Privacy Policy

This Privacy Policy explains how Wellcore (wellcore.fitness) collects, uses, stores, and protects your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and applicable South African data protection law. By using the Wellcore platform you consent to the practices described in this policy.

1. Who we are

Wellcore is a South African digital health and fitness platform operating at wellcore.fitness. We are the responsible party for the personal information we process. Contact us at health@wellcore.fitness with any privacy-related queries.

2. Information we collect

Category	Data collected	Purpose
Account and purchase data	Name, email address, purchase history, download activity	Process orders, deliver digital products, manage your account
Payment data	Payment is processed by PayFast. Wellcore does not store card or banking details.	Secure payment processing via third party
Trainer referral data	Name, email, phone number, gym name, province, referral code, sales data	Manage the PT affiliate programme and calculate commissions
Quiz and lead capture data	Email address, quiz answers, recommended plan outcome	Send product recommendations and email marketing sequences
Analytics data	Pages visited, session duration, conversion events via GA4	Understand site usage and improve the platform
Cookie data	Session cookies, AffiliateWP tracking cookies, GA4 analytics cookies	Platform functionality and analytics
Communications	Email or WhatsApp messages sent to us	Respond to queries and provide support

3. Lawful basis for processing

We process your personal information on the following lawful bases under POPIA:

• Contract: processing necessary to fulfil your purchase and deliver your digital product.
• Legitimate interest: analytics, platform improvement, and affiliate programme management.
• Consent: email marketing communications. You may withdraw consent at any time by unsubscribing.
• Legal obligation: where processing is required to comply with applicable South African law.

4. How we use your information

• Process and fulfil your digital product purchase.
• Deliver your secure download link to the email address you provided.
• Send order confirmation and account communications.
• Send marketing emails if you have opted in (with unsubscribe on every email).
• Manage and pay trainer affiliate commissions.
• Analyse platform usage to improve the user experience.
• Comply with legal and regulatory obligations.

5. How we share your information

Wellcore does not sell your personal information to any third party. We share information only with the following service providers who process data on our behalf:

Service provider	Purpose	Data shared
PayFast	Payment processing	Transaction data — card and banking details handled by PayFast directly
Klaviyo	Email marketing automation	Email address, purchase history, quiz outcome
Google Analytics (GA4)	Site analytics	Anonymised usage data and conversion events
WooCommerce / WordPress	Platform and order management	Name, email, purchase data
AffiliateWP	Trainer affiliate programme	Trainer name, email, referral code, commission data

6. Data retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, or as required by South African law. Purchase records are retained for a minimum of 5 years for financial record-keeping purposes. Marketing data is retained until you unsubscribe or request erasure.

7. Your rights under POPIA

You have the following rights regarding your personal information:

• Right of access: request a copy of the personal information we hold about you.
• Right to correction: request that inaccurate information be corrected.
• Right to erasure: request deletion of your personal information, subject to legal retention requirements.
• Right to object: object to the processing of your information for marketing purposes.
• Right to withdraw consent: withdraw consent for marketing communications at any time.

To exercise any of these rights, contact us at health@wellcore.fitness. We will respond within a reasonable time and no later than 30 days of receiving your request.

8. Cookies

Wellcore uses cookies to enable platform functionality, track affiliate referrals, and collect analytics data. A full list of cookies used is available in our Cookie Policy. You may manage cookie preferences through your browser settings or via the cookie consent tool on the site.

9. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. These include SSL encryption, secure password storage, restricted admin access, and regular security scanning via Wordfence. Payment data is handled entirely by PayFast and is never stored on Wellcore servers.

10. Contact and complaints

For any privacy-related queries or to exercise your POPIA rights, contact us at health@wellcore.fitness. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa at www.inforegulator.org.za.