Privacy & Cookie Policy
Last updated: 27 August 2026
Who we are and what this policy covers
This website, wellzones.ie, is operated by HP Holistic Ltd and provides information, services and digital content associated with WellZones.
HP Holistic Ltd is the data controller for personal data collected directly through this website and through the WellZones engagement system.
This policy explains what information we collect, why we collect it, how it is used and protected, the role of cookies and similar technologies, and the data-protection rights available to users of the WellZones website and engagement system.
Information we collect
Information you provide directly
When you contact us, make an enquiry, complete a form, create an account, make a booking or purchase, or otherwise communicate with us, we may receive information such as your name, email address, telephone number and the contents of your message. If you voluntarily include health-related or other sensitive information, we will use it only where necessary to respond to your enquiry or provide the requested service.
Technical website information
Wix and relevant service providers may process technical information required to operate, secure and maintain the website. This may include an IP address, browser or device information, page activity, dates and times, security logs, and cookie or consent preferences.
WellZones engagement information
When a WellZones QR code or digital asset is accessed, the system records engagement information such as the Asset ID, Content ID and title, campaign, theme, scan time, content URL, media type, video engagement activity, and interactions with supporting links or documents.
Ordinary WellZones engagement records are not connected to a visitor’s name, email address or contact details.
Where a visitor gives Analytics consent, WellZones also creates a randomly generated pseudonymous browser identifier. This allows the system to estimate whether that browser is accessing WellZones for the first time or returning, its scan number and the time of its previous recognised scan. It is a browser-recognition measure and does not establish the identity of a particular person.
How and why we use information
We may use information to:
-
respond to enquiries and take steps requested before providing a service;
-
manage WellZones services, accounts, purchases and communications;
-
fulfil contractual commitments;
-
meet legal, accounting, taxation, insurance and regulatory obligations;
-
operate, maintain and protect the website and WellZones digital services, prevent misuse and resolve technical problems;
-
understand aggregate use of WellZones and evaluate which assets, themes and content receive engagement; and
-
measure first-time and returning recognised-browser engagement where Analytics consent has been given.
Depending on the circumstances, our legal basis may be performance of a contract, taking steps at your request before entering a contract, compliance with a legal obligation, our legitimate interests in operating, securing and improving our services, or your consent.
Non-essential cookies, similar browser technologies and the WellZones pseudonymous returning-browser identifier are used only where Analytics consent has been given. Consent may be refused or withdrawn through the website’s privacy settings. Withdrawal does not affect processing that was lawfully carried out before consent was withdrawn.
Please avoid including detailed medical, health-related or other sensitive personal information in general website forms or communications unless specifically requested. Where WellZones requires health-related or other sensitive information for a particular service, research activity or feature, this will be requested separately and handled using appropriate safeguards, transparency information and a suitable lawful basis.
Cookies and similar technologies
his website uses cookies, browser storage and similar technologies. Some are essential for the website to function securely and to remember privacy choices. Essential technologies may operate without consent where they are strictly necessary to provide the website or a service requested by the visitor.
Usercentrics for Wix manages the website’s consent banner and records visitors’ cookie and tracking preferences. Non-essential technologies are categorised according to their purpose, such as Analytics, Functional or Advertising, and are intended to operate only where the relevant consent has been given.
Depending on the pages and features used, services may include Wix components and analytics, Google services, YouTube and other embedded content. Some embedded services may remain blocked or display a placeholder until the required consent has been provided.
WellZones returning-browser measurement uses first-party local browser storage. Where Analytics consent has been given, a random pseudonymous identifier beginning with “WZV_” is stored in the visitor’s browser. This identifier is used to associate engagement records from that browser and estimate first-time and returning use. It does not contain a name, email address or telephone number and is not intended to identify a particular individual.
Visitors can accept, refuse or manage non-essential categories through the consent banner and can reopen the privacy settings using the privacy control displayed on the website. Refusing non-essential cookies or similar technologies does not prevent access to ordinary WellZones content. Browser settings may also be used to delete stored cookies and local browser data.
Service providers and data sharing
We do not sell personal data.
