WellwardHome

Privacy Policy

Effective and last updated: 10 October 2026

This Privacy Policy explains how Wellward (“Wellward”, “we”, “us”) collects, uses, shares and protects personal information when you use our website, complete the Wellward assessment, purchase a Blueprint or contact us. We process personal information in accordance with applicable South African data-protection law, including the Protection of Personal Information Act, 2013 (POPIA) where it applies.

1. Information we collect

Depending on how you use Wellward, we may collect:

  • Name and email address
  • Quiz and assessment responses (goals, routines, lifestyle, dietary preferences, allergies or avoidances, and related wellbeing inputs)
  • Body or profile information you choose to provide through the quiz
  • Order, payment and transaction identifiers (we do not store full payment card details)
  • Blueprint access, recovery and security-related data
  • Technical and operational data reasonably required to run, secure and improve the service (such as device/browser information and server logs)

2. How we use information

We use personal information to:

  • Personalize and generate your 7-Day Wellward Blueprint
  • Process and manage orders and payments
  • Provide secure digital access and account recovery
  • Send transactional emails (for example, Blueprint ready notifications and secure access links)
  • Respond to support, refund and privacy requests
  • Maintain security, prevent fraud and protect the service
  • Improve and operate Wellward where reasonably necessary

3. Service providers

We use trusted service providers who process information on our behalf only as needed to operate Wellward, including:

  • Supabase — database, storage and backend infrastructure
  • Paystack — payment processing
  • OpenAI — Blueprint generation
  • Resend — transactional email delivery
  • Google Analytics (GA4) — website analytics measurement

These providers may process information according to their own terms and privacy practices, but only to the extent required to provide services to Wellward. We do not sell your personal information.

4. Cookies, analytics and marketing preferences

Wellward uses essential cookies and similar technologies that are required for security, checkout, payment return, and Blueprint access. These are necessary for the service to function and are not treated as optional tracking.

We also offer optional categories you can accept or reject:

  • Analytics — helps us understand how the website is used (for example page views and high-level funnel steps), without sending quiz answer content
  • Marketing — measures advertising effectiveness using Meta Pixel on selected public pages only after you allow Marketing. Meta Conversions API (server-side) is not active yet

Optional tracking is denied by default until you make a choice. You can accept optional tracking, reject it, or customize Analytics and Marketing separately. You may change or withdraw your choices at any time using “Privacy preferences” in the site footer, or by contacting us.

First-party campaign tags. When you allow the Marketing preference and arrive on a public Wellward page with standard advertising campaign parameters (for example utm_source), we may store those limited tags in your browser and associate them with your order for Wellward’s own advertising measurement. We do not use this to send quiz answers or health details to Meta, and Meta Conversions API / Purchase events are not active in this release. If Marketing is denied, we do not store these campaign tags.

Google Analytics. Wellward uses Google Analytics 4 on production pages to measure site usage only when you have allowed the Analytics preference. If Analytics is rejected or withdrawn, we stop further GA4 pageviews and events and clear GA cookies where the browser allows. Hits already sent to Google before withdrawal cannot always be deleted. GA4 measurement is separate from the Marketing preference.

Meta Pixel. When you allow the Marketing preference, Wellward may load the Meta Pixel and send a limited PageView only on explicitly allowlisted public pages (for example the homepage and legal pages) when the URL has no query string and no fragment. We do not load the Pixel on quiz, paywall, payment return, order, Blueprint, recovery, or API routes. We do not send quiz answers, symptoms, health conditions, allergies, access tokens, payment references, or email addresses to Meta. Meta’s browser library may attach the current page URL to PageView events; therefore we only initialise and fire when the current URL is an exact clean allowlisted path. When Marketing is allowed and the landing URL contains only approved campaign parameters, we may remove those parameters from the address bar before the Pixel loads so Meta does not receive the query string. Unexpected parameters or URL fragments keep the Pixel blocked. If you navigate to an excluded page after the Pixel was loaded, Wellward stops sending further application PageView calls, but a previously downloaded Meta script may remain in memory until the browser discards it. If Marketing is withdrawn, we stop further application Meta calls and clear Meta cookies where the browser allows; hits already sent cannot always be deleted. Meta Conversions API and purchase measurement are not active in this release.

5. Payment information

Payments are processed by Paystack. Payment card details are handled by Paystack (and its payment partners) rather than stored directly by Wellward. We may receive limited transaction information such as payment status, amount, currency and reference identifiers needed to confirm and fulfil your order.

6. Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss or misuse. No online service can guarantee absolute security, but we work to safeguard information appropriate to the nature of the service.

7. Retention

We retain information only for as long as reasonably necessary for the purposes described in this policy, legal obligations, dispute resolution and legitimate operational requirements. When information is no longer needed, we take reasonable steps to delete or de-identify it where appropriate.

8. Your rights

Subject to applicable South African law, you may have rights to request access to, correction of, deletion of, or restriction on our use of your personal information, and to object to certain processing where applicable. To exercise these rights, contact us at hello@wellward.co.za. We may need to verify your identity before responding.

Nothing in this policy limits rights that cannot lawfully be excluded under applicable South African law.

9. Contact

For privacy questions or data requests, email hello@wellward.co.za.

10. Changes

We may update this Privacy Policy from time to time. The effective date at the top of this page shows when it was last updated.