What is our Privacy Policy?
The Weave Privacy Policy
Privacy Notice
1. Introduction
This privacy notice explains how personal data is collected and processed when people use the website, including any landing pages linked to or originating from www.wearetheweave.co.uk, and the Health and Wellbeing App (the “App”).
By providing personal data, users confirm that they are aged 16 or over.
Relocon t/a The Weave Limited (referred to in this notice as “The Weave”, “we”, “us” or “our”) is the data controller responsible for personal data processed through the website and App.
Contact details
Full name of legal entity: Relocon t/a The Weave Limited
Email address: hello@wearetheweave.co.uk
Postal address: 46 Queens Road, Earls Colne, Colchester, Essex, CO6 2RS
Personal data should be accurate and kept up to date. Any changes should be notified by email to hello@wearetheweave.co.uk.
2. What data is collected, why it is used, and the lawful basis
Personal data means any information capable of identifying an individual. It does not include anonymised data.
A. Data specific to the Health and Wellbeing App
The App may collect lifestyle and wellbeing data, which can include:
Information about habits such as physical activity, sleep patterns, diet, stress levels and emotional wellbeing.
Information entered by users in connection with wellbeing goals, reflections, prompts, progress tracking, and use of app features.
This information is processed for the following purposes:
To provide personalised recommendations and wellbeing-related insights.
To help users set objectives and track progress for stress management and general wellbeing.
To maintain and improve the App and related services.
To carry out research and product development using anonymised or aggregated information where possible.
Lawful basis for App data
Where App data includes wellbeing- or health-related information, it may amount to special category personal data under the UK GDPR. Where that applies, processing will rely on:
Article 6 UK GDPR: consent and/or performance of a contract, depending on the activity.
Article 9 UK GDPR: explicit consent for the processing of special category data where required
Users may withdraw consent at any time by contacting hello@wearetheweave.co.uk, but this will not affect the lawfulness of processing carried out before consent is withdrawn.
Key points for App data
App data is intended to remain ring-fenced and logically separated from website data and other business datasets.
App data is not sold.
App data is not shared with third parties for their own marketing or advertising purposes unless explicit consent is obtained.
B. Website and general data categories
Communication Data
Includes communications sent through contact forms, email or social media.
Purpose: to communicate, keep records, and establish, pursue or defend legal claims.
Lawful basis: legitimate interests.
Customer Data
Includes data relating to purchases, subscriptions or service use, such as name, address, email address and payment-related information.
Purpose: to supply goods or services and keep transaction records.
Lawful basis: performance of a contract.User Data
Includes data about how the website or App is used.
Purpose: to operate, secure and improve digital services and provide relevant content.
Lawful basis: legitimate interests.Technical Data
Includes data about devices, browsers, IP addresses and browsing activity.
Purpose: to administer and improve the website and App, troubleshoot issues, and analyse usage.
Lawful basis: legitimate interests.Marketing Data
Includes preferences in receiving marketing from The Weave and selected third parties, and communication preferences.
Purpose: to send relevant updates and measure effectiveness.
Lawful basis: consent and/or legitimate interests, depending on the communication.
3. How personal data is collected
App data: collected directly through interaction with the App, such as account creation, manual entries, questionnaires, prompts, or integrations with connected services or devices where enabled.
Website data: collected directly through forms, cookies and analytics tools and in some cases indirectly through service providers or platforms used to support the website.
4. International transfers and where data is processed
Some personal data connected with the App may be processed or stored outside the UK. Current infrastructure information from a development and hosting provider indicates that deployed apps run on Google Cloud in the United States (region us-central1) and that application data is currently processed and stored in the United States and India.
Under UK GDPR, making personal data accessible to a separate organisation outside the UK can amount to a restricted transfer, which must be covered by a valid transfer mechanism such as adequacy regulations, appropriate safeguards, or a limited exception.ico.org
Where personal data is transferred internationally, appropriate safeguards will be used where required. These may include the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism recognised under UK GDPR. A transfer risk assessment may also be carried out where required.ico.org+1
The privacy information provided to individuals must include details of transfers to third countries, whether those transfers are based on adequacy or safeguards, and how a copy of the relevant safeguards can be obtained.ico.org
A copy or summary of the relevant safeguard documentation may be requested by emailing hello@wearetheweave.co.uk.
5. Disclosures of personal data
Personal data may be shared with the following categories of recipients where necessary:
Service providers supporting the App or website, including hosting, infrastructure, software, analytics, communications and support providers.
Professional advisers including lawyers, accountants, insurers and auditors.
Payment processors and membership or authentication service providers.
Regulators, law enforcement bodies, courts, government authorities or other third parties where disclosure is required by law or necessary to establish, exercise or defend legal rights.
Where third-party processors handle personal data on behalf of The Weave, written contracts are expected to be in place setting out subject matter, duration, nature and purpose of processing, the type of personal data involved, and the obligations of the processor.ico.org
6. COOKIES
You can set your browser to refuse all or some cookies, or to alert you when websites set or access them. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. Our website uses cookies to enhance your experience. For more information, please see our Cookie Policy.
GENERAL DISCLAIMER
Should you use or engage with any of our advice, including our PESTLE scans, wellness scans, or advice derived from our or 3rd party AI models, paid or free, please be aware that you should not rely on these scans as the sole basis for any personal, business, financial or legal decision. Before acting, seek advice from a suitably qualified professional (accountant, solicitor, FCA-authorised adviser as appropriate). These models and tools are intended as a starting point for strategic thinking, whether personal or business, not as professional, financial, legal, investment or regulatory advice. Any analysis may contain errors, omissions or outdated information, and the observations are general in nature — they do not take account of your specific circumstances.
The Weave (us), its members and its partners accept no liability for any loss, damage or consequence — direct or indirect — arising from use of, or reliance on, any of these scans and the advice derived from them.
