Privacy Policy – Ark (Updated)

Effective date 10/09/2025
Last updated: 10/09/2025

Who We Are

Ark (“we”, “our”, “us”) is a wellbeing platform operated by [Seven Senses LTD]. We are the data controller of personal data processed through the Ark app.

Who Can Use Ark

Ark is available only to adults (18+). We do not knowingly collect data from under-18s, and our services are not designed for minors.

The Data We Collect

We collect and process the following categories of data:

For Users (Clients):

Exploratory wellbeing data (de-identified): information you provide about your goals, lifestyle, or health concerns before creating an account. This data is not linked to your identity until you pass the payment wall.
Account information: name, email, login details, payment information (collected when you subscribe).
Linked wellbeing profile: once subscribed, your personal details are linked to your wellbeing data for personalised matching.
Usage data: device type, IP address, app interactions.
Communications: messages exchanged with practitioners.

For Practitioners:

Personal and professional data: name, contact details, qualifications, services offered.
Sensitive data: information about your professional specialisms (e.g. therapy type, wellbeing practices) linked to your profile.
Verification records: documents provided to evidence qualifications or insurance.

How We Use Your Data

We use your data to:

Provide access to the Ark platform.
Match users with suitable wellbeing practitioners.
Display practitioner profiles and verify their credentials.
Process subscriptions and payments.
Maintain communication between users and practitioners.
Improve and secure the app.

We do not sell your data.

Lawful Basis for Processing

Contract: to deliver our matching services.
Consent: for processing health and wellbeing data, and for profiling users.
Legitimate interests: to improve services, maintain security, and verify practitioners.

Profiling & Automated Decision-Making

We use automated profiling to recommend practitioners based on user wellbeing data.

Recommendations are advisory only and do not have legal or significant effects.
You may opt out of profiling at any time, though this may reduce the personalisation of your results.

Sharing Your Data

We may share your data with:

Practitioners: users’ personal details are shared only once they choose to engage or pay.
Service providers: such as payment processors, hosting, and analytics providers (bound by data processing agreements).
Legal authorities: if required by law.

We do not transfer your data outside the UK/EEA unless safeguards are in place.

Data Retention

Exploratory wellbeing data (before payment wall): deleted or anonymised after [e.g. 30 days] if no account is created.
Client accounts: retained while active, and securely deleted [e.g. 12 months] after closure.
Practitioner accounts: retained while active; professional verification records retained for [e.g. 6 years] where legally required.

Your Rights

You have the right to:

Request us to Rectify inaccuracies.
Request erasure.
Restrict or object to processing (including profiling).
Data portability.
Withdraw consent at any time.

Security

Sensitive data is encrypted and pseudonymised where possible.
Exploratory wellbeing data is stored separately from identifiable data until the payment wall.
Practitioner profiles are verified to maintain safety and trust.

Complaints

You may contact the Information Commissioner’s Office (ICO) at www.ico.org.uk if you are unhappy with how your data is handled.