This Privacy Policy explains how Longavita Consulting ("Longavita", "we", "us"), a company incorporated and located in Dubai, United Arab Emirates, with its office at Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E., collects, uses, shares and protects personal data when you visit longavita.ae or use our services.
We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"), Federal Law No. 2 of 2019 on the Use of ICT in Health Fields where applicable, and other applicable UAE laws. Where we serve clients located in the European Union or the United Kingdom, we also respect the rights granted to them under the GDPR / UK GDPR.
01Data controller
Longavita Consulting is the controller of your personal data. For any privacy question or request, contact us at info@longavita.ae.
02Data we collect
- Contact data — name, email address, phone number, country.
- Inquiry data — the service you are interested in and the content of your messages.
- Health data — medical records, reports or descriptions of your condition that you choose to share for a second opinion, telemedicine or concierge service. This is sensitive personal data and is processed only with your explicit consent.
- Technical data — IP address, browser type, device information and pages visited, collected automatically when you use the website (see our Cookie Policy).
03Why we use your data and legal basis
- To respond to inquiries and provide our consulting services — performance of a contract or steps taken at your request.
- To coordinate second opinions and consultations with partner physicians — your explicit consent.
- To comply with legal, regulatory, tax and record-keeping obligations in the UAE — legal obligation.
- To operate, secure and improve our website — our legitimate interests.
- To send updates or marketing communications — only with your consent, which you can withdraw at any time.
04Sharing your data
We do not sell your personal data. We share it only where necessary with:
- Licensed physicians, clinics and medical institutions engaged to deliver the service you requested, with your consent;
- Service providers acting on our instructions (hosting, email delivery, IT support), bound by confidentiality and data protection obligations;
- Competent UAE authorities where required by law.
05International transfers
Because we work with partner doctors in Europe and other countries, your data may be transferred outside the UAE. We transfer data only to jurisdictions with an adequate level of protection, or on the basis of appropriate safeguards, your explicit consent, or where the transfer is necessary to perform a contract with you, as permitted by Articles 22 and 23 of the PDPL. Health data subject to Federal Law No. 2 of 2019 is transferred outside the UAE only where permitted by that law and applicable health-authority decisions.
06Retention
We keep personal data only as long as necessary for the purposes above or as required by UAE law. Inquiry data is generally kept for up to 3 years after our last contact. Health-related records are kept for the periods required by applicable UAE health regulations, after which they are securely deleted or anonymised.
07Security
We apply appropriate technical and organisational measures — including encryption in transit, access controls and confidentiality obligations — to protect your data against unauthorised access, loss or disclosure. In the event of a personal data breach affecting your rights, we will notify you and the UAE Data Office as required by the PDPL.
08Your rights
Subject to the PDPL, you have the right to:
- obtain information about and a copy of your personal data;
- request correction of inaccurate data or erasure of your data;
- restrict or object to processing, including for direct marketing;
- request data portability;
- withdraw your consent at any time, without affecting prior lawful processing;
- object to decisions based solely on automated processing.
To exercise your rights, email info@longavita.ae. We will respond within 30 days. You may also lodge a complaint with the UAE Data Office.
09Children
Our website is not intended for persons under 18. Services concerning minors are provided only at the request and with the consent of a parent or legal guardian.
10Changes to this policy
We may update this policy from time to time. The latest version will always be published on this page with its effective date.
11Governing law
This policy is governed by the laws of the Emirate of Dubai and the federal laws of the United Arab Emirates.