Effective Date: April 7, 2026
1. Introduction and Our Contact Details
Wanda, Inc. provides this Privacy Policy to inform you of our procedures regarding the collection, use, and disclosure of personal information received via our website, mobile app, and clinical platform. By using our Services, you consent to the collection, processing, and storage of your information as described herein.
Company Name: Wanda, Inc.
Registration Number: 12687024
Address: Future Space, UWE North Gate, Filton Road, Stoke Gifford, Bristol, BS34 8RB
Website: https://wandahealth.com/
Privacy Contact: compliance@wandahealth.com
2. The Type of Personal Information We Collect
We collect information that identifies, relates to, or could reasonably be linked to you (“Personal Information”).
- Contact Data: Name, billing/delivery address, email address, and contact number used to identify or contact you.
- Financial Data: Payment methods and card associations used for direct payments.
- We do not store full card details; these are encrypted in your browser and processed by our third-party providers.
- Profile & Account Data: Username, login data, purchase history, and feedback from surveys or questionnaires.
- Health and Biometric Data (Protected Health Information):
- Clinical Data: Information regarding the clinic that referred you and the clinicianmonitoring your progress.
- Activity Data: Frequency of use, range of motion, heart rate wavelets, and assessment outcomes used to project improvement metrics.
- Clinical Categorization: Records of current and ideal medical practices to improve software outcomes.
- Usage and Log Data: IP addresses, browser type, time spent on specific pages or games, and clickstream data.
3. How We Collect and Use Your Information
We collect information directly from you when you register an account, and indirectly from your healthcare provider upon receipt of your consent.
We use this information to:
- Respond to your inquiries and provide requested services
- Identify resources, clinical models, and content relevant to your health journey.
- Monitor and analyze Site functionality to increase user-friendliness.
- Communicate suggestions via email or SMS in accordance with your settings.
4. HIPAA and Medical Emergency Disclaimer
THE CONTENTS OF THIS SITE ARE FOR INFORMATIONAL PURPOSES ONLY. IF YOU HAVE A MEDICAL EMERGENCY, CALL 911 IMMEDIATELY.
As we serve US patients, much of the information collected is protected by the Health Insurance Portability and Accountability Act (“HIPAA”). In any instance where our general policies conflict with our HIPAA obligations to you or your healthcare provider, the HIPAA standards will apply.
5. Sharing and Disclosure
Wanda does not rent or sell your personal information. We share data only under the following circumstances:
- Healthcare Providers: With your explicit consent, we share progress and health data with your designated clinician.
- Service Providers: We employ third parties for maintenance, database management, and payment processing. They are obligated to keep your data confidential.
- Legal Obligations: We may disclose information to comply with subpoenas, court orders, or government requests.
- Vital Interests: We may disclose data to investigate potential fraud, illegal activities, or threats to the safety of any person.
- Business Transfers: In the event of a merger or sale, your data may be transferred, provided you are given notice and an opportunity to opt-out.
6. International Transfers and Storage
Your information is stored on secure servers. While we serve US patients, our operations may involve processing data in other jurisdictions.
- US Processing: Information may be transferred to and maintained on computers located in the United States.
- UK/EEA Residents: If you are located in the UK or EEA, we ensure appropriate safeguards are in place for data transferred outside these regions.
7. Your Data Rights
Under various laws (including UK GDPR and CCPA), you have the following rights regarding your data:
- Right of Access: Request copies of your personal information.
- Right to Rectification: Request corrections to inaccurate or incomplete data.
- Right to Erasure: Request the deletion of your account and records, subject to legal retention requirements.
- Right to Object/Restrict: Object to or restrict the processing of your data in certain circumstances.
- California Privacy Rights: California residents may request a list of third parties to whom we disclosed information for marketing (Wanda currently does not sell data for this purpose).
8. Security and Retention
We implement commercially reasonable precautions consistent with the HIPAA Security Rule to protect your data from loss or unauthorized access. This includes robust access controls and encrypted transfers.
We retain your information only as long as necessary for business purposes or to comply with legal, tax, and accounting requirements. When data is no longer needed, we either delete it or permanently de-identify it.
9. Children’s Privacy
We do not knowingly collect personal information from children under the age of 13. If we become aware that a child has provided us with data without parental consent, we will delete it immediately.
10. How to Complain
If you have concerns about our use of your information, please contact us at
compliance@wandahealth.com.
- UK Users: You may also complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.
- US Users: You may have additional rights to file a complaint with the Department of Health and Human Services (HHS) regarding HIPAA concerns.