Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how WellNestHQ Inc., doing business as WellNest (“WellNest,” “we,” “us,” or “our”), collects, uses, discloses, and protects your personal information when you visit www.wellnesthq.com, download our guides, take our Home Wellness Audit, subscribe to our emails, purchase a product, or otherwise use our services (collectively, the “Services”).

This Policy is incorporated into and forms part of our Terms and Conditions. By using the Services, you agree to the collection and use of information as described here. If you do not agree, please do not use the Services.

We are committed to handling your personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s Anti-Spam Legislation (CASL), and, because we serve users in the United States and internationally, other privacy laws that apply to you.

If you are located in the European Economic Area or United Kingdom, we process your personal information in accordance with the General Data Protection Regulation (GDPR) or UK GDPR, as applicable, and you have additional rights including the right to lodge a complaint with your local supervisory authority.

2. Who We Are (Accountability)

WellNest is a corporation incorporated federally under the Canada Business Corporations Act, with its registered office in Ontario, Canada. We are responsible for the personal information under our control.

We have designated an individual responsible for our compliance with this Policy and applicable privacy laws (our “Privacy Officer”). To exercise your rights, ask a question, or raise a concern about how we handle your personal information, contact our Privacy Officer at legal@wellnesthq.com (subject line: “Privacy”).

3. Information We Collect

We collect personal information in three ways:

3.1 Information you give us

• Contact details: your name and email address (for example, when you download a guide, take the Audit, or subscribe).
• Home Wellness Audit answers: the responses you provide, which may include your general location (province/state and country) and details about your home (such as its age, whether it has a basement, and whether certain features, systems, or potential risk factors are present). You choose what to enter.
• Purchase information: when you buy a product, our payment processor collects your payment details; we receive a confirmation and limited transaction details (such as name, email, and the item purchased). We do not receive or store your full payment-card number.
• Communications: information you include when you contact us or submit a review, testimonial, or feedback.

3.2 Information we collect automatically

When you use the Services, we and our providers may automatically collect device and usage data, such as your IP address, browser and device type, pages viewed, links clicked, referring page, and general (city/region-level) location inferred from your IP. Some of this is collected through cookies and similar technologies, see Section 6 (Cookies & Tracking Technologies) below.

3.3 Information from third parties

We may receive limited information from the service providers that help us operate, for example, our payment processors (Stripe and PayPal, made available through our platform provider, systeme.io) confirm your purchase; our email/marketing platform provides delivery and engagement data (such as whether an email was opened); and our analytics and advertising providers (such as Google Analytics and Meta) provide aggregated usage and campaign data.

Sensitive information. The Audit is about your home, not your medical history. Please do not send us health records, government ID numbers, or other sensitive personal information. We don’t need them to provide the Services.

4. How We Use Your Information

We use personal information to:

• Provide the Services you request, deliver guides, generate your Audit risk score and action plan, and process and confirm purchases;
• Communicate with you: send transactional messages (receipts, account and service notices, and policy updates), respond to inquiries, and provide support;
• Send marketing: with your consent, send newsletters, educational content, and offers (you can unsubscribe anytime, see Section 5);
• Improve and personalize: understand how the Services are used, develop new features, and tailor content to be more relevant;
• Protect the Services: maintain security, prevent fraud and abuse, and enforce our Terms; and
• Comply with law: meet our legal, tax, and regulatory obligations.

We will not use your personal information for a materially different purpose without your consent, unless permitted or required by law.

5. Consent

Under PIPEDA, we collect, use, and disclose your personal information with your consent (express or implied), except where the law permits or requires otherwise. By providing information and using the Services, you consent to the uses described in this Policy.

Marketing emails (CASL). We send marketing messages only with your consent. Every marketing email identifies us, includes a valid mailing address and contact information, and offers a working unsubscribe link. You can withdraw marketing consent at any time; we will still send necessary transactional messages related to your purchases or account.

Sharing with third parties for their own purposes. Where we would ever share your personal information with a third party for that party’s own marketing or purposes, we will ask for your express, opt-in consent at the point of collection (for example, an unchecked consent checkbox on the relevant form). We do not do this by default.

Withdrawing consent. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us. Withdrawing consent may limit our ability to provide certain Services.

6. Cookies & Tracking Technologies

We and our providers use cookies and similar technologies (such as pixels, tags, and local storage) to operate the site, remember your preferences, understand how the Services are used, and, where applicable, measure and support our marketing. This section serves as our cookie notice.

