Privacy Policy

PLEASE READ THESE TERMS OF OUR PRIVACY POLICY CAREFULLY BEFORE USING THIS WEBSITE. YOUR USE OF THE SITE CONSTITUTES YOUR AGREEMENT TO OUR PRIVACY POLICY (THE "TERMS"). We recommend that you print or save a copy of these Terms and Conditions for future reference.

Hi Five Club Privacy Policy

Last updated: 22 September 2026

This Privacy Policy explains how WHiYOU Ltd, trading as Hi Five Club, collects, uses, stores and shares personal information when you visit our website, purchase our products or services, join our community, participate in a programme, challenge, event or prize draw, make an enquiry, or otherwise interact with us.

We are committed to treating your personal information responsibly, transparently and securely.

1. Who We Are

WHiYOU Ltd is the controller responsible for the personal information described in this policy.

Legal name: WHiYOU Ltd

Trading name: Hi Five Club

Company number: 15225246

Registered office: 4 Rope Walk, Rye, England, TN31 7NA

Email: support@whiyou.com

References to Hi Five Club, we, us or our mean WHiYOU Ltd trading as Hi Five Club.

2. Personal Information We May Collect

The information we collect depends on how you interact with us. It may include:

Identity and contact information

your name;
email address and telephone number;
billing, delivery or correspondence address;
date of birth or age confirmation where eligibility must be verified; and
account or membership details.

Purchase and transaction information

products or services purchased;
order numbers, transaction history, refunds and returns;
delivery and fulfilment information; and
limited payment information, such as payment status, method and transaction reference.

Payments are processed by third-party payment providers. We do not normally receive or store your complete payment card number or security code.

Programme, challenge and event information

applications, onboarding answers and participation records;
goals, preferences, feedback and progress information;
emergency contact or accessibility information where genuinely required;
photographs, video, testimonials or stories where you have chosen to provide them; and
fundraising or beneficiary information connected with a Hi Five Club pledge or challenge.

Sensitive information

Some programmes or activities may invite you to share information about your physical or mental health, disability, recovery, sobriety, personal experiences, sexuality or other sensitive matters. Some of this may be special category data under UK data protection law.

We will only request sensitive information where it is relevant and necessary. Where required, we will ask for your explicit consent and explain the particular reason for collecting it. You are not required to provide more information than is reasonably necessary to participate.

Website and technical information

IP address;
browser, device and operating-system information;
login and security information;
pages viewed, links selected and time spent on the website;
referring pages and approximate location derived from technical information; and
cookie preferences and information collected through permitted cookies or similar technologies.

Communications and content

emails, messages and customer-support enquiries;
survey responses, comments, reviews and feedback;
competition or prize-draw entries; and
content you choose to submit, publish or share with us.

Marketing preferences

whether you have asked to receive news, offers or updates;
your preferred communication channels; and
records of consent, objections and unsubscribe requests.

3. How We Collect Personal Information

We may collect information:

directly from you when you place an order, create an account, complete a form, apply for a programme, contact us or participate in an activity;
automatically when you use our website, subject to your cookie choices;
from organisations that help us process payments, fulfil orders, operate events or administer fundraising;
from social-media platforms when you interact with our pages or contact us through those platforms;
from a friend, organisation or professional who refers or introduces you, where they are permitted to do so; and
from publicly available sources where appropriate and lawful.

If you provide personal information about another person, you should ensure that you have permission to do so and that they understand how their information may be used.

4. How and Why We Use Personal Information

We use personal information only where we have a lawful reason. Depending on the activity, we may rely on the following lawful bases.

Contract

We process information where necessary to:

process and fulfil orders;
provide purchased services;
manage memberships, programme places or event bookings;
administer returns, refunds and customer accounts; and
communicate with you about the product, service or activity you requested.

Legitimate interests

We may process information where necessary for our legitimate business and community interests, provided those interests do not override your rights. This may include:

responding to enquiries and providing support;
improving our website, products, services and programmes;
preventing fraud, misuse and security incidents;
keeping appropriate records;
understanding overall engagement and impact;
managing relationships with supporters, partners and beneficiaries; and
establishing, exercising or defending legal claims.

Where appropriate, we assess and document these interests and the potential effect on individuals.

