Privacy policy

Who we are

We are Verified Wellness Spaces (verifiedwellnessspaces.com) (“we”, “us”). We are the controller of the personal information described here.

Human Garage Certified Spaces issues the seal.

This site reports that mark and does not grant it.

For anything about your personal information, email jordan@verifiedwellnessspaces.com.

The short version

• You can read the whole site without giving us anything.
• Our code sets no cookies. We run no advertising scripts, social media pixels or cross-site tracking. The one script we load from another company is Cloudflare Web Analytics, which counts page views without cookies.
• Your profile, shortlist and stay log stay in your own browser. We never receive them.
• Apart from the technical data every website receives (see section 6), we only get personal information when you send it to us: through a form or by email.
• We take no payments on this site.

What we collect, and why

1. Updates signup

When you sign up for updates, the form saves your email address and, if you choose to give it, your name, privately in our Cloudflare database. Signups made before 11 October 2026 were collected on Jotform’s site.

• Why: to email you when records publish or change, and about Verified Wellness Spaces.
• Legal basis: your consent. You can withdraw it at any time by emailing jordan@verifiedwellnessspaces.com.
• Kept: for up to 24 months, or until you ask us to remove it, then removed within 30 days.

2. Claiming or correcting a property listing

When a property claims or corrects its listing, the form, which opens on Jotform’s site, collects the contact details the person enters, the property’s details and any documents or test results they choose to attach. The same page also offers to open an email to us instead, already addressed and filled in with the listing’s name and questions.

• Why: to check that the person speaks for the property, to update the record and to reply.
• Legal basis: our legitimate interest in keeping the index accurate and answering properties. Where the property is entering a contract with us, taking steps towards that contract.
• Kept: the contact’s details for as long as we deal with the property, and for 24 months after the last contact. Evidence a property supplies and we cite on a record is kept as part of the public record’s history, without the contact’s personal details.

3. Assessment property check forms

Properties preparing for a Human Garage Certified Spaces (HGCS) assessment fill in property check forms, hosted by Jotform, that we send them directly. They are not linked from this site. These forms collect names, email addresses, phone or WhatsApp numbers, postal addresses, photographs and details about the property.

• Why: to prepare and carry out an assessment and to talk to the property about it.
• Legal basis: taking steps at the property’s request before a contract, and performing that contract. For contacts who are not the contracting party, our legitimate interest in running the assessment.
• Kept: for the life of the certification and 6 years after it ends, because assessment records back up a published seal. Contact details that are no longer needed are deleted sooner on request.
• Please do not include photographs of guests or staff who have not agreed to be photographed.

4. Email

If you email us at jordan@verifiedwellnessspaces.com, corrections@verifiedwellnessspaces.com or reply@verifiedwellnessspaces.com, we receive your email address, name and whatever you write or attach.

• Why: to reply, to handle a correction or a property’s right of reply, and to keep a record of changes to the index.
• Legal basis: our legitimate interest in answering you and keeping the index accurate.
• Kept: 24 months from the last message in the conversation. Where a correction changes a record, we keep what was changed and why, but not your personal details unless you ask to be named.

5. Your profile, shortlist and stay log, stored only in your browser

The membership page lets you write a profile (name, work, bio, who referred you, interests), save properties to a shortlist and log stays. The site also remembers, in your browser, whether you have seen the membership invitation and which listing you chose in the owner portal.

• This is saved with your browser’s local storage on your device. It is never sent to us, and we cannot see it.
• It does not sync between devices. The delete option on your profile page removes the profile. Clearing this site’s data in your browser removes all of it.
• Because we never receive it, we cannot access, correct or delete it for you. You control it directly.

The space check

The space check works in the open page. Until you save or start again, your answers and your place in the check are kept in your browser’s local storage, so a reload does not lose them. That copy is never sent to us. We receive your answers only when you choose to save an enquiry. At that point we collect your email, any name, property name or website you provide, your room answers and qualification details, the recommended next step and your contact and updates permissions. These are stored privately in our Cloudflare database, rather than sent to Jotform.

• Why: to review your enquiry and reply about the space, education, listing or assessment you asked about.
• Permission: permission to reply is required to save an enquiry. Occasional updates are a separate, optional choice.
• Kept: for up to 24 months from the enquiry. You can ask us to access, correct or remove it by emailing jordan@verifiedwellnessspaces.com.

Quiz answers do not become a public property record and do not give access to a private property dashboard. No medical history or symptom information is requested.

Product enquiries and launch lists

Our home education, host education, retreat discovery and app pages collect your email, any name or project note you provide, the offer you asked about and your contact permissions. The others use the same private Cloudflare database. We use these details for the enquiry or updates you requested, retain them for up to 24 months, and keep other marketing permission separate. You can request removal through the contact address above. A signup does not create app access, certification or a private property dashboard.

6. Hosting and site analytics

The site is hosted on Cloudflare. Like any web host, Cloudflare processes technical information such as your IP address and browser type to deliver pages and protect the site from abuse.

We do not use this to identify you.

Our own counters. When a page opens, your browser tells our server which page it was, such as /explore. On a property page it also says when you click through to the property’s own site. We add one to a daily total for that page or property. We also count, per day, how many people start the space check, reach a result and save it. These are totals only, with nothing that identifies you.

