Privacy notice

This notice explains what personal information Enovar Health collects through this website, why we collect it, who we share it with, how long we keep it and your rights. It applies to everyone who visits the site, takes one of our questionnaires, applies for a programme, books a call, contacts us or buys a blood test through our testing partner.

1. Who we are

Enovar Health is a trading name of Mindset Health Ltd, a company registered in England and Wales (company number 15238826). Registered office: Create Business Hub, 5 Rayleigh Road, Brentwood, Essex, CM13 1AB, England.

Mindset Health Ltd is the controller of the personal information described here: we decide how and why it is used.

For any question about your information, or to use your rights, email it@inceptionstratos.com.

2. What we collect

When you take the Prime Check

• Your first name, email address, and phone number if you give it.
• Whether you would like marketing emails (newsletters and offers; the box is unticked unless you tick it), and whether you asked us not to send follow-up emails.
• Your result band (low, moderate or high) and the areas you chose for support, such as energy or focus.
• Whether you continued past the health notice, and when you started and finished.

Your answers to questions 1 to 9 stay on your device. They are used there to work out your result and are never sent to us or saved. We only receive the result band and the support areas you picked. If you pick weight management or sexual wellbeing, a few follow-up questions on that topic appear, and we do save those answers so our team can prepare for any conversation with you.

When you complete the Leadership & Performance Check

• Your name, email address and phone number.
• Your answers to the questions about your business, leadership, mindset, health and energy, and your next 90 days. Some of these are about your health, so we keep them only with the consent you give on the form.
• That you agreed to us keeping your answers, and whether you would like marketing emails.

If you used our earlier forms

• Before 12 November 2026, the Whole Man Blueprint had a Leader's Edge quiz and an application form. If you used them, we hold your answers to the quiz's business questions, two scores worked out from them and the result you were given (never your health answers), and the details from your application: your name, email address, role, the business priority you chose, the outcome you wanted in the next 90 days, your preferred start date, and phone number if you gave it.
• That you read this notice, and whether you would like marketing emails.
• We did not ask for any medical history on the application.

When you contact us

• Your name, email address, phone number if you give it, and your message.
• Please do not include medical details in a message. If you do, we use them only to reply to you.

When you book a call

Calls are booked through Cal.com, whose booking calendar appears on our pages. You give your name, email address and, if you want, a phone number. Cal.com tells us when you book, change or cancel a call, and we save that with your details so the right person can speak to you.

When you buy a blood test

The Enovar Baseline Test is provided by our testing partner Vitall, in collaboration with Enovar Health. You buy it on Vitall's website, and Vitall collects your order, payment and sample details under its own privacy notice. When you buy, Vitall shares your details and your test results with us, so we can talk to you about them and about next steps.

We never see or store your card details.

When you visit the site

• The campaign tags in the link you followed (for example, that you came from LinkedIn), saved with your details if you fill in a form.
• Short-lived technical logs kept by our hosting provider (such as IP address and browser), used to keep the site secure and working.
• Visit and page-speed statistics, counted without cookies by our hosting provider Vercel: the pages viewed, the site that sent you, your country, and your browser and device type. They don't identify you or follow you to other sites.

Records of your choices

We keep a record of each consent you give or refuse (privacy notice, health notice, marketing), with the date and the version of the notice you saw, so we can show what you agreed to.

Clinical records are not kept on this website. If you go on to use our clinical services, you will be told how your health records are handled at that point.

3. Why we use it, and our lawful basis

• To send your results and reply to you: emailing your Prime Check result, responding to your application or enquiry, and holding the calls you book. Lawful basis: taking the steps you asked for before any agreement with us, and our legitimate interest in answering you.
• To follow up: our team may contact you about the service you asked about, and keeps notes of where things stand. Lawful basis: our legitimate interests. You can ask us to stop at any time.
• Health information: your Prime Check result band, support areas and any weight management or sexual wellbeing follow-up answers, and the health-related answers on the Leadership & Performance Check, say something about your health, so we only keep them with your explicit consent. You give it on the health notice screen before the Prime Check questions, or with the tick box on the Leadership & Performance Check. If you leave the Prime Check at the health notice, nothing about your health is saved. You can withdraw your consent at any time and we will delete them.
• Blood test results shared by Vitall: Vitall tells you at checkout that it shares your details and results with us. Because results are health information, we use them only with your explicit consent, and only to discuss your results and next steps with you. You can withdraw that consent at any time.
• Follow-up emails: after the Prime Check, or a message through our contact or LinkedIn form, we send up to three emails over the next ten days about your enquiry and next steps, unless you tick 'Don't send me follow-up emails' on the form. Lawful basis: our legitimate interests (the 'soft opt-in' for people who have asked about our services). Every email has an unsubscribe link.
• Marketing emails (newsletters and offers): only if you tick the box. Lawful basis: your consent. Every email has an unsubscribe link.
• Site statistics: counting visits and page speed without cookies, to keep the site useful and fast. Lawful basis: our legitimate interests.
• Records, security and legal duties: keeping consent records, protecting the site, and meeting legal obligations. Lawful basis: legal obligation and our legitimate interests.