Types we use:

• Essential: required for the site and checkout to function.
• Preferences: remember your choices and settings.
• Analytics / performance: help us understand traffic and how visitors use the site, using tools such as Google Analytics.
• Marketing / advertising: help us measure and improve campaigns and reach relevant audiences, using tools such as the Meta (Facebook) Pixel.

Because we continually test and improve, we may add, remove, or change the specific analytics and advertising tools we use from time to time, including other industry-standard providers similar to those named above. In each case they are used for the purposes described here.

Your choices. You can control or delete cookies through your browser settings, and you can opt out of many analytics and advertising cookies through the provider’s own tools (for example, Google Analytics’ opt-out and your ad-settings/consent controls) and industry opt-out pages. Where required by law, we obtain consent before setting non-essential cookies. Disabling some cookies may affect how the site works.

7. How We Share Your Information

We do not sell your personal information. We share it only in these limited circumstances:

• Service providers (processors). We share information with vetted providers that perform services on our behalf, for example, our website, email, and checkout platform (systeme.io), our payment processors (Stripe and PayPal), and our analytics and advertising providers (such as Google Analytics and Meta). They may only use your information to provide services to us, under confidentiality obligations, and not for their own independent purposes.
• Legal and safety reasons. We may disclose information where required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of WellNest, our users, or others.
• Business transfers. If WellNest is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction; we will require the recipient to honor this Policy or notify you of any material change.
• With your direction or consent. We share information with third parties for their own purposes only with your express, opt-in consent (see Section 5).
• “Sharing” under California law. Some of our advertising and analytics tools (such as the Meta Pixel and Google Analytics) may constitute “sharing” of personal information for cross-context behavioral advertising under the CPRA, even though we do not sell information for money. California residents may opt out of this sharing using the cookie controls described in Section 6, or by submitting a Global Privacy Control (GPC) signal, which we will honor as an opt-out request.

8. International Data Transfers

WellNest is based in Canada, and our service providers may store or process your personal information in the United States or other countries. Laws in those countries may differ from those in your jurisdiction, and your information may be accessible to courts, law enforcement, and authorities there under applicable law. Where required, we use appropriate safeguards and rely on your consent for such transfers. By using the Services, you understand your information may be processed outside your home country.

9. Data Retention

We keep your personal information for as long as your account or relationship with us is active, as long as it is needed to provide the Services, and until you ask us to delete it. In other words, your information generally stays available to you until you choose to delete it or request its deletion.

When you request deletion, or when we no longer need your information, we securely delete or anonymize it within a reasonable period, except where we are required to retain certain records to comply with legal, tax, accounting, or regulatory obligations (for example, transaction and payment records, which we typically retain for several years as required by applicable law), or as needed to resolve disputes and enforce our agreements. When a legal retention period ends, we delete or anonymize the information.

We periodically review whether we still need the personal information we hold and delete or anonymize information that is no longer necessary for the purposes described in this Policy, even absent a deletion request from you.

10. How We Protect Your Information

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, use, or disclosure, appropriate to its sensitivity. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping any account credentials confidential.

11. Your Privacy Rights & Choices

You have rights over your personal information. Depending on where you live, these may include the right to:

• Access the personal information we hold about you and request details of how it has been used and disclosed;
• Correct or update inaccurate or incomplete information;
• Delete your information (subject to legal retention requirements);
• Withdraw consent or unsubscribe from marketing at any time; and
• Complain to a regulator.

Canada (PIPEDA). You may request access to or correction of your personal information, and you have the right to complain to the Office of the Privacy Commissioner of Canada (OPC) if you have concerns about how we handle it.

United States residents. Depending on your state (for example, California under the CCPA/CPRA), you may have rights to know, access, correct, delete, and opt out of the “sale” or “sharing” of personal information. We do not sell your personal information. We will not discriminate against you for exercising your rights. Depending on your state of residence (including Colorado, Connecticut, Virginia, and others with applicable privacy laws), you may have similar rights to know, access, correct, delete, and opt out of certain processing. Contact us to exercise these rights regardless of which state law applies to you.

How to exercise your rights. Email legal@wellnesthq.com (subject: “Privacy”). We may need to verify your identity before acting, and we will respond within the timeframe required by applicable law.

12. Children’s Privacy

The Services are intended for adults (18+) and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us at legal@wellnesthq.com and we will delete it.

13. Third-Party Links

The Services may link to third-party websites and products (including affiliate links). We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of every site you visit. See our Affiliate Disclosure for how affiliate relationships work.

14. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last Updated” date and post the current version here. For material changes, we will provide additional notice where required (for example, by email or a prominent notice on the site). Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

15. Contact Us