Privacy Policy

Last updated: January 2026

At Well Health Hubs, operated by Innovative Healthcare Holdings Ltd. ("Well", "we", "us", or "our"), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Mauritius Data Protection Act 2017 ("DPA 2017").

By using our website or providing us with your personal data, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for your personal data is:

  • Company Name: Innovative Healthcare Holdings Ltd.
  • Registered Address: Port-Louis, Mauritius
  • Registration Number: 220297
  • Contact Email: info@joinwell.care

2. Personal Data We Collect

2.1 Data You Provide to Us

When you contact us through our website contact form, we collect:

  • Name
  • Email address
  • Message content

2.2 Data Collected Automatically

When you visit our website, we may automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent on pages
  • Referring website addresses
  • Cookies and similar tracking technologies (with your consent)

3. Purpose of Processing

We process your personal data for the following purposes:

  • Responding to Inquiries: To respond to your messages and inquiries submitted through our contact form
  • Website Analytics: To understand how visitors use our website, improve user experience, and analyze website performance (only with your consent)
  • Legal Compliance: To comply with applicable laws and regulations, including the Mauritius Data Protection Act 2017
  • Website Functionality: To ensure our website functions properly and securely

Important: We do not use your personal data for marketing communications or share it with third parties for marketing purposes.

4. Legal Basis for Processing

Under the Mauritius Data Protection Act 2017, we process your personal data based on:

  • Express Consent: When you provide your personal data through our contact form, you give express consent for us to process it to respond to your inquiry. For non-essential cookies (such as analytics), we obtain your express consent before processing.
  • Legitimate Interests: For essential website functionality and security purposes, we process data based on our legitimate interests in operating a secure and functional website.
  • Legal Obligation: We may process data to comply with legal obligations under Mauritian law.

5. Third-Party Services and Data Sharing

We use the following third-party services to help us operate our website and process your data:

Google Tag Manager and Google Analytics

We use Google Tag Manager and Google Analytics to analyze website usage and improve our services. These services collect anonymized data about your website visits. This data is processed only with your express consent for analytics cookies. Google's privacy policy can be found at https://policies.google.com/privacy.

HubSpot

We use HubSpot to store and manage contact form submissions. When you submit our contact form, your data (name, email, and message) is stored in HubSpot. HubSpot's privacy policy can be found at https://legal.hubspot.com/privacy-policy.

Data Sharing: We do not sell, rent, or share your personal data with third parties for marketing purposes. We only share data with the service providers listed above, who are bound by contractual obligations to protect your data.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Contact Form Data: We retain contact form submissions for up to 3 years from the date of submission, or until you request deletion, whichever comes first.
  • Analytics Data: Analytics data is retained according to Google Analytics' retention policies (typically 26 months).
  • Cookies: Cookie retention periods vary by type and are detailed in our Cookie Policy section below.

7. Your Rights Under the Mauritius Data Protection Act 2017

Under the Mauritius Data Protection Act 2017, you have the following rights regarding your personal data:

7.1 Right of Access

You have the right to request access to the personal data we hold about you, including information about how we process it.

7.2 Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

7.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw your consent.

7.4 Right to Object

You have the right to object to the processing of your personal data in certain circumstances, particularly for purposes beyond what is necessary for our legitimate interests.

7.5 Right to Withdraw Consent

Where we process your data based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

How to Exercise Your Rights

To exercise any of these rights, please contact us at info@joinwell.care with your request. We will respond to your request within 30 days, in accordance with the Mauritius Data Protection Act 2017. We may need to verify your identity before processing your request.

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using SSL/TLS protocols
  • Secure hosting and storage infrastructure
  • Access controls and authentication measures
  • Regular security assessments and updates
  • Contractual safeguards with third-party service providers

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

9. Cookie Policy

Our website uses cookies and similar tracking technologies. You can control cookie preferences through our cookie consent banner or by accessing cookie settings in the website footer.

9.1 Essential Cookies

These cookies are necessary for the website to function properly and cannot be disabled. They are typically set in response to actions you take, such as setting privacy preferences or filling in forms.

These cookies do not require your consent under Mauritius DPA 2017.

9.2 Analytics Cookies

We use Google Analytics cookies to understand how visitors interact with our website. These cookies collect information anonymously, including the number of visitors, pages visited, and time spent on pages.

  • Purpose: Website analytics and performance improvement
  • Provider: Google Analytics
  • Retention: Up to 26 months
  • Consent Required: Yes (express consent required)

Managing Your Cookie Preferences

You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the website footer. You can also manage cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

10. International Data Transfers

Some of our third-party service providers (such as Google and HubSpot) are located outside Mauritius. When we transfer your personal data to these providers, we ensure appropriate safeguards are in place, including:

  • Contractual clauses requiring data protection standards
  • Verification that providers comply with applicable data protection laws
  • Use of providers subject to contractual safeguards and recognized international data protection standards.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

  • Update the "Last updated" date at the top of this policy
  • Notify you of significant changes via email (if we have your contact information) or through a notice on our website
  • Obtain your consent for any material changes where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, or if you wish to exercise your rights under the Mauritius Data Protection Act 2017, please contact us:

Email: info@joinwell.care

Data Controller: Innovative Healthcare Holdings Ltd.

Address: Port-Louis, Mauritius

Registration Number: 220297