Privacy notice
This notice explains what personal data Workwell collects through workwellcards.com, why, and what your rights are. If anything is unclear, email brielle@strousehouse.co.
Who we are
Workwell (workwellcards.com) is the data controller for the personal data described here. You can contact us at brielle@strousehouse.co.
Workwell Discovery
When you unlock your Discovery results, we collect:
- your email address
- your answers, your scores and your archetype
- whether you chose to receive marketing emails
- a record of the consent you gave, and when
Some answers, such as how you feel on a Sunday evening or how drained you feel after work, may relate to your wellbeing, so we treat them as health data. We use them to create your results, show them on screen and email you a PDF copy, including suggested practices and Workwell products. We also look at answers in aggregate to improve the Discovery.
Lawful basis: your explicit consent, which you give by ticking the box before unlocking your results (UK GDPR Articles 6(1)(a) and 9(2)(a)). You can withdraw it at any time by emailing us, and we'll delete your answers.
If you answer for your team, please describe the team in general terms and don't name individuals.
We also log anonymous events, such as starting or finishing the Discovery or clicking a link on the results page. These use a random ID created for each visit, no cookies, and aren't linked to you unless you go on to unlock your results.
The Discovery is for people aged 18 and over.
Marketing emails
We only send marketing emails if you tick the optional box. Every email includes a way to unsubscribe, and you can also reply to any email to stop them. Getting your results never depends on agreeing to marketing.
Contact form
If you use the contact form on our homepage, we receive your name, email, company (if given) and message through Web3Forms, and use them to reply to you. Our lawful basis is legitimate interests in responding to your enquiry.
Rituals
If you sign in with Google to save rituals, we store your saved list and a log of saves in Google Firebase, so you can see your list again. Our lawful basis is providing the feature you asked for.
Analytics
Our website uses Google Analytics to understand how many people visit, which pages they use and which buttons they click. On the Discovery pages, Google Analytics only records that someone started, finished or unlocked the quiz and which links they clicked. Your answers, results and email address are never sent to Google Analytics.
Who we share data with
We use these service providers, who process data on our behalf under data processing terms:
- Google (Google Workspace, Firebase and Analytics), to store Discovery responses, send emails, run Rituals and measure visits
- Web3Forms, to deliver contact form messages
When you click through to buy a deck or book a call through Calendly, the companies that run those services apply their own privacy policies to what you share with them. We never sell your data.
Some providers may process data outside the UK. Where they do, the transfer is protected by safeguards recognised under UK law, such as the UK International Data Transfer Agreement or Addendum, or the UK–US Data Bridge.
How long we keep it
- Discovery answers and results: 12 months, then deleted automatically
- Anonymous Discovery events: 12 months
- Marketing preferences: until you unsubscribe. We then keep only your email on a do-not-contact list so we don't email you again
- Contact form messages: as long as needed to deal with your enquiry
Your rights
You have the right to access your data, correct it, have it deleted, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent at any time. Email brielle@strousehouse.co and we'll respond within one month.
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.