We use trusted service providers where necessary to operate WellZones, maintain the website and provide its features. These may include:
-
Wix, which provides website hosting, content management, forms, databases and related digital services;
-
Usercentrics, which provides cookie and consent-management services;
-
Google services, including YouTube and tag or analytics services where enabled;
-
email, communications, payment, accounting and other professional service providers where relevant; and
-
public authorities, regulators, legal advisers or other parties where disclosure is required by law or is necessary to establish, exercise or defend legal rights.
Depending on the service and circumstances, these organisations may process limited personal data on our behalf as service providers or processors, or may act as separate data controllers under their own privacy terms.
WellZones reporting
WellZones customers, funders, venue operators and project partners may receive aggregated engagement reports showing measures such as scans, content engagement and estimated first-time or returning recognised-browser use.
These reports do not ordinarily contain names, email addresses, telephone numbers or individual browser identifiers.
Where any more detailed information is required for a specific project, research activity or service, this will be subject to an appropriate lawful basis, purpose limitation, data-protection safeguards and, where required, separate consent or agreement.
International data transfers
Some technology and service providers may process personal data outside Ireland or the European Economic Area.
Where personal data is transferred internationally, we rely on safeguards permitted under applicable data-protection law. Depending on the circumstances, these may include an adequacy decision, approved contractual safeguards such as Standard Contractual Clauses, and additional technical or organisational safeguards where appropriate.
How long we retain information
We retain personal and pseudonymous information only for as long as reasonably necessary for the purposes described in this policy, including meeting legal, accounting, contractual and reporting obligations.
Pseudonymous WellZones engagement records, including browser identifiers used to estimate first-time and returning engagement, will normally be retained for no longer than 24 months. At the end of the applicable retention period, these records will be deleted or irreversibly anonymised so that they can no longer be associated with a recognised browser.
Temporary exports containing pseudonymous information will be stored securely, used only where necessary to prepare or verify reports, and deleted when that work is complete.
Aggregated information that no longer contains browser identifiers or individual engagement histories may be retained for longer periods. These anonymised statistics may be used to assess engagement, evaluate projects, support funding applications, undertake longitudinal comparisons, and provide reports or secure dashboard access to participating organisations.
Enquiries, correspondence and administrative records will be retained only for as long as necessary to respond, manage the relevant relationship and comply with applicable legal, contractual or financial record-keeping requirements.
Your data-protection rights
Depending on the circumstances and the legal basis for processing, you may have the right to:
-
request access to personal data held about you;
-
request correction of inaccurate or incomplete personal data;
-
request deletion of your personal data;
-
request restriction of processing;
-
object to certain types of processing;
-
request the transfer of personal data you have provided to us in a structured, commonly used and machine-readable format, where the right to data portability applies; and
-
withdraw consent at any time where processing is based on consent.
-
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn. You can change or withdraw your cookie and analytics choices at any time using the privacy-settings control displayed on the website.
WellZones browser identifiers are pseudonymous and are not ordinarily connected to a visitor’s name, email address or other contact details. We may therefore be unable to identify which engagement records relate to you unless you provide sufficient information to enable us to locate the relevant records.
These rights are not absolute and may be subject to conditions, limitations or exemptions under applicable data-protection law. Requests can be made using the contact details provided below.
Contact and complaints
HP Holistic Ltd, operating WellZones, is the data controller responsible for the processing described in this policy.
Data-protection enquiries or requests can be directed to:
Neil Dennehy
HP Holistic Ltd
Clonmel, Co. Tipperary, Ireland
Email: neil@wellzones.ie
Telephone: +353 87 629 3729
Please identify your correspondence as a data-protection enquiry and provide sufficient information for us to understand and respond to your request.
If you are dissatisfied with how your personal data has been handled, you have the right to raise a concern or make a complaint to:
Data Protection Commission
6 Pembroke Row
Dublin 2
D02 X963
Ireland
Website: www.dataprotection.ie
Changes to this policy
We may update this Privacy and Cookie Policy periodically to reflect changes to our services, data-processing activities, service providers or legal obligations.
The revised policy will be published on this page and the “Last updated” date at the top of the page will be changed accordingly. We encourage visitors to review this policy periodically.
Where a change materially affects processing based on consent, visitors may be asked to review and confirm their cookie or privacy choices again.