Privacy & Cookie Policy

Last updated: 27 August 2026

Who we are and what this policy covers

This website, highestpotential.ie, is operated by HP Holistic Ltd. It presents services and initiatives associated with Highest Potential, Health Matters and WellZones.

HP Holistic Ltd is the data controller for personal data collected directly through this website and the WellZones engagement system.

This policy explains what information we collect, why we collect it, how it is used and protected, the role of cookies and similar technologies, and the data-protection rights available to website visitors.

Information we collect

Information you provide directly

When you contact us, make an enquiry, complete a form, create an account, make a booking or purchase, or otherwise communicate with us, we may receive information such as your name, email address, telephone number and the contents of your message. If you voluntarily include health-related or other sensitive information, we will use it only where necessary to respond to your enquiry or provide the requested service.

Technical website information

Wix and relevant service providers may process technical information required to operate, secure and maintain the website. This may include an IP address, browser or device information, page activity, dates and times, security logs, and cookie or consent preferences.

WellZones engagement information

When a WellZones QR code or digital asset is accessed, the system records engagement information such as the Asset ID, Content ID and title, campaign, theme, scan time, content URL, media type, video engagement duration, completion percentage and interactions with supporting links or documents.

Ordinary WellZones engagement records are not connected to a visitor’s name, email address or contact details.

Where a visitor gives Analytics consent, WellZones also creates a randomly generated pseudonymous browser identifier. This allows the system to estimate whether that browser is accessing WellZones for the first time or returning, its scan number and the time of its previous recognised scan. It is a browser-recognition measure and does not establish the identity of a particular person.

How and why we use information

We use information only for specified purposes and where an appropriate legal basis applies.

We may use information to:

• respond to enquiries and take steps requested before providing a service;

• manage appointments, services, accounts, purchases and communications;

• fulfil contractual commitments;

• meet legal, accounting, taxation, insurance and regulatory obligations;

• operate, maintain and protect the website, prevent misuse and resolve technical problems;

• understand aggregate use of WellZones and evaluate which assets, themes and content receive engagement; and

• measure first-time and returning recognised-browser engagement where Analytics consent has been given.

Depending on the circumstances, our legal basis may be performance of a contract, taking steps at your request before entering a contract, compliance with a legal obligation, our legitimate interests in operating and improving our services, or your consent.

Non-essential cookies, similar browser technologies and the WellZones pseudonymous returning-browser identifier are used only with Analytics consent. Consent may be refused or withdrawn through the website’s privacy settings. Withdrawal does not affect processing that was lawfully carried out before consent was withdrawn.

Please avoid including detailed medical or other sensitive information in the website’s general contact form. Where health information is required to provide a clinic or wellbeing service, it will be requested and managed separately using appropriate safeguards and a lawful basis.

Cookies and similar technologies

This website uses cookies, browser storage and similar technologies. Some are essential for the website to function securely and remember privacy choices. Essential technologies may operate without consent where they are strictly necessary to provide the website or a service requested by the visitor.

Usercentrics for Wix manages the website’s consent banner and records visitors’ cookie and tracking preferences. Non-essential technologies are categorized according to their purpose, such as Analytics, Functional or Advertising, and should load only when the relevant consent has been given.

Depending on the pages and features used, services may include Wix components and analytics, Google Tag services, YouTube, Google Maps, SoundCloud and other embedded content. Some embedded services may remain blocked or display a placeholder until the required consent is provided.

WellZones returning-browser measurement uses first-party local browser storage. After Analytics consent, a random pseudonymous identifier beginning with “WZV_” is stored in the visitor’s browser. This identifier is used to link engagement records from that browser and estimate first-time and returning use. It does not contain a name, email address or telephone number.

Visitors can accept, refuse or manage non-essential categories through the consent banner and can reopen the privacy settings using the privacy trigger displayed on the website. Refusing non-essential cookies does not prevent access to ordinary WellZones content. Browser settings may also be used to delete stored cookies and local browser data.

Service providers and data sharing

We do not sell personal data.

We use trusted service providers where necessary to operate the website and provide its features.

These may include:

• Wix, which provides website hosting, content management, forms, databases and related website services;

• Usercentrics, which provides cookie and consent-management services;

• Google services, including YouTube, Google Maps and tag or analytics services where enabled;

• SoundCloud and other providers of embedded content;

• booking, payment, communications, accounting or professional service providers where relevant; and

• public authorities or legal advisers where disclosure is required by law or necessary to establish, exercise or defend legal rights.

These providers may process limited information on our behalf or as separate data controllers under their own privacy terms.

WellZones customers, funders, venue operators and project partners may receive aggregated engagement reports showing measures such as scans, content engagement and estimated first-time or returning use. Reports should not contain names, contact details or individual browser identifiers unless a separate lawful arrangement and clear purpose have been established.

Some technology providers may process information outside Ireland or the European Economic Area. Where a transfer of personal data takes place, we rely on the safeguards provided by applicable data-protection law and the relevant service provider’s contractual and privacy arrangements.

How long we retain information

We retain personal and pseudonymous information only for as long as reasonably necessary for the purposes described in this policy, including meeting legal, accounting and reporting obligations.

Pseudonymous WellZones engagement records, including anonymous browser identifiers used to estimate first-time and returning engagement, will normally be retained for no longer than 24 months. At the end of the applicable retention period, these records will be deleted or anonymised so that they can no longer be associated with a recognised browser.

Temporary exports containing pseudonymous information will be stored securely, used only to prepare or verify reports, and deleted when that work is complete.

Aggregated reporting information that does not contain browser identifiers or individual engagement histories may be retained for longer periods. These anonymised statistics may be used to assess engagement, evaluate projects, support funding applications and provide reports or secure dashboard access to participating organisations.

Enquiries, correspondence and administrative records will be retained only for as long as necessary to respond, manage the relevant relationship and comply with any applicable legal or financial record-keeping requirements.

How long we retain information

We retain personal and pseudonymous information only for as long as reasonably necessary for the purposes described in this policy, including meeting legal, accounting and reporting obligations.

Temporary exports containing pseudonymous information will be stored securely, used only to prepare or verify reports, and deleted when that work is complete.

International data transfers and security

Some of the service providers used to operate this website and deliver WellZones content may process information outside Ireland or the European Economic Area. Where personal data is transferred internationally, we require the relevant provider to use an appropriate legal transfer mechanism, such as an adequacy decision or approved contractual safeguards, where required by data-protection law.

We take reasonable technical and organisational measures to protect information against unauthorised access, alteration, disclosure, loss or misuse. These measures include restricting access to engagement records, limiting customer reporting to aggregated information and preventing clients from accessing anonymous browser identifiers or individual engagement histories.

Although reasonable safeguards are applied, no website, electronic transmission or storage system can be guaranteed to be completely secure.

Your data-protection rights

Depending on the circumstances and the legal basis for processing, you may have the right to:

• request access to personal data held about you;

• request correction of inaccurate or incomplete information;

• request deletion of your personal data;

• request restriction of processing;

• object to certain types of processing;

• request transfer of information you provided in a suitable electronic format; and

• withdraw consent at any time where processing is based on consent.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn. You can change or withdraw your cookie choices at any time using the privacy-settings icon displayed on the website.

WellZones browser identifiers are pseudonymous and are not connected to a visitor’s name or contact details. We may therefore be unable to identify which engagement records relate to you unless you can provide sufficient information to locate the relevant records.

These rights are not absolute and may be subject to conditions or exemptions under applicable data-protection law. Requests can be made using the contact details provided below.

Contact and complaints

HP Holistic Ltd, operating the Highest Potential website and WellZones, is the data controller responsible for the processing described in this policy.

Data-protection enquiries or requests can be directed to:

Neil Dennehy
HP Holistic Ltd
Clonmel, Co. Tipperary, Ireland
Email: highestpotential22@gmail.com
Telephone: +353 87 629 3729

Please identify your correspondence as a data-protection enquiry and provide sufficient information for us to understand and respond to your request.

If you are dissatisfied with how your personal data has been handled, you have the right to raise a concern or make a complaint to:

Data Protection Commission
6 Pembroke Row
Dublin 2
D02 X963
Ireland
Website: www.dataprotection.ie

We would appreciate the opportunity to address your concern directly, but you are not required to contact us before approaching the Data Protection Commission.

Changes to this policy

We may update this Privacy and Cookie Policy periodically to reflect changes to our services, data-processing activities, service providers or legal obligations.

The revised policy will be published on this page and the “Last updated” date at the top of the page will be changed accordingly. We encourage visitors to review this policy periodically.

Where a change materially affects processing based on consent, visitors may be asked to review and confirm their cookie or privacy choices again.