Privacy Policy

Last updated: 26 August 2026

1. About this policy

This Privacy & Cookie Policy explains how CoreSeven collects, uses, stores and protects personal information when you use the CoreSeven platform.

CoreSeven is operated by Inspire You Wellbeing Ltd.

For data-protection purposes, Inspire You Wellbeing Ltd is the controller of personal information where we determine why and how that information is processed.

Contact:

admin@coresevenplatform.com

This policy should be read alongside the CoreSeven Terms & Conditions.

2. Information we may collect

Depending on how you use CoreSeven, we may collect:

Account information

This may include:

• name;
• email address;
• username;
• profile photograph;
• account identifiers;
• membership type;
• account preferences; and
• login and account activity.

Subscription and transaction information

This may include:

• membership type;
• subscription status;
• trial status;
• renewal information;
• transaction references; and
• payment status.

Payment-card information may be processed directly by our payment provider rather than stored by CoreSeven.

Quiz and wellbeing information

When you complete CoreSeven quizzes, we may process:

• quiz answers;
• Rhythm scores;
• Beat scores;
• quiz history;
• changes in scores over time;
• recommendations generated from your results; and
• information about different areas of your life that you choose to provide.

CoreSeven quizzes cover physical and emotional wellbeing, growth, social connection, finances, occupational life and life transitions.

Some quiz responses may reveal information concerning physical or mental health or otherwise constitute sensitive or special-category personal data.

Goals and platform activity

We may collect information relating to:

• goals you create;
• Beats and Levels you access;
• content completed;
• progress;
• Pulse Points earned or used;
• rewards selected;
• charity allocations;
• activity history; and
• other interactions with CoreSeven.

Community information

If you use The Pulse or other community features, we may process:

• posts;
• comments;
• replies;
• reactions;
• Q&A contributions;
• profile information displayed with contributions; and
• moderation information.

Leaderboard information

Depending on your preferences, the leaderboard may use:

• display name;
• profile picture;
• Pulse Points;
• leaderboard position; or
• an anonymous identifier.

You can control this through Your leaderboard preferences.

Technical information

We may collect information such as:

• IP address;
• device and browser information;
• operating system;
• login information;
• security logs;
• cookie identifiers;
• error information; and
• technical usage information.

3. Why we use your information

We may use personal information to:

• create and manage your CoreSeven account;
• provide your membership;
• process subscriptions and payments;
• administer free trials and renewals;
• provide CoreSeven quizzes;
• calculate Rhythm and Beat scores;
• track progress;
• generate recommendations;
• save goals and activity;
• award and manage Pulse Points;
• provide rewards;
• process charity allocations;
• operate leaderboard features;
• operate community features;
• provide account and security communications;
• provide optional engagement communications where permitted;
• provide push notifications where enabled;
• respond to support requests;
• prevent fraud and misuse;
• maintain security;
• diagnose technical problems;
• understand and improve how CoreSeven performs;
• comply with legal and regulatory obligations; and
• establish, exercise or defend legal rights where necessary.

The ICO requires privacy information to explain purposes and lawful bases clearly.

4. Our lawful bases

Different processing activities may rely on different lawful bases under UK data-protection law.

Contract

We may process information where necessary to provide the CoreSeven account, membership or services you have requested and to administer a paid subscription.

Legitimate interests

We may rely on our legitimate interests where appropriate, including to:

• operate and improve CoreSeven;
• maintain platform security;
• prevent fraud and abuse;
• understand general platform performance;
• protect our intellectual property; and
• provide appropriate customer support.

Where we rely on legitimate interests, we consider whether those interests are proportionate and compatible with your rights.

Legal obligation

We may process or retain information where necessary to comply with legal obligations, including accounting, tax, regulatory and legal requirements.

Consent

We rely on consent where required, including for certain optional communications, cookies or similar technologies and particular processing of quiz information.

5. Special-category quiz information

Some CoreSeven quiz responses may reveal information about your physical or emotional health and may constitute special-category personal data.

Where we rely on explicit consent to process this information, you will be presented with a separate consent statement before you can complete CoreSeven quizzes.

Your consent record may include:

• your user ID;
• your account information;
• the date and time consent was provided;
• the version of the consent wording; and
• confirmation that consent was provided.

The ICO states that explicit consent for special-category data must be affirmative and unambiguous, given through a clear statement, identify the nature of the special-category information and be capable of withdrawal.

You can withdraw this consent at any time by emailing:

admin@coresevenplatform.com

Withdrawal will not make processing carried out before withdrawal unlawful.

However, because CoreSeven needs quiz information to calculate scores, maintain progress and provide recommendations, withdrawing quiz-data consent may mean these features can no longer be provided.

6. Where quiz information is stored

Quiz responses, scores and associated CoreSeven account information are stored securely within CoreSeven’s WordPress environment and associated systems.

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

No internet-connected system can guarantee absolute security, and members are also responsible for protecting their passwords and devices.

7. Leaderboard privacy

Participation in CoreSeven does not require you to display your identity publicly on the leaderboard.

Through Your leaderboard preferences, you can choose to:

Show my profile
Your display name, profile picture, position and Pulse Points may be displayed.

Stay anonymous
Your position and Pulse Points remain visible, but your identifying display name and profile photograph are hidden and replaced with an anonymous identity.

