1. Who we are

EvolveWell, Inc. (“EvolveWell”, “we”) operates this website. For the personal data described in this policy, EvolveWell, Inc. is the data controller.

• EvolveWell, Inc., 1149 Amalfi Dr, Pacific Palisades, CA 90272, United States

• Privacy contact: Desiree Perez — privacy@evolvewell.com

2. What we collect, why, and on what legal basis

• Contact details you give us — name, work email, company, and anything you write in a form — Demo requests, the “join a session” form, scheduling a meeting — Responding to you, arranging the demo or session you asked for, and following up — Art. 6(1)(b) — steps you request before a contract; Art. 6(1)(f) — our legitimate interest in responding to business inquiries

• Marketing preferences — Checkboxes you tick on our forms — Sending you product news and session invitations, if you opted in — Art. 6(1)(a) — consent; withdraw any time

• Usage and device data — pages visited, approximate location from IP, browser and device type, cookie identifiers — Cookies and similar technologies, only after you consent via our cookie banner — Understanding how the site is used (analytics) and measuring our marketing (advertising) — Art. 6(1)(a) — consent, per category, via the banner

• Technical logs — IP address, request data — Automatically, from our hosting and bot-protection providers — Serving the site, keeping it secure, preventing abuse — Art. 6(1)(f) — legitimate interest in running a secure website

We do not sell personal data, and this website makes no automated decisions with legal or similarly significant effects about you.

3. Who processes data for us

We use a small set of service providers. Where a provider processes personal data on our behalf, it does so under a data-processing agreement.

• Framer B.V. — Website hosting and content delivery — Netherlands (global CDN)

• HubSpot, Inc. — Forms and customer-relationship management for the contact details you submit — EU data center (with US affiliate access)

• Google (Google Analytics 4, Google Tag Manager, Google Ads) — Analytics and advertising measurement — only after consent, routed through an EvolveWell-controlled server container — US / global

• Meta Platforms (Meta Pixel) — Advertising measurement — only after consent — US / global

• Stape — Hosts the server-side tag container that routes our analytics — EU

• Vimeo, Inc. — Video playback on pages with embedded video — US

• Calendly LLC — Meeting scheduling when you book a demo — US

• Cloudflare, Inc. — Bot protection and content delivery for some embedded services — US / global

• Silktide (consent manager) — Records and honors your cookie choices, in your browser — Runs locally in your browser

4. International transfers

Some providers above are in the United States or process data globally. Where personal data leaves the European Economic Area, the UK, or Switzerland, we rely on the provider’s certification under the EU-U.S. Data Privacy Framework or on Standard Contractual Clauses, together with the provider’s technical safeguards. You can request a copy of the relevant safeguards via privacy@evolvewell.com.

5. How long we keep data

• Inquiries and leads: for as long as we’re actively in conversation with you or your company, and no longer than necessary for the business relationship we’re building. If nothing comes of it, we delete.

• Marketing consent records: until you withdraw consent, plus the record needed to prove the consent existed.

• Cookies: for the lifetimes listed in the Cookie Policy.

• Technical logs: for short, rolling windows set by our hosting providers for security purposes.

6. Your rights

If you’re in the EEA, UK or Switzerland, you can ask us for access to your personal data, correction, deletion, restriction of processing, a portable copy, or object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time (for cookies: reopen the cookie settings via the icon in the corner of any page). Write to privacy@evolvewell.com — we respond within one month. You also have the right to lodge a complaint with your local data-protection authority.

If you’re a resident of California or another US state with a privacy law, you have comparable rights of access, deletion and correction, and we honor them through the same address. We do not sell or share personal information as those terms are defined in the CCPA.

7. Children

This website is for businesses and is not directed at children. We don’t knowingly collect data from anyone under 16.

8. Changes

When we change this policy, we update the effective date at the top; for significant changes we’ll say so prominently on this page.