Privacy & Policy

 

Privacy Policy (UK GDPR, DPA 2018, PECR)

Effective date: [10-Nov-2025]
Controller/Operator: CRYPTIQ LTD (trading as SHEIQ) (“we”, “us”, “our”)
Registered in: England & Wales — Company No. 16012114
Registered office: 128 City Road, London, EC1V 2NX, UK
Privacy contact (DSARs): privacy@sheiq.uk (monitored shared mailbox)
Territory: UK users (we will update this notice before serving EEA users).
Age: This site and Early Access are intended for 18+.

1. What this covers

How we collect, use, store, share and protect personal data when you visit sheiq.uk, complete the Rhythm Snapshotquiz, request Early Access, or contact us.

2. Data we collect

  • Identity & contact: first name, email.
  • Quiz signals (special category data): self-reported wellbeing indicators (e.g., sleep, heat/flushes, mood, energy).
  • Technical/usage: IP address, device/browser, consent choices, pages viewed.
  • Attribution: UTM parameters and referrer.
    We do not seek children’s data. If you believe a child has provided data, email privacy@sheiq.uk and we will delete it.

3. Purposes & lawful bases

  • Provide quiz results & 1-page plan — performance of a requested service; explicit consent for health data (Art 9(2)(a)).
  • Email Early Access and updates — consent (withdraw anytime).
  • Personalise nurture content — consent.
  • Security & fraud prevention — legitimate interests.
  • Analytics/measurement — consent under PECR for non-essential cookies; anonymised aggregate stats may rely on legitimate interests where compliant.

4. Special category (health) data

Quiz answers may reveal health-related information. We process this only with your explicit consent. You may withhold answers, choose not to submit, or withdraw consent later (we will cease processing and delete where required).

5. Cookies & similar tech

We use a consent banner with Accept all / Reject all / Manage choices. Non-essential cookies (analytics/ads) only load after consent. See our Cookie Policy for details.

6. Sharing your data

  • Processors acting on our instructions (host/CDN, form/quiz provider, email service, analytics, anti-spam).
  • Authorities where required by law.
    We do not sell personal data.

7. International transfers

Where data is transferred outside the UK (e.g., EEA/US providers), we use lawful safeguards such as the ICO IDTAand/or UK Addendum to EU SCCs, plus vendor DPAs and security reviews.

8. Retention

  • Marketing & Early Access contact data: 24 months from last meaningful interaction or until you unsubscribe.
  • Quiz responses (linked to you): 12 months or until you create an account, then per app policy; earlier on request.
  • Consent records: 6 years.
  • Security logs: 12 months.
    Anonymised/aggregated data may be kept indefinitely.

9. Your rights

You can access, correct, delete, restrict, object, port your data, and withdraw consent at any time. Email privacy@sheiq.uk. We respond within one month.
Complaints: You may complain to the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, www.ico.org.uk. We invite you to contact us first.

10. Security

TLS in transit, restricted access (least privilege), vendor due diligence and incident response processes. If you suspect a security issue, contact privacy@sheiq.uk.

11. Children

The site is for 18+. We will delete any children’s data promptly if notified.

12. Changes to this notice

We will update this notice as our services evolve. The Effective date shows the latest version.