4. Who we share it with

We only share what each provider needs, under written contracts that require them to protect it and use it only on our instructions. We never sell your information.

• Supabase (database). Stores the details you give us. Servers in London, UK.
• Brevo (email). Sends our emails and holds our contact lists. It receives your name, email address, which form you used, where you are with us, your marketing choice and, for the Prime Check, your result band and support areas (so it can send you your result). It never receives your health answers, your follow-up or Leadership & Performance Check answers, or your messages. Servers in the EU.
• Cal.com (call booking). Shows the booking calendar, holds your booking (name, email address, phone number if given, and the time) and sends you confirmation and reminder emails.
• Vercel (website hosting). Runs the website, keeps short-lived technical logs, and counts visits and page speed without cookies (Vercel Web Analytics and Speed Insights).
• Vitall (blood tests). Sells and processes the Enovar Baseline Test and shares your results with us.

If you become a client, we share what is needed with the GMC-registered doctors, laboratories, pharmacies and payment providers involved in your care. We also share information when the law requires it, for example with regulators or the police.

5. International transfers

Some of our providers are based outside the UK. Brevo processes data in the EU, which the UK recognises as protecting it adequately. Vercel and Cal.com are US companies and may process data in the US; where they do, it is protected by the UK–US data bridge or the UK International Data Transfer Agreement.

6. How long we keep it

• Enquiries, quiz results, form answers and applications that don't lead to a service: 12 months from our last contact with you, then deleted.
• Marketing: until you unsubscribe. We then keep your email address on a "do not contact" list so we don't email you again.
• Consent records: for as long as we hold your information, and afterwards only as long as we need to show we had your consent.
• Clients: as required by the rules for health and financial records, which we explain when you become a client.

7. Cookies

This site does not use analytics or advertising cookies, so it doesn't ask you to accept any. Our cookie policy has the details.

• Essential: staff who sign in to our admin pages get sign-in cookies. Visitors don't.
• Booking calendar: on our booking pages the calendar is loaded from Cal.com, which may set cookies it needs to take your booking. Cal.com's own privacy notice covers them.

If we ever add analytics cookies, we will update this notice and ask for your permission before setting any.

8. Automated results

The Prime Check works out a result automatically from your answers. It is general guidance to help you choose a next step. It is not a diagnosis and does not decide whether any treatment is suitable for you; only a qualified clinician can do that. The Leadership & Performance Check gives no result: our team reads your answers before your call. We do not make any decision with legal or similarly significant effects about you by automated means alone.

9. Keeping it safe

Your information is stored in an access-controlled database that only our server and authorised staff can read, and it is encrypted in transit and at rest. Staff sign in with a personal, emailed link. We limit who can see what to the people who need it.

10. Your rights

You have the right to:

• get a copy of your personal information
• have it corrected if it is wrong or incomplete
• have it deleted in certain circumstances
• restrict how we use it
• object to us using it on the basis of legitimate interests, and to direct marketing at any time
• receive information you gave us in a portable format, where we use it with your consent or to provide a service
• withdraw your consent at any time, without affecting what we did before

To use any of these rights, email it@inceptionstratos.com. We may ask you to confirm your identity. We reply within one month, which can be extended by two months for complex requests. There is normally no fee.

You can also unsubscribe from marketing with the link in any email.

11. Complaints

If you are unhappy with how we handle your information, please tell us first at it@inceptionstratos.com so we can put it right.

You can also complain to the Information Commission (formerly the ICO) at any time: ico.org.uk or 0303 123 1113.

12. Other information

• Age: this website and our services are for adults aged 18 and over.
• Other websites: links to other websites, including Vitall's, are covered by those sites' own privacy notices.
• Changes: we update this notice when the way we handle information changes. The date at the top shows the latest version.