Pick a route
An error in something we published
- Use it for
- A wrong claim, a misread study, a grade you think is indefensible, a broken citation, a stale price. Include the URL and, if you can, a citation — it roughly halves the time it takes.
- Not for
- A question about your own health. We cannot answer it and we will not try.
- How long we take
- Acknowledged within five working days. A factual error is corrected within ten working days of us confirming it, and the correction is published.
Privacy, your data, and data subject requests
- Use it for
- Access, correction, deletion, restriction, objection and portability. We verify identity before acting, because handing your health data to someone who says they are you would be the larger failure.
- Not for
- Do not send health details to prove who you are. We will tell you what we need, and it is never a lab result.
- How long we take
- One month from receiving a verified request, extendable by two further months for complex requests — we tell you inside the first month if we need the extension and why.
A security vulnerability
- Use it for
- Anything that could let someone reach data they should not, especially health data. Include reproduction steps and your assessment of impact.
- Not for
- Scanner output with no demonstrated impact, or a missing-header report with no exploit path. The scope list is on the security page.
- How long we take
- Acknowledged within one working day, triaged with a severity within five. We offer safe harbour for good-faith research and will not involve lawyers over it.
Clinic and lab support
- Use it for
- Claiming a listing, correcting your own details, verification audits, leads, the Health Data Hub, billing. Claiming and correcting are free and always will be.
- Not for
- Asking us to remove a review, or to change an evidence grade. Neither is for sale and neither has an escalation path that is. Review reports go through the portal against the published guidelines.
- How long we take
- Two working days. Billing and verification questions may take longer because they involve a second person.
Press
- Use it for
- Put "Press" in the subject line and your deadline in the first sentence. For a question about a specific grade we will connect you with the reviewer who signed it, on the record.
- Not for
- Requests for member or patient data in any form, including aggregated. There is no version of that we will provide.
- How long we take
- One working day, or same day if you tell us the deadline is today.
A safety concern about a listed clinic
- Use it for
- If you believe a clinic is operating unsafely or you were harmed. Put "Safety" in the subject. This goes to a named person, is triaged within one working day, and is escalated to the relevant regulator where appropriate.
- Not for
- A public review. A safety allegation does not belong in a review section, and we remove allegations of a crime or negligence from reviews while leaving the rest of the review intact.
- How long we take
- Triaged within one working day. We will not discuss your report with the clinic without your permission.
Statutory routes for your region
You are reading the EU market, which is governed by General Data Protection Regulation (EU) 2016/679. These are the routes that law specifically requires, and where to go if we fail you.
- Data subject requests
- privacy@longlifelist.com — Access, correction, deletion, restriction, objection and portability. We verify identity before acting, because handing your health data to someone who says they are you would be the larger failure.
- Data Protection Officer
- dpo@longlifelist.com — The statutory contact under Article 37 of the GDPR. Use this route for anything you do not want going through general support, including a complaint about how we have handled a request.
- If we do not resolve it
- Your national data protection authority (find yours via the European Data Protection Board) — You may complain to the authority in the country where you live or work. You do not have to contact us first.
Why we publish a role address rather than a person's name
Data Protection Officer is a statutory single point of contact. We publish the role address so the route keeps working when the person holding the role changes — a named individual in a legal notice becomes a dead end the week they leave.
Full detail, including your rights and the deadline we are held to, is in the privacy policy and the health data notice.
What we cannot help with
- Your own health. We are not a clinical service and we cannot interpret your results, suggest a dose, or tell you whether to start or stop something. Ask a clinician who knows your history.
- Booking, rescheduling, refunds or complaints about care you received. That is between you and the clinic — we are not a party to it — though a safety concern about a listed clinic does come to us.
- Removing a review because you disagree with it. Reviews come down for breaching the published review guidelines and for nothing else.
- Changing an evidence grade without evidence. Bring a study and it goes to the review board; bring commercial pressure and it goes nowhere.