
Service Delivery
- Provide personalized wellness coaching
- Develop customized wellness plans
- Communicate about your progress
- Schedule and manage appointments
Communication
- Respond to your inquiries and requests
- Send service-related notifications
- Provide customer support
- Share wellness tips and resources (with consent)
Service Improvement
- Analyze website usage and performance
- Improve our services and content
- Develop new wellness programs
- Conduct research (anonymized data only)
Legal Compliance
- Comply with legal obligations
- Protect our rights and interests
- Prevent fraud and abuse
- Maintain records as required by law
Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal grounds:
Contractual Necessity
Processing necessary to provide our wellness services to you
Consent
When you have given explicit consent for specific purposes
Legitimate Interest
For website analytics and service improvement (when balanced against your rights)
Legal Obligation
When required by law or regulation
Data Sharing and Third Parties
We do not sell your personal information. We may share your data only in the following limited circumstances:
Service Providers
We work with trusted third-party service providers who help us deliver our services:
- Payment processors (for secure transaction handling)
- Email service providers (for communications)
- Analytics services (for website performance)
- Cloud hosting providers (for data storage and security)
All service providers are bound by strict confidentiality agreements and GDPR compliance requirements.
Legal Requirements
We may disclose your information if required by law, court order, or to protect our rights and the safety of others.
Your Privacy Rights
Under GDPR and other privacy laws, you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you
Right to Rectification
Correct inaccurate or incomplete personal data
Right to Erasure
Request deletion of your personal data (subject to legal requirements)
Right to Restrict Processing
Limit how we process your personal data
Right to Data Portability
Receive your data in a portable format
Right to Object
Object to processing based on legitimate interests
How to Exercise Your Rights
To exercise any of these rights, please contact us at info@example.com or use our contact form.
We will respond to your request within 30 days and may require verification of your identity.
Data Security and Protection
We implement comprehensive security measures to protect your personal information:
Encryption
All data is encrypted in transit and at rest using industry-standard protocols
Access Controls
Strict access controls ensure only authorized personnel can access your data
Secure Infrastructure
Our systems are hosted on secure, regularly monitored infrastructure
Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
- Active client data: Retained during the duration of our service relationship
- Inactive accounts: Deleted after 3 years of inactivity
- Contact form submissions: Retained for 1 year unless you become a client
- Website analytics: Anonymized after 26 months
- Legal requirements: Some data may be retained longer as required by law
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:
- Avoid filling out contact forms, account registrations, or any data-submitting features
- Disable cookies through your browser settings (see our Cookie Policy for more details)
- Contact us directly to request the deletion of any previously shared personal data
- Browse our website without creating an account or submitting personal information
We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes:
- We will update the "Last updated" date at the top of this policy
- For significant changes, we will notify you via email or website notice
- Your continued use of our services constitutes acceptance of the updated policy
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: