Wellz est. 2026 Community
Legal · Privacy

Privacy Policy.

What Wellz collects, why, and what control you have over it. Plain language — no dark patterns.

Last updated: 28 May 2026 · Effective: 28 May 2026

1. Who we are

This site (cybersecwithwellz.com, the “Site”) is operated by Wellington Mukahiwa, trading as Wellz (the “Studio”, “we”, “us”). For any privacy question, contact connect@cybersecwithwellz.com.

2. What we collect

We only collect what is necessary to operate the Site and respond to enquiries.

  • Information you provide via the contact form — your name, email address, subject category, and the body of your message.
  • Network metadata logged by our hosting provider — your IP address, user agent, request timestamp, and the page you requested. Vercel collects these in standard server logs.
  • Bot/abuse-prevention signals from Google reCAPTCHA Enterprise — when you interact with the contact form, Google receives information about your visit (IP address, mouse and keyboard interaction patterns, browser characteristics, cookies set by Google) to score the request as human or automated. See Google’s Privacy Policy and Terms of Service.

We do not run third-party advertising trackers, analytics pixels (no Google Analytics, no Meta Pixel, no PostHog on this Site), or social-media trackers.

3. Why we collect it

  • To respond to your enquiry — your name, email, and message are forwarded to the Studio inbox so we can reply.
  • To prevent abuse — reCAPTCHA Enterprise verifies that contact form submissions come from real humans, not bots.
  • To keep the Site available — server logs help diagnose outages, abuse, and security incidents.

4. Cookies and similar technologies

This Site uses two categories of storage:

  • Strictly necessary local storage — we store your cookie-banner choice in your browser’s localStorage so the banner does not reappear on every page. This is first-party only and never leaves your device.
  • Optional, with your consent: Google reCAPTCHA Enterprise — when you accept the cookie banner, the reCAPTCHA script loads on the contact page. Google may set cookies on the google.com and recaptcha.net domains and read previously-set ones to assess whether you are human. If you reject or ignore the banner, reCAPTCHA does not load and the contact form falls back to a direct mailto: handoff. You can change your choice at any time via the “Cookie settings” link in the footer.

This Site uses Google reCAPTCHA Enterprise for spam and abuse prevention. Use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.

5. Third-party processors

We rely on the following sub-processors to operate the Site:

  • Vercel Inc. — static hosting + serverless function for contact-form verification. Vercel Privacy Policy.
  • Google LLC — reCAPTCHA Enterprise and Google Fonts. Google Privacy Policy.
  • Cloudflare, Inc. — DNS and Email Routing. Contact-form submissions sent to connect@cybersecwithwellz.com are forwarded through Cloudflare to the Studio’s mailbox. Cloudflare Privacy Policy.
  • Google Workspace (Gmail) — final destination of contact-form messages, used as the Studio’s working inbox.

6. How long we keep your data

  • Contact-form messages — retained in the Studio inbox for as long as is reasonably required to handle the enquiry and any follow-up engagement, then archived for up to 24 months for tax, legal, and reference purposes, after which they are deleted on request or on routine clean-up.
  • Server logs — retained by Vercel according to their default log retention (typically a few days to a few weeks).
  • reCAPTCHA data — retained by Google according to their own policy.

7. International transfers

Wellz operates from the United States. Our hosting (Vercel), bot-prevention (Google), DNS (Cloudflare), and mail (Google) providers operate globally. If you contact us from outside the United States, your information will be transferred to and processed in the United States and any other jurisdictions in which our sub-processors operate.

8. Your rights

Depending on where you live, you have some or all of the following rights:

  • Access — request a copy of the personal information we hold about you.
  • Correction — ask us to fix inaccurate information.
  • Deletion — ask us to delete the personal information we hold about you, subject to legal retention requirements.
  • Restriction or objection — ask us to stop or limit specific processing.
  • Portability — receive a copy of your data in a structured, machine-readable format.
  • Withdraw consent — change your cookie choice at any time via the “Cookie settings” link in the footer.
  • Lodge a complaint — with your local data protection authority (e.g. the UK ICO, an EU member-state DPA, or the relevant state Attorney General in the US).

If you are in the European Economic Area or the United Kingdom, our legal bases for processing are: consent (for reCAPTCHA and optional cookies), legitimate interests (for responding to your enquiries and protecting the Site from abuse), and legal obligation (where required).

If you are in California, Colorado, Connecticut, Virginia, Utah, Texas, or another US state with a comprehensive privacy law, you have rights under that law. We do not sell your personal information and we do not use it for cross-context behavioural advertising.

To exercise any of these rights, email connect@cybersecwithwellz.com. We will respond within the timeframe required by the applicable law (typically 30 days).

9. Children

This Site is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact us and we will delete it.

10. Security

The Site is served over HTTPS with HSTS preloaded. The contact-form endpoint validates input, rate-limits abuse signals via reCAPTCHA Enterprise, and uses content-security-policy and other hardening headers. No system is perfectly secure; please use judgement when sharing sensitive information.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be summarised at the top of the page for at least 30 days after they take effect.

12. Contact

Questions, requests, or concerns about this policy? Email connect@cybersecwithwellz.com.