Privacy Policy

BeWell IT Limited ("we", "our", "us", or "BeWell IT"), company number 16095961, registered in England and Wales, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you visit our website at bewellit.com (the "Website").

This policy covers the Website only. Our mobile applications (ESRT StrongMind and Mindful Brian) have their own privacy policies, available on their respective websites.

1. Information We Collect

Information you provide to us:

• Contact inquiries: If you email us via any of the contact links on our Website, we receive your email address and any information you include in your message
• Mailing list: If you request to join our mailing list, we collect your email address to send you company news and updates
• Research inquiries: If you contact us about academic research pricing, we collect your email address and any details you share about your research

Information collected automatically:

• Hosting analytics: Our Website is hosted on Google Firebase Hosting, which may automatically collect basic access logs including IP addresses, browser type, referring pages, and pages visited. This data is collected by Google as part of standard hosting operations
• Website analytics: We use Google Analytics 4 in cookieless mode (no tracking cookies are set). This collects anonymised data including pages visited, approximate geographic region (derived from IP address), device type, and referral source. No personally identifiable information is collected, and no data is shared with advertisers. This data helps us understand how visitors use our Website so we can improve it
• Device information: Browser type, operating system, and screen resolution for the purpose of serving the Website correctly

Information we do NOT collect:

• We do not use cookies for tracking or advertising (our analytics operate in cookieless mode)
• We do not use social media tracking pixels
• We do not collect financial or payment information through the Website
• We do not use contact forms — all communication is via direct email

2. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide information about our products and services
• Send company news and updates if you have requested to join our mailing list
• Process and respond to academic research tier applications
• Maintain and improve our Website
• Comply with legal obligations

3. Legal Basis for Processing (UK GDPR)

We process your personal data based on:

• Consent: When you email us or request to join our mailing list, you consent to us processing your email address for that purpose
• Legitimate interests: For Website hosting, security, and service improvement
• Legal obligations: For compliance with applicable laws

4. Data Storage and Security

• Our Website is hosted on Google Firebase Hosting, which provides encrypted connections (HTTPS) for all visitors
• Email communications are handled through standard email providers with industry-standard security
• We do not store personal data in databases accessed through the Website
• Mailing list email addresses are stored securely and used solely for the purpose of sending company updates

5. Third-Party Services

Our Website uses the following third-party services:

• Google Firebase Hosting: Website hosting and content delivery
• Google Fonts: Typography (DM Sans and Instrument Serif). Google Fonts may collect your IP address when fonts are loaded. See Google Fonts Privacy

Our Website links to external services including the Apple App Store and Google Play Store. These services have their own privacy policies which we encourage you to review.

6. International Data Transfers

Our Website is hosted on Google's global infrastructure. Your data may be transferred to and processed in countries outside the UK/EEA, including the United States. We ensure appropriate safeguards through:

• Google's compliance with data transfer frameworks
• Standard Contractual Clauses (SCCs) where applicable
• Technical security measures including encryption in transit

7. Data Retention

• Email correspondence: Retained for as long as necessary to resolve your inquiry, then for up to 2 years for record-keeping
• Mailing list: Your email address is retained until you request removal
• Hosting logs: Retained by Google Firebase in accordance with their data retention policies

8. Your Rights

Under UK GDPR and applicable privacy laws, you have the right to:

• Access any personal data we hold about you
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing of your data
• Object to certain processing activities
• Data portability — receive your data in a portable format
• Withdraw consent at any time (including unsubscribing from our mailing list)
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, email privacy@bewellit.com with "Privacy Rights Request" in the subject line.

9. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information — we do not sell personal data
• Right to non-discrimination for exercising privacy rights

10. Children's Privacy

Our Website is not directed at children under 16. We do not knowingly collect personal information from children. If we learn that we have inadvertently collected information from anyone under 16, we will promptly delete it.

11. Links to External Services

Our Website contains links to external websites and services, including our product sites (esrt.bewellit.com, mindfulbrian.bewellit.com), app stores, and partner websites. We are not responsible for the privacy practices of these external services. We encourage you to review their privacy policies.

12. Updates to This Policy

We may update this Privacy Policy from time to time. When we make changes:

• The "Last Updated" date will be revised
• For material changes, we will update this page prominently
• Your continued use of the Website after changes constitutes acceptance

13. Contact Information

For questions or concerns about this Privacy Policy:

14. Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with:

15. Governing Law

This Privacy Policy is governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales, without limiting any rights or protections provided under applicable privacy laws in your jurisdiction.