Your privacy is a clinical priority.

A clinical approach to data.

Clinic82.Longevity Ltd, trading as Clinic82, is a company incorporated under the laws of the Republic of Cyprus (company number HE 392207). We are committed to the privacy and secure processing of the personal data we maintain — for our patients, our website visitors, our associates, and our collaborators.

This Privacy Notice describes what personal data we collect, how we use it, on what legal basis, and the rights you have under the EU General Data Protection Regulation (Regulation 2016/679, "GDPR") and Cyprus Law 125(I)/2018.

Who is responsible.

Clinic82.Longevity Ltd is the Data Controller for the purposes of GDPR and Cyprus Law 125(I)/2018.

The categories of personal data.

We collect various categories of personal data, depending on your relationship with us:

Visitors, members of the public, next of kin

• Basic details such as name, address, date of birth
• ID number
• Contact information (phone number, email, etc.)
• Images from CCTV systems installed at our premises

Patients

• Personal data disclosed when appointments are arranged
• Sensitive data: medical conditions, ethnicity, nationality
• Notes and reports about physical or mental health, treatment, care or support
• Test results and diagnoses
• Relevant information from other professionals
• Information on medicines, side effects and allergies
• Patient experience feedback and treatment outcome information
• CCTV images from our premises
• Financial information such as payment details

Employees and collaborators

• Basic details, contact information, CV, ID number, social insurance number, IBAN and other financial information
• CCTV images from our premises

Candidates for recruitment

• CVs and cover letters shared with us

The purposes of processing.

We process your personal data for the following purposes:

• Provision of medical services — to assess, screen, treat, and manage your health conditions.
• Patient CRM — to create and manage your medical file, provide medical care support, notify you of examinations, results, appointments and referrals, and execute payments.
• Functionality and security — to detect, prevent and respond to actual or potential fraud and illegal activity.
• Compliance — to comply with legal and regulatory requirements.

Under what authority we process.

We process your personal data on one or more of the following bases under GDPR Article 6:

• Consent — where you have given explicit consent for a specific purpose.
• Contract — to fulfil our contractual obligations to you as a patient.
• Legal obligation — to comply with legal and regulatory requirements.
• Legitimate interests — for purposes such as improving our services and ensuring the security of our systems.

Sharing with named categories.

If it is necessary to share your information with other parties, it is subject to strict controls and data-processing agreements. We may share your information with:

• Doctors, surgeons, physicians
• Laboratories
• Other medical centres
• Insurance companies

We may also disclose personal data to official authorities, courts, or other public bodies in response to a subpoena, court order, cooperation request from law enforcement, or as required by law. Where any such disclosure is required, we may raise or waive any legal objection or right available to us, in our sole discretion.

Within the EU, by default.

We store your personal data securely within the European Union. If we use service providers that store data outside the EU, we will ensure appropriate safeguards are in place — such as standard contractual clauses or your explicit consent.

Retention periods.

The period for which we keep your personal data depends on the nature of our legal obligations and any claims in the individual case:

• Medical records — retained for fifteen (15) years after the patient's last visit, or fifteen (15) years after the patient's passing.
• Service-related data — retained for as long as you remain associated with us, in compliance with relevant Cyprus laws.
• Consent-based data — retained until you withdraw consent, at which point it is deleted. You may withdraw consent at any time.

For further information on specific retention periods, please contact dpo@clinic82.com.

Under GDPR, you have eight rights.

You have the following rights regarding your personal data:

How to contact the DPO.

Individuals may exercise their rights by contacting us. We respond within thirty (30) days, with a limited right to extend this period by up to two months for complex requests, in line with GDPR Article 12(3). If we do not intend to comply with your request, we will state the reason.

You may be asked to provide information to confirm your identity in order to exercise your rights. These rights apply across the EU, regardless of where the data is processed and where the company is established.

Contact: dpo@clinic82.com

Technical and organisational measures.

We implement technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include encryption, access controls, secure storage, and confidentiality agreements with all third-party processors.

However, no method of transmission over the Internet or electronic storage is completely secure, and therefore we cannot guarantee absolute security.

First-party essential cookies only.

Our website uses only first-party essential cookies required for the site to function (e.g. theme preference, language selection). We do not use third-party tracking or advertising cookies. We do not run behavioural analytics on visitors.

Not directed at under-13s.

Our website is not directed at children under the age of 13, and we do not knowingly collect personal data from children. If we become aware that personal data has been collected from a child without parental consent, we will take steps to remove that information from our servers.

Your right to escalate.

If you believe your data-protection rights have been violated, you have the right to lodge a complaint with the Cyprus Office of the Commissioner for Personal Data Protection.

You may also contact us directly at dpo@clinic82.com.

Changes to this notice.

We may update this Privacy Notice from time to time. Significant changes will be notified by posting the revised notice on this page and, where appropriate, contacting you directly. The current version is dated at the top of this page.

Get in touch.