The General Data Protection Regulation (GDPR) is the data privacy law that applies to all residents of the European Union. Wellyx also applies this GDPR Policy for all residents of the United Kingdom and Switzerland (together with the European Union, the “Wellyx GDPR Zone”). Its purpose is to protect the personal information of individuals and ensure transparency, security, and fairness in how data is collected and processed.
Wellyx is fully committed to GDPR compliance. We support all customers who operate within the Wellyx GDPR Zone or who serve members located there. This page explains how Wellyx manages personal data, the rights of individuals, and the responsibilities of our customers under GDPR.
If your business uses Wellyx to store or process information about members, visitors, or staff who live in the European Union, you are considered the Data Controller under GDPR. This means you decide what data is collected and how it is used.
Wellyx acts as the Data Processor. We process personal data only on your behalf and only according to your instructions. We do not use, access, or share data for any purpose other than delivering services to you.
You retain full ownership of all member and business data stored in Wellyx.
Depending on the features you use, Wellyx may process the following information:
Wellyx never collects more information than is reasonably required for the operation and maintenance of the platform.
Wellyx processes personal information only for legitimate business purposes, which include:
Wellyx applies strict security controls to protect every layer of data, such as:
We maintain a culture of privacy and security across all teams and internal systems.
Wellyx processes personal data only when a valid legal basis applies, such as:
If a business relies on consent, it is responsible for collecting and managing that consent from its members.
Wellyx may store and process data in secure data centres located outside the European Economic Area. Whenever data is transferred, Wellyx ensures the same level of protection by using:
All partners and vendors follow strict GDPR aligned security and privacy practices.
Wellyx may share personal data with trusted partners who assist in delivering parts of the service. These may include:
Wellyx never sells or distributes personal information to third parties for marketing or unrelated activities. Every partner is bound to follow confidentiality and GDPR standards.
As the Data Controller, your business must:
Wellyx supports you with tools and documentation to help you meet these responsibilities.
Wellyx supports all rights provided to individuals under GDPR. Members of your business have the right to:
Wellyx assists businesses in fulfilling these rights by providing secure data export, correction, and deletion options.
Wellyx follows a defined process for identifying and managing data breaches. If a breach occurs within the Wellyx environment:
Transparency and speed are central to our breach response.
Wellyx provides a detailed Data Processing Agreement that outlines:
A full DPA is available for every customer and can be requested through our support team.
Wellyx uses cookies to maintain platform performance and deliver a smooth experience. Cookies may be used for:
Users can manage cookie preferences through browser settings at any time.
For GDPR questions, privacy requests, or DPA inquiries, please contact us at:
Wellyx Privacy Team
Email: [email protected]
We respond promptly to all privacy-related concerns and requests.
