Privacy Policy

1. Introduction

WorldWellness® Group ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, including the CEO BLUEPRINT™, CEO COACHING™, CEO WORKSHOP™, CEO PROJECT™, and CEO LICENSE™ platforms.

This Policy applies globally and has been drafted to comply with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA), and other applicable international privacy laws.

By using our website or purchasing our services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

WorldWellness® Group is the data controller responsible for your personal data. If you have any questions regarding this Policy or our data practices, please contact us at:

Email: edward@worldwellness.group

3. Information We Collect

We may collect and process the following categories of personal data:

• Identity & Contact Data: Name, email address, phone number, and company details provided when you register, purchase, or contact us.
• Transaction Data: Payment details, purchase history, and service configuration. Note: full payment card data is processed by our payment provider (Stripe) and is not stored by us.
• Usage & Technical Data: IP address, browser type, operating system, pages visited, session duration, and referring URLs, collected automatically via cookies and similar technologies.
• Profile & Content Data: Information you input into the MY BLUEPRINT™ and CEO LICENSE™ HUB platforms, including workbook entries, notes, quiz responses, and progress data.
• Communications Data: Records of correspondence when you contact us by email, form, or other channels.
• Marketing Preferences: Your preferences for receiving communications from us.

4. Legal Basis for Processing (GDPR)

Where GDPR applies, we rely on the following lawful bases for processing your personal data:

• Contract: Processing necessary to perform a contract with you or to take steps before entering into a contract.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and direct marketing to existing customers, where these are not overridden by your rights.
• Consent: Where you have given clear consent, such as subscribing to marketing communications.
• Legal Obligation: Where processing is required to comply with a legal obligation.

5. How We Use Your Information

We use your personal data for the following purposes:

• To provide, operate, and improve our services and platform
• To process transactions and send related information, including purchase confirmations and invoices
• To communicate with you about your account, services, and support requests
• To send marketing and promotional communications (where you have opted in or where permitted by law)
• To personalise your experience and deliver content relevant to your interests
• To analyse usage patterns and improve the functionality of our platform
• To comply with legal obligations and enforce our terms
• To protect the security and integrity of our platform and prevent fraud

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience, analyse site traffic, and personalise content. You can control the use of cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website.

Categories of cookies we use include: strictly necessary cookies, performance and analytics cookies, and marketing cookies. By continuing to use our website, you consent to our use of cookies as described in this Policy.

7. Sharing Your Information

We do not sell your personal data. We may share your data with the following categories of third parties:

• Service Providers: Trusted third-party service providers who assist us in operating our business (e.g., payment processors, cloud infrastructure, email services), bound by confidentiality and data processing agreements.
• Professional Advisors: Legal, accounting, and other professional advisors where necessary.
• Regulatory Authorities: Where required by law or to protect our legal rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

8. International Data Transfers

As a global business operating across Asia, Europe, the Americas, and other regions, your personal data may be transferred to and processed in countries outside your country of residence. Where such transfers involve countries not recognised as providing an adequate level of data protection, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, or other legally recognised transfer mechanisms.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When your data is no longer required, we will securely delete or anonymise it. Typical retention periods range from 2 to 7 years depending on the nature of the data and applicable legal requirements.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: The right to request a copy of the personal data we hold about you.
• Rectification: The right to request correction of inaccurate or incomplete data.
• Erasure: The right to request deletion of your personal data ("right to be forgotten"), subject to legal obligations.
• Restriction: The right to request that we restrict the processing of your data.
• Portability: The right to receive your data in a structured, machine-readable format.
• Objection: The right to object to processing based on legitimate interests or for direct marketing.
• Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time.
• California Rights (CCPA): California residents have additional rights, including the right to know, delete, and opt out of the sale of personal information.

To exercise any of these rights, please contact us at edward@worldwellness.group. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure server infrastructure, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal data.

13. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately so we can take steps to delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Last updated" date at the top of this Policy and, where appropriate, by sending you a direct notification. We encourage you to review this Policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

WorldWellness® Group
edward@worldwellness.group