Privacy Policy

McWellness (“we”, “us”, “our”), founded by Shauna McGuinness, respects your privacy and is committed to protecting your personal data. McWellness L.L.C-FZ, Meydan Free Zone, Dubai, business licence 2648591.01, is the controller of your personal data. This Privacy Policy explains how we collect, use and safeguard your information when you contact us or use our services, in line with applicable UAE data protection law (Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data).

Information We Collect

When you make an enquiry or book a consultation, we may collect personal details you choose to provide, such as your name, phone number and email address.

During consultations and sessions, you may share information about your wellbeing, goals and circumstances. This information is treated as confidential.

Our website does not currently use advertising or analytics cookies. If this changes, this policy will be updated.

The McWellness practice system

If you become a client, our practice system (app.mcwellnessuae.com) holds two kinds of information about you, and we treat them differently.

Your ordinary details. Your name and contact details, your date of birth, the address we visit and how to find it, the agreements you sign, your appointments, and what you have paid. For a child, the parent’s or guardian’s name and contact details too. Booking, visit and payment records, including the invoices and receipts we are required to issue, are kept as part of our books.

Your health information. Your session records: the sensor readings, any brain map (QEEG) and the reports written from it, the health answers you gave us, and the ratings you give before and after a session. This is more sensitive than the rest, so we ask for it separately and you agree to it separately, as described under “Your brain-map and neurofeedback information” below.

We take no photographs. We do not photograph clients or their sessions, and the practice system has no way to do so.

App data is stored on secure cloud infrastructure provided by Supabase, currently hosted outside the UAE (Mumbai, India), encrypted in transit and protected by row-level access controls: each household can only ever read its own records. The servers that answer the system are provided by Hostinger, also in Mumbai, India. Google Maps receives only the map coordinates of a visit address when the practitioner sets off, never a name. When we send you an invoice or a receipt by WhatsApp, the message goes from the practitioner’s own phone; nothing is sent from our system. The app itself contains no analytics, no trackers and no advertising identifiers.

You may ask us at any time to see, correct or delete your information, or to withdraw an agreement. Deleting removes your personal details; invoices, and a note that a deletion happened, are kept without them, as described under Data Retention.

How We Use Your Information

We use the information you provide to:

• Respond to your enquiries
• Arrange, provide and personalise your sessions
• Maintain appropriate and secure records
• Communicate with you about your care
• Issue invoices and receipts and keep the records UAE tax law requires

Confidentiality

Information shared during consultations and sessions is kept private and secure.

We will not share your personal information without your consent, except where required by law.

Your brain-map and neurofeedback information

What we collect. The sensor readings taken during a session — your brain’s own electrical activity, picked up from the scalp. A brain map (QEEG) where one is made. The reports we write from them. The health answers you gave us, and the ratings you give before and after a session.

Why. To set your training up safely, to choose what each session works on, and to see whether it is helping.

How we use it. To plan, deliver and review your own sessions, and to write your own reports. That is all.

How we will not use it. We do not sell it. We do not use it for advertising. We do not use it for research. We do not use it for anything unrelated to your sessions. If that ever changes we will ask you first, separately, and you may say no.

Who can see it. Your practitioner, and the practice’s staff where their job needs it. For a client under eighteen, the parent or guardian who signs. Nobody else — not a school, not an employer, not another family member — unless you tell us so in writing, or the law requires it, or we believe someone is in serious danger.

Where it is kept, and for how long. In our own system, hosted in Mumbai, India, as described above. At least five years after your last session or contact with us, and possibly longer; we do not delete it on a timer, and you may ask us to delete it at any time.

Your rights over it. Ask to see it, ask us to correct it, ask us to delete it, or withdraw your agreement at any time — which means we stop collecting it, and sessions cannot continue, because there would be nothing to train on. None of this costs you anything and none of it changes how we treat you.

Children

For a client under eighteen, a parent or legal guardian signs the agreement and may see the child’s record. Nobody else does, including a school, without the parent’s separate written permission.

Sharing Your Information

We never sell your personal information. We never use it for advertising. We never use it for research. We never use it for anything unrelated to your sessions and your account with us. If that ever changes we will ask you first, separately, and you may say no.

We may use trusted service providers (for example, secure website hosting) who process limited data on our behalf and are required to keep it secure.

Data Retention

We keep personal information only for as long as necessary for the purposes described in this policy, or as required by law.

Session records are kept for at least five years after your last session or contact with us, and may be kept for longer — we do not delete them on a timer. You may ask us to delete your information at any time, and we will delete everything the law allows us to. Invoices and receipts must be kept for five years, as UAE tax law requires.

Your Rights

Subject to applicable law, you may have the right to access, correct or request deletion of your personal data, to withdraw consent, and to complain to the UAE Data Office.

To exercise any of these rights, please contact us using the details below.

Security

We take reasonable organisational and technical measures to protect your personal information against loss, misuse or unauthorised access.

Cookies & Third-Party Services

This website uses self-hosted fonts and does not load third-party font services. We do not use advertising or analytics cookies. Form submissions are processed by our secure form provider (Web3Forms) solely to deliver your enquiry to us. A copy of your enquiry is filed in the practice’s own system so that we can call you back.

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.

Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us at info@mcwellnessuae.com or +971 55 586 4039.