HEALTHILY RESEARCH PRIVACY POLICY
(April 2026)
Healthily is acting as a data controller in regard to your data.
How Healthily uses your data
Please remember that the purpose of the Research is not to get information about your health, but to get your feedback and gather information about how you manage your health.
Please make sure you do not provide any personal information, including health information, while completing the Questionnaire. Your identification is not necessary to perform the Research, so please do not provide any information that may allow us to identify you.
Legal basis. We process your data on a contract performance basis, and we are relying on consent when processing health data.
Purposes of Data Processing
To develop and improve Healthily Services
Research data. Your questionnaire responses. Healthily will use your responses to create aggregated reports about your responses and feedback (the “Reports”), and use this data for the development and improvement of the Healthily Service.
Your Rights
As a data subject, you have the following rights:
-
to request information about the processing of your data, as well as to receive a copy of your personal data. Among other things, you may request information on the purposes of the processing, the categories of personal data processed, the recipients of the data (if a transfer is made), the duration of the storage or the criteria for determining the duration;
-
to receive personal data relating to you in a structured, common and machine-readable format or to transfer it to another person in charge;
-
to correct your data. If your personal data is incomplete, you have the right to complete the data, taking into account the purposes of the processing;
-
to have your data deleted or blocked;
-
to have the processing restricted;
-
to object to the processing of your data;
-
to revoke your consent to the processing of your data for the future; and
-
to complain to the responsible supervisory authority about unauthorised data processing.
You can exercise your rights by sending an email to privacy@healthily.ai, with the subject: Healthily Research.
Who has access to your data?
Your data will be processed by Healthily employees and contractors and third-party service providers engaged by Healthily for the Research Purpose:
Attest - consumer research platform (Attest Technologies Limited, 25 Worship Street, London, England, EC2A 2DX, UK).
We use Attest to create, host, and administer questionnaires and to collect and analyse responses. Attest processes personal data on our behalf as a data processor for the purpose of providing its research services, including questionnaire delivery, response collection, and analytics. This processing is carried out in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), and is governed by appropriate contractual arrangements.
Participants are typically assigned a unique identifier (e.g. a respondent ID), which enables the operation of the questionnaire and analysis of responses. We generally receive responses in a pseudonymised form and do not receive directly identifying information.
Where participants are recruited through Attest’s own panel, Attest may act as an independent data controller in relation to panel management and participant recruitment. In such cases, Attest is responsible for ensuring a lawful basis for processing and for providing relevant privacy information to participants.
Attest is required to implement appropriate technical and organisational measures to safeguard personal data, including access controls, security measures, and confidentiality obligations.
For further information on how Attest processes personal data, please read Attest's Privacy Policy for more info.
Storing, Security and Transfers
Storing.
Attest
Participant responses are collected and stored within the Attest platform on secure cloud infrastructure operated by Attest and its subprocessors. Attest processes such data on our behalf and in accordance with the data processing agreement.
Healthily stores reports created based on your responses and writes summaries about your responses within Figma, Confluence and Google Docs.
Figma - a collaborative design tool, owned by Figma Inc. 760 Market Street, Floor 10, San Francisco, California 94102, USA.
Confluence - a collaboration and documentation tool, owned by Atlassian Corporation plc, Exchange House, Primrose Street, London, EC2A 2EG, United Kingdom.
Google Docs/Slides - cloud-based productivity tools from Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, United States.
Healthily will store your data for as long as needed to perform the Research Purpose.
Security.
Please make sure you do not provide any personal information while completing the Questionnaire. Your identification is not necessary to perform the Research, so please do not provide any information that may allow us to identify you.
Healthily will only process the data you agree to insert into the Questionnaire, and only you decide how much information you want to share.
Transfers.
Data is being transferred to countries outside the United Kingdom and the European Economic Area. Healthily only transfers personal data to third countries where the ICO and the EU Commission have confirmed an adequate level of protection or where we can ensure the careful handling of personal data by means of contractual agreements or other suitable guarantees, such as certifications or proven compliance with international security standards, which you can review on request.
General
Should you have any privacy-related questions, please contact Healthily at privacy@healthily.ai. If Healthily is not able to help, will forward your enquiry to our External Data Protection Officer (DPO), ePrivacy GmbH, represented by Prof. Dr. Christoph Bauer, Große Bleichen 21, 20354 Hamburg. Should you have any concerns or complaints that our DPO is not able to resolve, you have the right to lodge a complaint with our supervisory authority Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Kurt-Schumacher-Allee 4, 20097 Hamburg. If you are a UK customer, you can lodge a complaint with the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Our EU Representative is ePrivacy Holding GmbH, Große Bleichen 21, 20354 Hamburg, Germany. For more information, click https://www.eprivacy.eu/en/legal.
