Legal

Privacy Policy

We are committed to protecting your privacy and being transparent about how we handle your information.

Last updated: May 8, 2026  •  Effective: May 8, 2026

1. Who We Are

CheckBodyMind operates the website checkbodymind.com (the “Site”). For questions about this policy, contact us at: support@checkbodymind.com.

2. What Information We Collect

2.1 Information You Provide

When you use our contact form, we collect:

  • Your name
  • Your email address
  • The content of your message

2.2 Assessment Data

When you take our body health assessment, your answers and score are processed entirely in your browser. We do not transmit or store your assessment responses on our servers. The score is temporarily held in your browser’s sessionStorage and is cleared when you close the tab.

2.3 Automatically Collected Information

When you visit the Site, our web server may automatically collect:

  • IP address (anonymized where technically possible)
  • Browser type and version
  • Operating system
  • Pages visited and time spent
  • Referring website URL
  • Date and time of access

2.4 Cookies

We use cookies and similar tracking technologies. Your cookie preferences are saved in your browser’s localStorage. See our Cookie Policy for full details.

3. How We Use Your Information

We use the information we collect to:

  • Respond to your contact form submissions
  • Analyze website usage to improve the Site (with your consent)
  • Maintain the security and integrity of the Site
  • Comply with our legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), UK, or Switzerland, our legal bases for processing your personal data are:

  • Consent (Art. 6(1)(a) GDPR): For analytics cookies and marketing tracking — only when you click “Accept All” in our cookie banner.
  • Legitimate Interests (Art. 6(1)(f) GDPR): For server logs and security purposes, where your interests do not override ours.
  • Contract (Art. 6(1)(b) GDPR): For processing your contact form message so we can respond to you.

5. Cookies & Analytics

We implement Google Consent Mode v2. By default, all non-essential cookies (analytics, advertising) are blocked until you provide consent via our cookie banner. You may withdraw consent at any time by clearing your localStorage (key: cbm_consent) or using your browser settings.

For full cookie details, see our Cookie Policy.

6. Data Retention

  • Contact form messages: Retained for up to 12 months after our correspondence is resolved, then securely deleted.
  • Server logs: Retained for up to 90 days for security and operational purposes.
  • Cookie consent preference: Stored in your browser localStorage until you clear it (no server-side storage).
  • Assessment data: Never stored on our servers. Cleared from your browser when the session ends.

7. Your Rights Under GDPR

If you are in the EEA, UK, or Switzerland, you have the following rights:

  • Right of access (Art. 15): Request a copy of personal data we hold about you.
  • Right to rectification (Art. 16): Request correction of inaccurate data.
  • Right to erasure (Art. 17): Request deletion of your personal data (“right to be forgotten”).
  • Right to restriction (Art. 18): Request we restrict processing of your data.
  • Right to data portability (Art. 20): Request your data in a machine-readable format.
  • Right to object (Art. 21): Object to processing based on legitimate interests.
  • Right to withdraw consent: Withdraw consent for cookie-based processing at any time.

To exercise any of these rights, email us at support@checkbodymind.com. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority (e.g., the ICO in the UK, or your relevant EU supervisory authority).

8. Third-Party Services

We may use the following third-party services (subject to your consent choices):

  • Google Analytics: Website analytics. Data processed in accordance with Google’s Privacy Policy. Only activated after consent.
  • Google Fonts: Loaded via Google’s CDN. Google may collect IP addresses for font delivery. See Google’s Privacy Policy.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmitted between your browser and our Site is encrypted using TLS (HTTPS).

10. Children’s Privacy

Our Site is intended for adults aged 18 and over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. International Transfers

If we transfer personal data outside the EEA, we ensure appropriate safeguards are in place (e.g., EU Standard Contractual Clauses) in accordance with GDPR Chapter V.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top. Continued use of the Site after changes constitutes acceptance of the revised policy.

13. Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact us: