Privacy Policy
Effective: June 30, 2026
1. Data Controller
Health Perk. Privacy contact: [email protected].
2. What Data We Collect
- Email address (newsletter and AI waitlist signups)
- Analytics data (page views, device type, referrer) via Google Analytics
- Cookie consent preferences via CookieYes
- Any data submitted via the contact form
3. Purpose and Legal Basis
- Email for newsletter/waitlist — Consent (GDPR Art. 6(1)(a))
- Google Analytics — Consent (activated only after user consent via CookieYes)
- Contact form data — Legitimate interest to respond to the inquiry (GDPR Art. 6(1)(f))
4. Data Retention
- Email: retained until unsubscribe, then deleted within 30 days
- Google Analytics data: 26 months
- Contact form submissions: deleted once the inquiry is resolved
5. Third-Party Processors
- Google Analytics (website analytics) — https://policies.google.com/privacy
- CookieYes (cookie consent management) — https://www.cookieyes.com/privacy-policy/
6. Cookies
Cookie consent is managed via CookieYes. Non-essential cookies are only activated after you provide consent. Cookie types in use: strictly necessary (always active) and analytics (consent required). You can update your preferences at any time via the cookie settings link in the footer.
7. Your Rights
You have the right to access your data, correct it, delete it, restrict its processing, request portability, withdraw consent at any time, and lodge a complaint with a supervisory authority. To exercise any of these rights: [email protected].
8. International Transfers
Google Analytics may process data on servers in the United States. Google uses Standard Contractual Clauses as the legal mechanism for this transfer. See Google's Privacy Policy for details.
9. Changes to This Policy
This policy may be updated periodically. The effective date at the top of this page reflects the date of the last update.