Privacy Policy

Last updated: 17 October 2026

Introduction

Core Health ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our website at corehealthhq.com and related services.

Who We Are

Core Health is a trading name of JG Core Ltd, a company registered in England and Wales (company number 16218779). Registered office: c/o Burton Varley Ltd, The Counting House, 24 Richmond Road, Bowdon, Altrincham, England, WA14 2TT. JG Core Ltd is the data controller for the personal data described in this policy and is registered with the Information Commissioner's Office (registration number ZC079115). Contact us about your data at joshua@jgcore.com.

Data We Collect

We may collect the following information:

  • Account information: Name, email address, and password when you create an account.
  • Purchase data: Order history, billing address, and payment details (processed securely via Stripe; we never store card numbers).
  • Usage data: Pages visited, features used, quiz responses, saved workouts, and calculator inputs.
  • Device data: Browser type, operating system, IP address, and referring URL.
  • Contact form submissions: Name, email, and message content when you reach out to us.
  • Emails you send us: If you email any corehealthhq.com address, including replies to our emails: your message, your email address and name as sent, and any attachments.

How We Use Your Data

  • To deliver digital products and manage your account.
  • To personalise your experience (e.g., quiz recommendations, saved preferences).
  • To process payments and issue refunds.
  • To send transactional emails (order confirmations, password resets).
  • To improve our products and content based on aggregate usage patterns.
  • To respond to support enquiries.

We will only send marketing emails if you have explicitly opted in. You can unsubscribe at any time.

Legal Basis (GDPR)

We process your data under the following legal bases:

  • Contract: To fulfil purchases and deliver services you've requested.
  • Legitimate interest: To improve our platform, prevent fraud, and ensure security.
  • Consent: For marketing communications and non-essential cookies.

Cookies

We use essential cookies to keep the site functional and optional analytics cookies to understand usage patterns. See our Cookie Policy for full details.

To count real visitors (rather than automated traffic), a small script on our pages sends one message after you have been on a page for a few seconds or scrolled, tapped or typed: the page path and the website you came from. We count unique visitors per day with a one-way code made from your IP address and browser that changes every day and cannot be reversed. No cookies are set, nothing is stored on your device, and IP addresses are not stored.

Third-Party Services

We share data with these trusted providers only as needed:

  • Stripe: Payment processing. Stripe also holds your order record (what you bought, when, and your email address).
  • Resend: Sending order confirmations and emails you sign up for.
  • Vercel: Website hosting.
  • Amazon Web Services: Receiving the emails you send us and storing them encrypted, in London. JG Core Ltd holds the key.
  • Google Analytics: Visit statistics, loaded only if you accept analytics cookies.
  • Our own request log: For each page request: the page, the type of browser or bot, and approximate location (country, region, city). No cookies, and stored on a server we operate.
  • Visit counts: We count visits without cookies: a small script from JG Core Ltd (jgcore.com) records the page, the referring site and a daily-rotated, irreversible code so a visit isn't counted twice. Nothing is stored on your device. Lawful basis: legitimate interests. Your browser's Global Privacy Control or Do Not Track setting turns it off.

We do not sell your personal data to any third party.

Your Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct any inaccurate or incomplete data.
  • Delete your data ("right to be forgotten").
  • Restrict or object to processing.
  • Data portability: request your data in a machine-readable format.
  • Withdraw consent at any time for consent-based processing.

To exercise any of these rights, email us at joshua@jgcore.com. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Data Retention

We keep your account data for as long as your account is active. Purchase records are retained for 7 years for tax and legal compliance. Emails you send us are kept for 12 months from receipt, then deleted, unless they become an order or a support case, which follow the retention above. You may request deletion of your account at any time.

Security

We use HTTPS encryption, secure authentication, and follow industry best practices to protect your data. Payment processing is handled entirely by Stripe, a PCI-DSS Level 1 certified provider.

Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or a notice on our website.

Contact

For privacy-related enquiries, contact us at joshua@jgcore.com.

Related Policies