Consent

We may rely on your consent for:

optional email or electronic marketing where consent is required;
optional analytics, advertising or tracking technologies;
particular uses of photographs, videos, stories or testimonials;
collecting or using sensitive information where explicit consent is the appropriate condition; and
other optional activities that we clearly explain when asking for your consent.

You may withdraw consent at any time. Withdrawal will not affect processing that was lawful before consent was withdrawn.

Legal obligation

We may process information to meet legal, tax, accounting, consumer-protection, safeguarding or regulatory requirements and to respond to valid legal requests.

Vital interests

In a genuine emergency, we may use or share information where necessary to protect someone's life or physical safety. This basis will only be used in limited circumstances.

5. Sensitive and Special Category Information

Hi Five Club is not a healthcare or emergency service. However, our programmes, challenges and community activities may involve personal conversations about wellbeing, recovery or difficult life experiences.

Where we process special category data, we will identify both a lawful basis under Article 6 of the UK GDPR and a separate condition under Article 9. In many voluntary participation contexts, this is likely to involve your explicit consent.

We will:

explain what sensitive information is requested and why;
collect only what is reasonably necessary;
limit access to people who need it;
avoid using it for unrelated advertising or profiling; and
delete or anonymise it when it is no longer required.

If information suggests an immediate and serious risk to someone's life or safety, we may need to share proportionate information with emergency services or another appropriate organisation. We will only do this where a valid legal basis applies.

6. Orders and Payments

When you purchase through our website, we use your information to confirm the transaction, arrange production and delivery, provide updates, manage returns and refunds, prevent fraud and keep required financial records.

Our website, ecommerce platform and payment providers may process payment and transaction information under their own privacy terms. We receive only the information reasonably needed to confirm and manage your order.

7. Programmes, Challenges, Events and Prize Draws

We use participant information to:

assess applications and eligibility;
provide onboarding and programme communications;
support participation and reasonable adjustments;
administer fundraising pages or beneficiary relationships;
operate prize draws fairly and verify winners;
monitor safety, progress and feedback; and
evaluate and improve our activities.

Where another organisation jointly delivers an activity, we will explain any relevant sharing arrangements before or when the information is collected.

Participation in promotional photographs, videos, testimonials or public storytelling is voluntary unless the activity clearly states otherwise. Where consent is appropriate, you may withdraw it for future use, although we may not always be able to remove material that has already been lawfully printed, distributed or republished by others.

8. Marketing Communications

We may send service messages that are necessary to administer your account, order, booking, programme or other requested activity. These are not marketing messages.

We will send electronic marketing only where we have the required consent or another lawful permission, such as the limited existing-customer exemption where applicable.

You can stop marketing at any time by:

selecting the unsubscribe link in an email;
changing available account preferences; or
emailing support@whiyou.com.

We may retain a minimal suppression record so that we can respect your request and avoid contacting you again for marketing.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies for functions such as security, login, shopping baskets, preferences, performance measurement and, where enabled, analytics or advertising.

Strictly necessary technologies may operate without consent where they are required to provide a service you requested or to keep the website secure.

Optional analytics, advertising and other non-essential technologies will be used only where we have the consent or other permission required by law. You can accept, reject or manage optional technologies through the cookie controls on our website.

The live cookie settings or cookie notice provide the most current details of the technologies in use, their providers, purposes and durations. This is more accurate than a fixed list because website services and cookie durations may change.

You can also manage cookies using your browser or device settings. Blocking certain essential technologies may prevent parts of the website from working correctly.

Where Google Analytics or a similar analytics service is enabled with your permission, it may collect information about how visitors use the website. You can learn more about Google's privacy practices at Google Privacy & Terms.

10. Who We Share Information With

We may share personal information where reasonably necessary with:

Wix and other website, ecommerce or hosting providers;
payment processors and fraud-prevention providers;
product manufacturers, fulfilment partners, couriers and delivery services;
email, communications, customer-support and survey providers;
analytics or advertising providers where you have made the relevant cookie choice;
event venues, facilitators and programme delivery partners;
fundraising platforms and selected beneficiary organisations where relevant;
IT, security, accounting, insurance and professional advisers;
regulators, courts, law-enforcement bodies or public authorities where required; and
a purchaser, investor or adviser involved in a genuine business reorganisation, subject to appropriate confidentiality and legal safeguards.

