Privacy Notice
How we collect, use and protect personal data under the UK GDPR and the Data Protection Act 2018.
Last updated 2 September 2026
Who we are
This site is operated by MR Longevity together with ILMRI, the International Longevity Medicine Research Institute. For the purposes of UK data protection law we are the data controller for personal data processed through this website and the member platform. You can reach us, including our data protection contact, at Mr.Longevity@LongevityMR.com. Our correspondence address is available on request.
What we collect and why
Enquiry data
Name, email address, organisation, the role you select and the content of your message when you use the contact form or write to us by email.
Lawful basis: Legitimate interests (Article 6(1)(f)): responding to enquiries addressed to us.
Retention: Kept for up to 24 months after our last exchange, then deleted.
Member account data
Email address, name, password credentials held by our authentication provider, and, where you sign in with Google, the basic profile data Google returns.
Lawful basis: Contract (Article 6(1)(b)): creating and running the member account you asked for.
Retention: Kept while your account is active and for up to 6 months after deletion in backups.
Member profile and project data
The professional information you choose to publish: role, organisation, country, mission areas, capabilities, biography, links, and the projects and collaboration requests you create.
Lawful basis: Consent (Article 6(1)(a)) for what you publish to other members; you control and can remove it at any time.
Retention: Kept until you edit or delete it, or close your account.
Community contributions
Comments, shared experiences and activity records you voluntarily post in the Action Community.
Lawful basis: Consent (Article 6(1)(a)). Do not post health information you do not wish to share.
Retention: Kept until you delete the contribution or close your account.
Technical and security data
Server and security logs generated when you use the site, including IP address, browser type and timestamps, produced by our hosting and backend providers.
Lawful basis: Legitimate interests (Article 6(1)(f)): keeping the service secure, available and free of abuse.
Retention: Kept for a short operational period by our providers, normally no more than 90 days.
We do not sell personal data, we do not use it for advertising, and we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
Health information
We do not ask you for health data and this site does not provide medical diagnosis or treatment. If you voluntarily include health information in a message, a profile or a community contribution, we process it only with your explicit consent under Article 9(2)(a) of the UK GDPR, and only to respond to you or display what you chose to publish. Please share no more than you are comfortable making known.
Who we share data with
- Hosting, database, authentication and email infrastructure providers acting as our processors under written terms.
- Members of the platform, but only the profile and project information you choose to publish.
- Professional advisers, auditors or authorities where we are legally required to disclose.
International transfers
Our infrastructure providers may process data outside the United Kingdom. Where that happens, transfers are covered by UK adequacy regulations or by the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with additional safeguards where needed. You can ask us for details of the safeguards that apply.
How we keep data safe
- Access to member data is enforced at the database level with row-level security policies.
- Data is encrypted in transit and at rest by our infrastructure providers.
- Administrative access is limited to the people who need it to run the mission.
- Passwords are never stored by us in readable form; authentication is handled by our provider.
Your rights
Access
Ask for a copy of the personal data we hold about you.
Rectification
Ask us to correct data that is inaccurate or incomplete.
Erasure
Ask us to delete your data where there is no overriding reason to keep it.
Restriction
Ask us to pause processing while a concern is investigated.
Portability
Receive data you gave us in a structured, machine-readable format.
Object
Object to processing carried out under legitimate interests.
Withdraw consent
Withdraw consent at any time, without affecting past processing.
Complain
Complain to the UK Information Commissioner's Office at ico.org.uk.
To exercise any right, email us or use the contact form and choose the subject “Privacy request (data rights)”. We respond within one month, as required by the UK GDPR. Members can also view, edit and delete most of their information directly from their profile.
Cookies
We use a small number of strictly necessary cookies and similar storage. There is no advertising or third-party tracking. See the cookie notice for the full list.
Children
The platform is intended for adults working in or interested in longevity science. We do not knowingly create member accounts for anyone under 18. If you believe a child has provided us with personal data, contact us and we will remove it.
Changes and complaints
We update this notice when our processing changes and record the date at the top. If you are unhappy with how we handle your data, tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, ico.org.uk, or by calling 0303 123 1113.
This notice describes our current practice in plain English. Before large-scale processing, new markets or clinical data handling, it should be reviewed by a qualified data protection adviser in each country where the mission operates.