The short version
Analytics runs on a legitimate-interest basis, but health data processing still requires your explicit, separate consent first.
- We do not sell your personal data. Not aggregated, not de-identified, not to insurers, employers, advertisers or data brokers.
- Health data is separated from the rest of the platform, stored in a different database in a region determined by your market, and encrypted per record.
- Analytics never receives a health value. No lab result, device reading, condition or medication reaches an analytics service.
- You can export everything we hold about you, and delete your account, from your settings.
The registered company name, company number and registered address belong in this paragraph. They are deliberately left blank rather than filled with a placeholder that looks real, and they will be completed before this notice leaves draft.
What we collect
If you just read the site
- Your approximate region, derived from your IP address, to pick the right market. We do not store the IP address in readable form — it is hashed for abuse control.
- Whether you accepted analytics. Until you do, no analytics script loads.
- Standard server logs, kept for 30 days for security and debugging.
If you have an account
- Email address, name if you give one, and authentication records.
- Your market, locale and unit preferences.
- What you saved, followed and tracked.
- Billing records if you subscribe. Card details go to the payment provider, never to us.
If you connect health data
Lab results, device and wearable metrics, and anything you upload. This is the most sensitive thing we hold and it has its own notice: health data and consent.
If you contact a clinic through us
Your name, contact details, the service you asked about and anything you typed in the message. That is passed to the clinic, which becomes responsible for it as its own controller. Enquiry forms warn you not to include medical details, because they are routed to sales inboxes rather than treated as clinical records.
Why we are allowed to process it
Consumer health data is collected only with your separate, specific, opt-in consent, obtained before collection and recorded per purpose. That is the Washington My Health My Data standard, and we apply it across the US rather than only to Washington residents, because running two consent models would guarantee we eventually apply the wrong one.
Where it lives
Health data for this market is stored in the United States. Where a clinic engages us as a business associate, that processing is additionally governed by a signed Business Associate Agreement.
Account, billing and content data is separate from health data and may be processed in a different region from your health data. The split is deliberate: the health database has a narrower access path and a stricter audit trail than the rest of the platform, and a staff member with full access to the main database still cannot read a lab result.
How long we keep it
- Server logs: 30 days.
- Analytics: aggregated after 14 months, with no individual-level retention beyond that.
- Account data: until you delete your account, then 30 days in backups before it is gone.
- Health data: until you delete it or your account. Deletion is immediate in the live database and propagates through backups within 30 days.
- Consent records and audit logs: kept for six years after the consent ends, because the proof that you consented is the thing that protects you if we are ever questioned about it.
- Billing records: as long as tax law requires, which is typically six to seven years.
Your rights and how to use them
You are covered by HIPAA where we act as a business associate of a covered entity, plus US state privacy law. Under it you can:
- Know what personal information we collect, use and disclose, and get a copy.
- Correct inaccurate personal information.
- Delete personal information, subject to records we are legally required to keep.
- Opt out of sale or sharing. We do not sell or share your health data, so there is nothing to opt out of — but the control exists and is honoured, including via Global Privacy Control.
- Limit the use of sensitive personal information, which includes health data.
- Not be discriminated against for exercising any of these.
- If you are in Washington State: withdraw consent for consumer health data and have it deleted, and bring a private action if we get it wrong.
Where to send a request
Privacy requests: privacy@longlifelist.com. Access, correction, deletion, and the Washington My Health My Data consumer health data right to withdraw consent and delete. We verify identity before acting.
How long we take: Within 45 days of a verified request, extendable once by a further 45 days with notice — the common denominator of the state laws, applied to everyone in the US rather than only where it is mandatory.
If we get it wrong
- Federal Trade Commission — For unfair or deceptive practices, including under the Health Breach Notification Rule.
- Your state Attorney General — State privacy laws are enforced by state Attorneys General.
- HHS Office for Civil Rights — For HIPAA complaints, where a covered entity or its business associate is involved.
Security
Encryption in transit and at rest, per-record encryption for health data, mandatory multi-factor authentication for any staff or clinician access to patient data, row-level access control in the database, and an append-only audit log of every read of patient data. If you have found a vulnerability, please tell us: responsible disclosure.
Market-specific notes
- We are not a covered entity under HIPAA in our own right. Most of what we hold is consumer health data outside HIPAA, which is why the state consumer health data laws matter more here than HIPAA does.
- A Global Privacy Control signal sent by your browser is treated as a valid opt-out request.
Questions about this notice go to the routes on the contact page, which lists the specific address for privacy, security, editorial and clinic matters rather than a single inbox that everything disappears into.