We do not sell personal information.

Where a third party acts as our processor, it may use the information only under our instructions and for the agreed service. Some organisations act as independent controllers and will provide their own privacy information.

11. International Transfers

Some technology, payment, ecommerce, communications or fulfilment providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure an appropriate legal safeguard is in place. This may include an adequacy regulation, approved contractual protections, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, together with additional safeguards where required.

12. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, safeguarding or dispute-resolution requirements.

Our usual approach is:

Order, payment and tax records: normally up to six years after the end of the relevant financial period;
Customer-service and complaint records: for the time needed to resolve the matter and establish or defend legal claims;
Account information: while the account remains active and for a reasonable period afterwards;
Unsuccessful applications: normally no longer than 12 months, unless a longer period is explained or agreed;
Programme, challenge and event records: for the duration of participation and a reasonable review, safeguarding or evaluation period afterwards;
Sensitive participation information: only for as long as it remains necessary for the stated activity, safety or legal purpose;
Marketing records: until you unsubscribe or we determine that the information is no longer current, while retaining a minimal suppression record where necessary; and
Cookie information: for the duration stated in the live cookie settings.

We may keep information for longer where required by law, necessary for an active complaint or legal claim, or needed to protect someone's safety. When identifiable information is no longer required, we will delete or securely anonymise it.

13. Security

We use reasonable organisational and technical measures designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

These measures may include access controls, secure accounts, encryption provided by our service providers, staff or contractor confidentiality requirements, backups and security monitoring.

No online service is completely secure. You are responsible for choosing a strong password, keeping account details confidential and notifying us promptly if you suspect unauthorised access.

14. Your Data Protection Rights

Depending on the circumstances, you may have the right to:

be informed about how your information is used;
request access to personal information we hold about you;
ask us to correct inaccurate or incomplete information;
request deletion of information in certain circumstances;
ask us to restrict particular processing;
object to processing based on legitimate interests or to direct marketing;
receive certain information in a portable format;
withdraw consent at any time where processing relies on consent; and
ask for human review of certain solely automated decisions that have legal or similarly significant effects.

These rights are not absolute and may depend on the reason we hold the information. We may need to verify your identity before acting on a request.

We will normally respond within one month. If a request is particularly complex or numerous, the law may allow additional time, and we will explain this to you.

To exercise a right, email support@whiyou.com.

15. Automated Decision-Making

We do not currently make decisions about individuals based solely on automated processing where those decisions have legal or similarly significant effects.

We may use automated tools to help identify potentially fraudulent transactions or security threats. Where a significant decision requires review, we will involve a person as required by law.

16. Children's Information

Our online shop and general website are not intended to collect personal information directly from children without appropriate involvement from a parent, guardian or responsible organisation.

Some community, youth-support or social-impact activities may involve people under 18. Where this occurs, we will use age-appropriate privacy information and obtain any permission or consent required for the particular activity.

We do not knowingly use children's information for behavioural advertising.

17. Links and Social Media

Our website may link to third-party websites, fundraising platforms or social-media services. Those organisations control their own processing and privacy practices. We encourage you to read their privacy information before providing personal details.

Information posted publicly on social media or in an open community space may be visible, copied or shared by others. Please avoid posting sensitive information publicly unless you are comfortable doing so.

18. Complaints

Please contact us first if you have a question or concern about how we use your information:

Email: support@whiyou.com

You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection:

Website: ico.org.uk
Telephone: 0303 123 1113

We would appreciate the opportunity to address your concern before you contact the ICO, but you are not required to contact us first.

19. Changes to This Policy

We may update this Privacy Policy to reflect changes to our services, technology, legal obligations or use of personal information.

The latest version will be published on the Hi Five Club website with an updated date. If a change materially affects how we use information already collected, we will provide an appropriate notice and seek consent where required.

20. Contact Us

For privacy questions, requests or complaints, contact:

WHiYOU Ltd trading as Hi Five Club

Company number: 15225246
Registered office: 4 Rope Walk, Rye, England, TN31 7NA
Email: support@whiyou.com

company number

152252642

Support@whiyou.com