Privacy Policy

The Wellness Grid ("we", "us", "our") operates the platform at wellnessgrid.net. We are the data controller for the personal data described in this policy. You can reach us at [email protected].

We collect the following categories of personal data:

• Account information: name, email address, phone number, and password (stored in hashed form) when you register.
• Booking data: services booked, dates, venues, and booking reference numbers.
• Reviews and user content: text, ratings, and any other content you submit.
• Usage data: pages visited, search queries, browser type, operating system, and IP address.
• Communications: messages sent to us via support tickets or email.

We use your personal data to:

• Provide, operate, and improve the Platform
• Process and manage bookings
• Send transactional emails (booking confirmations, receipts)
• Respond to support requests
• Detect and prevent fraud or misuse of the Platform
• Display personalised advertising via Google AdSense (where enabled — see Section 6)
• Comply with legal obligations

Where applicable, we rely on the following legal bases under the General Data Protection Regulation (GDPR):

• Contract performance: processing necessary to fulfil your bookings and manage your account.
• Legitimate interests: improving our Platform, detecting fraud, and ensuring security.
• Consent: personalised advertising (you may withdraw consent at any time via the cookie banner).
• Legal obligation: compliance with applicable laws and regulations.

We use cookies and similar technologies for the following purposes:

• Authentication cookies: to keep you signed in and maintain your session securely.
• Preference cookies: to remember your consent choices.
• Advertising cookies (Google AdSense): when ads are enabled, Google may set cookies to deliver personalised or contextual advertisements. See Google's Privacy Policy for details on how Google uses this data.

You can manage or withdraw your consent at any time using the cookie banner. Note that declining advertising cookies does not affect core Platform functionality.

We may use Google AdSense to display advertisements on the Platform. Google AdSense uses cookies to serve ads based on your prior visits to this site and other sites on the internet. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the internet.

You may opt out of personalised advertising by visiting Google Ads Settings.

We do not sell your personal data. We may share your data with:

• Venues: booking details (name, contact) are shared with the Venue you book with in order to fulfil your appointment.
• Service providers: trusted third parties that help us operate the Platform (hosting, authentication, email delivery) under strict data processing agreements.
• Legal authorities: where required by law or to protect our legal rights.

We retain your personal data for as long as your account is active or as needed to provide our services. Booking records are retained for a minimum of 3 years for legal and accounting purposes. You may request deletion of your account at any time (see Section 9).

Depending on your location, you may have the following rights regarding your personal data:

• Access: the right to request a copy of the data we hold about you.
• Rectification: the right to correct inaccurate or incomplete data.
• Erasure:the right to request deletion of your personal data ("right to be forgotten").
• Portability: the right to receive your data in a structured, machine-readable format.
• Objection: the right to object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted connections (HTTPS), hashed password storage, and access controls on our systems.

No transmission over the internet is completely secure. We cannot guarantee absolute security but will notify you and relevant authorities of any breach as required by law.

The Platform is not directed to children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy periodically. When we do, we will update the "Last updated" date at the top of this page. Continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

For privacy-related enquiries, please contact our data protection contact at: [email protected]