These counters store nothing on your device. The totals hold no identifier, no IP address, no browser details and no record of the site you came from.

Page versions and pop-ups. When we test two versions of an offer page, your browser keeps one letter, A or B, in its local storage so you see the same version each time, and we count views, form starts and saves per version as daily totals; a pop-up or notice bar you have seen is noted in this tab’s session storage so it shows once, and neither uses a cookie or anything that identifies you.

Abuse limits and the error log. Our server reads your IP address to limit how many counts one address can send in a minute. It is not saved with the totals.

Our own code keeps no log of each request. When something on our server fails, Cloudflare records the error, with details of the request it happened on, for up to 7 days so we can fix it. Cloudflare, which runs our server, may also keep its own security records under its own privacy policy.

Campaign links. Some links to this site carry tags in the address, such as utm_source=humangarage. Human Garage puts them in its posts, videos, emails and website. Coaches who share our site get links of their own, marked with a code rather than their name.

If you arrive on one, we count the visit against that tag. We count it again if you open one of our forms or click through to a property’s site.

The tags we hand out name a post or a coach’s code, never a person. Tags that do not match our format are not counted or kept.

Our code holds the tag in the open page and in this tab’s session storage, so it survives moving around the site. It is never a cookie, and it is gone when you close the tab.

If you then open one of our forms, the tag is added to the form’s address as a field called campaign. Jotform receives it when the form opens, even if you never send the form.

If the form has a field for it, the tag is stored with what you send, so we can see which link brought you. It is kept as long as the rest of that form: see 1 and 2 above.

The daily totals, for pages, properties and campaign links, hold nothing about you. We keep them indefinitely.

Cloudflare Web Analytics. Cloudflare also counts page views for us, with a small script it adds to each page. For each view it records the page, the site that linked you here, your country, your browser, operating system and device type, and how fast the page loaded.

It uses no cookies or local storage. Cloudflare says it does not use your IP address or browser details to recognise you.

Apart from those error records and any form you send, we see totals only, not individual visitors.

• Legal basis: our legitimate interest in running a secure site, knowing which pages are used, and measuring which Human Garage and coach links bring visits and signups.

7. Content loaded from other sites

Some parts of the site load directly from other servers, so your browser sends those servers your IP address and browser details when it fetches them:

• Most property photographs are loaded from the property’s own website. A few are copies of the property’s own published photographs, served from this site.
• The map on a property page is an OpenStreetMap embed. It loads only when you scroll to it, and it is sent no referrer.
• The world map, where the site shows one, loads from OpenFreeMap (tiles.openfreemap.org).

The button that takes you to a property’s own site adds three tags to the link (utm_source, utm_medium and utm_campaign) so the property can see the visit came from Verified Wellness Spaces.

The tags name this site. They carry nothing about you.

Cookies

Our code sets no cookies. We do not use advertising, social media pixels or cross-site tracking.

If that ever changes, we will update this page and ask for consent first where the law requires it.

Our forms open on Jotform’s site, and Jotform may set its own cookies there to make the form work. Jotform’s privacy policy covers those.

The same goes for OpenStreetMap on the embedded map.

Who handles your information for us

We do not sell personal information, and we do not share it for advertising.

• Jotform Inc. hosts our forms and stores submissions: anything you enter in a form.
• Google (Google Workspace) hosts our email: emails you send us and our replies.
• Cloudflare, Inc. hosts the website and counts visits: technical request data.

We may also share information if the law requires it, or to protect our rights in a dispute.

International transfers

Some of these providers process data outside the EU and UK, including in the United States. Where they do, the transfer relies on the safeguards the provider offers, such as the EU-US Data Privacy Framework and its UK extension where the provider is certified, or the European Commission’s standard contractual clauses and the UK addendum.

Our forms are on Jotform’s US service (form.jotform.com), so what you send in a form is stored in the United States.

Properties listed on the index

Records describe properties, which are businesses. They are built from what a property publishes, what it sends us and, for certified properties, what we find on site.

Where a record includes a person’s name, it is because that person is publicly named by the property in that role, or the property asked us to name them.

A property, or any person named on a record, can ask us to correct their details or remove their personal contact details from the record. Email corrections@verifiedwellnessspaces.com.

Removing a person’s details does not remove the record of the property itself, because the index is a public record about businesses.

Your rights

If you are in the EU, the UK or another place with similar laws, you have the right to:

• access the personal information we hold about you;
• correct it if it is wrong;
• delete it;
• object to our using it on the basis of legitimate interest;
• restrict how we use it while a question is sorted out;
• take a copy of information you gave us, in a common format;
• withdraw consent at any time, where we rely on consent.

Email jordan@verifiedwellnessspaces.com. We will reply within one month.

We may ask you to confirm who you are first. There is no charge.

You can also complain to a data protection authority: in the EU, the authority in the country where you live; in the UK, the Information Commissioner’s Office (ico.org.uk). We would like the chance to fix it first.

Children

The site is not aimed at children under 16, and we do not knowingly collect their information.

Security

Forms are sent over an encrypted connection. Within our team, only the people who run Verified Wellness Spaces can read submissions and email.

The providers named above hold them on our behalf.

Changes

We will post any change to this page and update the date at the top. If a change affects how we use information you have already given us, we will email you where we can.

See also our terms of use.