Legal
Privacy Policy
Effective date: October 13, 2026
1. Who Is Responsible for Your Data
worldlongevityclinics.com is published by Happyberg Labs S.L. (CIF B23844822), registered in Sada (A Coruña), Spain. Happyberg Labs S.L. is the controller of the personal data described in this policy.
Privacy contact: contact@worldlongevityclinics.com. A full postal address is available on request at that email.
2. What We Collect, Why, and on What Legal Basis
We only collect the data you type into our forms and the analytics data described below. Submitting a form is not consent by itself: where we rely on consent, we ask for it with a separate checkbox.
Clinic profile claims (/claim)
- Data:
- Clinic name and profile address, your name, your role at the clinic, your email address, an optional message, a verification code, and an optional checkbox (unticked by default) about emails on other Happyberg Labs services for clinics.
- Purpose:
- To verify that you represent the clinic and to handle the corrections you ask for. To verify a claim, you email claims@worldlongevityclinics.com from your clinic address quoting the code.
- Legal basis:
- Our legitimate interest in answering the request you made (Art. 6(1)(f) GDPR). We send emails about other Happyberg Labs services only if you tick the checkbox (Art. 6(1)(a) GDPR and Art. 21 of the Spanish LSSI).
Clinic finder (/find-your-clinic)
- Data:
- Your goals, budget and priorities, optional notes, your name, email address, phone number, preferred contact channel, and your consent. Some goals and notes may reveal information about your health.
- Purpose:
- To propose clinics that suit you and, if you agree, to introduce you to those clinics.
- Legal basis:
- Your consent (Art. 6(1)(a) GDPR). For goals that reveal health information, your explicit consent (Art. 9(2)(a) GDPR). Health-related goals are not sent to Slack or to our CRM.
"Notify me when reviews launch"
- Data:
- Your email address and the clinic page you signed up from.
- Purpose:
- To email you when reviews become available for that clinic.
- Legal basis:
- Our legitimate interest in answering the request you made (Art. 6(1)(f) GDPR). We use this email address for nothing else.
Analytics
- Data:
- Pages viewed, clicks and other interactions, referring page, browser and device type, and your IP address as received by PostHog. Nothing is stored in your browser: PostHog groups events from the same visitor with a one-way hash of the IP address and browser details, salted with a value that changes every day and is then deleted. We do not tell PostHog your name or email address.
- Purpose:
- To understand how the site is used and improve the directory.
- Legal basis:
- Our legitimate interest in measuring and improving the site (Art. 6(1)(f) GDPR). You can object at any time (see Your rights).
3. Who Receives Your Data
We use these service providers, who process data on our behalf, plus the clinics listed last:
We also keep contact records in a CRM (Twenty) that we host on our own servers in Spain; no third party operates it.
We do not sell or rent your personal data and do not share it with advertisers or data brokers.
4. Transfers Outside the EEA
Cloudflare, Slack and Google are US companies, and Cloudflare serves the site from a global network, so your data may be processed outside the European Economic Area. These transfers rely on the EU-US Data Privacy Framework or on the European Commission's Standard Contractual Clauses. PostHog processes our analytics in the EU.
5. Cookies and Similar Storage
Our analytics set no cookies and store nothing in your browser. Cloudflare may set cookies strictly needed for security and bot protection.
We do not use advertising cookies. You can delete or block cookies in your browser settings; the site works without them.
6. How Long We Keep Your Data
- Claim and clinic-finder records stored in Cloudflare KV are deleted automatically after 90 days.
- Contact records in our CRM are kept while we are in contact with you, and deleted when you ask or after 24 months without contact.
- Slack alerts are deleted together with the CRM record when you ask us to erase your data.
- IP addresses are used only to limit repeated form submissions within a one-hour window. They are not stored with claims.
- Analytics events are kept in PostHog for the retention period set in our PostHog project. You can ask us to delete them.
7. Your Rights
Under the GDPR you have the right to:
- Access - ask for a copy of the personal data we hold about you.
- Rectification - ask us to correct inaccurate or incomplete data.
- Erasure - ask us to delete your data.
- Restriction - ask us to limit how we use your data while a request or dispute is resolved.
- Objection - object to processing based on our legitimate interest, including analytics.
- Portability - receive the data you gave us in a structured, machine-readable format.
- Withdraw consent - at any time, without affecting processing done before you withdrew it.
To exercise any of these rights, email contact@worldlongevityclinics.com. You can also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es).
8. Security
All traffic to the site is encrypted with HTTPS, and only our team can access form records. No method of transmission or storage is completely secure.
9. Changes to This Policy
When we change this policy, we publish the new version on this page with a new effective date.
10. Contact
For privacy requests or questions about this policy, write to:
contact@worldlongevityclinics.com