Privacy Policy – Ark (Updated)

Effective date 10/09/2025
Last updated: 10/09/2025

Who We Are

Ark (“we”, “our”, “us”) is a wellbeing platform operated by [Seven Senses LTD]. We are the data controller of personal data processed through the Ark app.

Who Can Use Ark

Ark is available only to adults (18+). We do not knowingly collect data from under-18s, and our services are not designed for minors.

The Data We Collect

We collect and process the following categories of data:

For Users (Clients):

• Exploratory wellbeing data (de-identified): information you provide about your goals, lifestyle, or health concerns before creating an account. This data is not linked to your identity until you pass the payment wall.

• Account information: name, email, login details, payment information (collected when you subscribe).

• Linked wellbeing profile: once subscribed, your personal details are linked to your wellbeing data for personalised matching.

• Usage data: device type, IP address, app interactions.

• Communications: messages exchanged with practitioners.

For Practitioners:

• Personal and professional data: name, contact details, qualifications, services offered.

• Sensitive data: information about your professional specialisms (e.g. therapy type, wellbeing practices) linked to your profile.

• Verification records: documents provided to evidence qualifications or insurance.

How We Use Your Data

We use your data to:

• Provide access to the Ark platform.

• Match users with suitable wellbeing practitioners.

• Display practitioner profiles and verify their credentials.

• Process subscriptions and payments.

• Maintain communication between users and practitioners.

• Improve and secure the app.

We do not sell your data.

Lawful Basis for Processing

• Contract: to deliver our matching services.

• Consent: for processing health and wellbeing data, and for profiling users.

• Legitimate interests: to improve services, maintain security, and verify practitioners.

Profiling & Automated Decision-Making

We use automated profiling to recommend practitioners based on user wellbeing data.

• Recommendations are advisory only and do not have legal or significant effects.

• You may opt out of profiling at any time, though this may reduce the personalisation of your results.

Sharing Your Data

We may share your data with:

• Practitioners: users’ personal details are shared only once they choose to engage or pay.

• Service providers: such as payment processors, hosting, and analytics providers (bound by data processing agreements).

• Legal authorities: if required by law.

We do not transfer your data outside the UK/EEA unless safeguards are in place.

Data Retention

• Exploratory wellbeing data (before payment wall): deleted or anonymised after [e.g. 30 days] if no account is created.

• Client accounts: retained while active, and securely deleted [e.g. 12 months] after closure.

• Practitioner accounts: retained while active; professional verification records retained for [e.g. 6 years] where legally required.

Your Rights

You have the right to:

• Request us to Rectify inaccuracies.

• Request erasure.

• Restrict or object to processing (including profiling).

• Data portability.

• Withdraw consent at any time.

Contact us at hello@arkspace.co. We respond within one month.

Security

• Sensitive data is encrypted and pseudonymised where possible.

• Exploratory wellbeing data is stored separately from identifiable data until the payment wall.

• Practitioner profiles are verified to maintain safety and trust.

Complaints

You may contact the Information Commissioner’s Office (ICO) at www.ico.org.uk if you are unhappy with how your data is handled.