How we collect, use, share and protect your personal data — and the rights you have under the GDPR.
WOW Longevity is a premium longevity clinic operating in the European Union. The data controller responsible for the processing of your personal data is WOW Longevity [REVIEW WITH DPO] (legal entity name and registered address to be confirmed).
You can reach us at privacy@wowlongevity.com. Our Data Protection Officer (DPO) can be contacted at dpo@wowlongevity.com [REVIEW WITH DPO] (DPO appointment and dedicated contact details to be confirmed).
We collect and process the following categories of personal data:
Under Art. 13 GDPR we are required to tell you the purpose and lawful basis for each type of processing:
| Purpose | Lawful basis |
|---|---|
| Account creation and service delivery | Art. 6(1)(b) — performance of a contract |
| Processing of health data (biomarkers, wearables, lab results) | Art. 9(2)(a) — your explicit consent, captured at registration |
| Marketing communications and newsletters | Art. 6(1)(a) — your consent (separate and optional) |
| Accounting, tax and other legal record-keeping | Art. 6(1)(c) — legal obligation |
| Security, fraud prevention and audit logging | Art. 6(1)(f) — legitimate interests [REVIEW WITH DPO] |
You can withdraw any consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Manage your consents at /dashboard/profile/consents.
We do not sell your personal data. We rely on a small set of vetted sub-processors to operate the service. Each is bound by a Data Processing Agreement and only processes data on our instructions.
| Recipient | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Supabase | Database and file storage | EU | EU — no transfer required |
| Vercel | Application hosting and edge delivery | US / EU edge | Standard Contractual Clauses (SCCs) |
| Anthropic | AI Copilot chat and document extraction | US | Standard Contractual Clauses (SCCs) |
| WHOOP | Wearable data sync (only if you connect the integration) | US | User OAuth consent + SCCs |
| Oura | Wearable data sync (only if you connect the integration) | US | User OAuth consent + SCCs |
| Resend | Transactional email delivery | US | Standard Contractual Clauses (SCCs) |
We may also disclose personal data when required by law, court order, or to protect the vital interests or safety of users.
Under the GDPR (Art. 15–22) you have the right to:
You can exercise most of these rights directly in your account at /dashboard/profile and /dashboard/profile/consents. For anything else, email dpo@wowlongevity.com.
You have the right to lodge a complaint with your local data protection supervisory authority — typically the authority of the EU member state where you live, work, or where the alleged infringement took place. We'd appreciate the chance to address your concerns first, so please consider contacting our DPO before filing a complaint.
We use only essential cookies required for authentication and security. We do not use advertising or third-party tracking cookies. See our Cookie Policy for the full list.
Our services are intended exclusively for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a minor has provided us with data, please contact us and we will delete it.
Where personal data is transferred outside the European Economic Area (for example to our US-based sub-processors Anthropic, Resend, WHOOP, Oura and Vercel), we rely on the European Commission's Standard Contractual Clauses (SCCs) and, where appropriate, supplementary technical and organisational measures to ensure an essentially equivalent level of protection.
Our AI Copilot generates suggestions and summaries from your health data, but it does not make automated decisions that produce legal or similarly significant effects on you. Any clinical recommendation is reviewed by a qualified practitioner before it is acted on — you are not subject to a decision based solely on automated processing within the meaning of Art. 22 GDPR.
We may update this policy from time to time. Material changes will be notified by email and/or by an in-app notice at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.
