Notifications (Click to mark read)
Controller: Wisdom of Gaia Ltd ("we", "us", "our")
Controller representative: David Relf
Registered office: 14/2e Docklands Business Centre, 10–16 Tiller Road, London, England, E14 8PX
Company status/type: Active — Private limited company (incorporated 19 September 2025)
Website: https://wisdomofgaia.com/
Privacy contact: [email protected]
ICO registration number: [add ZA-number once issued]
When you use Sign in with Google, we only access your basic profile information (name and email address). We do not store your Google password, we do not access Google Drive or other Google apps, and we never sell or share your Google data with third parties. Full detail is provided in Section 4 below. Our use of Google user data adheres to the Google API Services User Data Policy, including the Limited Use requirements.
This notice explains what personal data we collect, why we collect it, how we use it, who we share it with, how long we keep it, and the rights available to you under the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) where applicable, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and applicable US state privacy laws (including the California Consumer Privacy Act as amended by the California Privacy Rights Act, "CCPA/CPRA", and comparable laws in other US states). It applies to all visitors and account holders of wisdomofgaia.com and any associated apps or subdomains.
Special category data: we do not intentionally collect special category data (e.g. health, religious belief, sexual orientation) as defined by UK/EU GDPR. Please avoid submitting sensitive information about yourself in free-text fields (such as journal entries) unless you specifically intend to and understand this is at your own discretion.
We offer "Sign in with Google" as an optional way to create an account or log in. If you choose this option, here is exactly what we access, how we use it, who (if anyone) sees it, how we protect it, and how it is deleted:
What we access: your Google account's name, email address, and basic profile information, via the openid, email, and profile scopes only. We do not request or access your Google Drive, Gmail, contacts, calendar, photos, or any other Google service or data.
How we use it: solely to create or match your Wisdom of Gaia account, authenticate you on return visits, and pre-fill your name and email on your profile. We do not use Google user data for advertising, ad targeting, or to build a profile of you for any purpose unrelated to providing the Wisdom of Gaia service you signed up for.
Who we share it with: your Google-sourced name and email are stored in the same secure database as all other account data (Section 6) and are visible only to our own systems for the purpose of running your account. Your email address may be passed to our transactional email provider, Brevo, solely to send you service emails (e.g. sign-in confirmations, account notifications) — never for third-party marketing. We do not sell, rent, or transfer Google user data to any third party for advertising, market research, or any purpose beyond operating and improving the Wisdom of Gaia service you use. We do not permit any third party to use Google user data for purposes other than providing or improving Wisdom of Gaia's functionality.
How we protect it: Google-sourced account data is encrypted in transit (HTTPS/TLS) and stored in our access-controlled database alongside your other account data, protected by the same measures described in Section 13 (least-privilege access, security logging, and no storage of your Google password, which we never see).
Retention & deletion: your Google ID and linked profile data are retained for as long as your Wisdom of Gaia account remains active. If you delete your account or ask us to unlink Google Sign-In, we delete or irreversibly disassociate this data from your account within 30 days, following the same process described in Section 8, except where we are legally required to retain limited records (e.g. transaction history for tax purposes).
Wisdom of Gaia Ltd's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We use vetted processors who act only on our instructions. These currently include:
We require appropriate contractual and security measures (such as Data Processing Agreements) from each processor. We do not sell your personal data to third parties, we do not share it for cross-context behavioural advertising, and — specifically regarding data received via Google Sign-In — we do not transfer it to any third party for any purpose beyond providing or improving Wisdom of Gaia's own functionality (see Section 4 for full detail on Google user data specifically).
Some of our processors (including Google, Stripe, Cloudflare, and Brevo) may process data outside the UK, including in the EEA and the United States. Where this occurs, we rely on approved safeguards such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, EU Standard Contractual Clauses (where EU GDPR applies), or equivalent adequacy protections, together with appropriate technical and organisational measures.
You can request the complete deletion of your account and all associated data — including any data received via Google Sign-In — at any time by emailing [email protected]. Upon request, we will permanently delete or anonymize your data within 30 days, except where we are legally required to retain specific records (e.g. transaction history for tax purposes).
How to request deletion:
Under UK GDPR (and EU GDPR, where it applies to you), you have the right to: access your data; rectify inaccurate data; request erasure; restrict processing; object to processing based on legitimate interests or for direct marketing; request data portability; and withdraw consent at any time where processing is based on consent. To exercise these rights, email [email protected]. We will respond within one month (extendable by a further two months for complex requests, with notice to you). You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with your local EU supervisory authority if applicable.
If you are a resident of California or another US state with a comparable privacy law, you may have the right to: know what personal information we have collected about you and how it has been used and shared; request deletion of your personal information (subject to certain exceptions); correct inaccurate personal information; opt out of the "sale" or "sharing" of personal information (we do not sell or share personal information for cross-context behavioural advertising); and not be discriminated against for exercising these rights. To exercise these rights, email [email protected]. We will verify your request using the email address associated with your account before acting on it.
Our services are intended for users aged 18 and over. We do not knowingly collect personal data from children under 13 (or the relevant minimum age in your jurisdiction). If you believe a child has provided us with personal data without appropriate parental or guardian consent, please contact us at [email protected] and we will investigate and delete such data promptly where appropriate.
We do not use your personal data for any automated decision-making or profiling that produces legal or similarly significant effects on you.
We use technical and organisational measures including HTTPS/TLS encryption, access controls, salted password hashing, least-privilege database access, and security logging. No online service can be guaranteed 100% secure, but we work continuously to protect your data and to detect and respond to potential incidents.
Where data could be considered sensitive — including data received via Google Sign-In, payment metadata, and personal journal or community content you submit — we apply additional safeguards: this data is never stored in plain text where encryption is feasible, access is restricted to systems and personnel who need it to operate the service, and we do not use it to train third-party AI models or share it with data brokers.
We use essential cookies to operate the site (e.g. keeping you signed in). With your consent, we use additional cookies for analytics and, where applicable, marketing. You can change your choices at any time via Cookie settings.
We may update this notice from time to time to reflect changes in our practices or in applicable law. We will post changes here and update the effective date below. Material changes will be highlighted where appropriate.
Effective date: October 3, 2026