Hide me from the leaderboard
Your information and position do not appear on the leaderboard, although you can continue earning Pulse Points.

You may change this preference through your account.

8. Communications

Essential account communications

We may send communications necessary to operate your account or membership, including:

• payment information;
• subscription information;
• security messages;
• account notices;
• service changes; and
• other essential operational communications.

These cannot always be switched off while maintaining an active account.

Engagement emails

You may be able to choose whether to receive optional emails such as:

• inactivity reminders;
• Beat check-ins;
• goal prompts; and
• CoreSeven updates.

You can change these preferences through your account or use an unsubscribe mechanism where provided.

Push notifications

Where available, you may choose whether to allow CoreSeven notifications on your device or browser.

Push-notification permissions may also be controlled through your device or browser settings.

9. Sharing information

We do not sell your personal information.

We may share personal information with carefully selected organisations that help us operate CoreSeven, such as providers of:

• website and database hosting;
• payment processing;
• email delivery;
• authentication and security;
• backups;
• analytics;
• forms;
• push notifications;
• technical support; and
• other infrastructure necessary to provide CoreSeven.

These organisations may process information on our behalf or, in some circumstances, act as separate controllers.

We may also disclose information where required by law, regulation, court order or to establish, exercise or defend legal rights.

A processor inventory should be maintained internally so this section can be made more specific as CoreSeven’s technology stack is finalised.

10. Employers and organisations

Where access to CoreSeven is provided or funded by an employer or another organisation, individual quiz answers and identifiable wellbeing information will not be provided to that organisation merely because it funded access, unless we have clearly told you otherwise and have an appropriate lawful basis.

If we provide organisations with usage or impact information, we will seek to use aggregated or appropriately anonymised information where suitable.

This is particularly important where an organisation could make decisions affecting an individual.

11. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, security or regulatory requirements.

Different categories of information may therefore be kept for different periods.

For example:

• active account information may be retained while your account remains open;
• quiz and progress information may be retained to provide historical progress features;
• consent records may be retained to demonstrate how and when consent was obtained;
• transaction and accounting information may need to be retained for statutory periods;
• security records may be retained for an appropriate period to protect CoreSeven and its members.

Where information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.

12. Deleting your account and data

You may request deletion of your CoreSeven account and associated personal information by emailing:

admin@coresevenplatform.com

We may need to verify your identity before acting on a request.

Deletion is subject to applicable legal rights and exceptions. We may need to retain limited information where required by law or where another lawful reason applies.

Deleting your account is separate from cancelling a paid subscription.

The ICO states that organisations normally have one month to respond to a valid erasure request.

13. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you rights including:

• the right to be informed about how your information is used;
• the right to access personal information we hold about you;
• the right to ask us to correct inaccurate information;
• the right to request erasure;
• the right to request restriction of processing;
• the right to object to certain processing;
• the right to data portability in applicable circumstances;
• rights relating to certain automated decision-making; and
• the right to withdraw consent where processing is based on consent.

Not every right applies in every circumstance.

To exercise a right, contact:

admin@coresevenplatform.com

You also have the right to raise concerns with the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.

Information Commissioner’s Office

14. Automated scoring and recommendations

CoreSeven uses quiz responses and platform information to calculate scores and provide recommendations.

These processes are intended to support personal reflection and navigation of CoreSeven content.

CoreSeven does not intend quiz scoring to make decisions that produce legal or similarly significant effects about you.

If this changes in the future, we will review the relevant data-protection requirements before introducing that processing.

15. International processing

Some technology providers used to operate CoreSeven may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we will use appropriate safeguards where required by UK data-protection law.

As CoreSeven’s processor inventory is finalised, we will maintain records of relevant international transfers and safeguards.

16. Cookies and similar technologies

CoreSeven uses cookies and similar technologies to operate and improve the platform.

Cookies are small pieces of information stored on or accessed from your device.

Similar technologies may include browser storage and technologies used within web applications.

Strictly necessary technologies

Some technologies are necessary for CoreSeven to work properly, including those used for:

• login and authentication;
• account security;
• maintaining sessions;
• remembering essential preferences;
• membership functionality; and
• preventing fraud or misuse.

Where legally exempt, these may operate without optional cookie consent.

Analytics and performance technologies

We may use analytics or performance technologies to understand matters such as:

• how CoreSeven is used;
• which pages or features are accessed;
• technical performance;
• errors; and
• general engagement patterns.

Where consent is legally required, these technologies should not be activated until you have made the appropriate choice.

Preference and functionality technologies

We may use technologies to remember choices and provide enhanced functionality.

Whether consent is required depends on the nature and purpose of the technology.

Managing cookies

Where required, CoreSeven provides controls allowing you to accept, reject or manage non-essential cookies.

You can also control cookies through your browser, although blocking necessary cookies may prevent parts of CoreSeven from working properly.

The ICO requires clear information about cookies and says non-essential cookies must not be placed before valid consent where consent is required.

17. Changes to this Privacy & Cookie Policy

We may update this policy where CoreSeven, our technology or applicable law changes.

The current version will be made available through CoreSeven and the date at the top will show when it was last updated.

Where a change materially affects how we use personal information, we will provide additional notice where appropriate.

18. Contact

For questions about privacy, your data, withdrawal of quiz consent or deletion of your account, contact:

Inspire You Wellbeing Ltd
Email: admin@coresevenplatform.com