Version: September 2025 — 0.1
1. Who we are
LiveLong B.V. (Chamber of Commerce no. 95606572, VAT no. NL867201794B01), established at Prinses Marijkestraat 21, 1077XB Amsterdam, provides intermediary services in the field of blood testing, health consultations, and personalized health advice. LiveLong acts as the data controller for personal data collected via its platform, except for medical records maintained by independent healthcare providers, who act under their own responsibility.
2. What data we process
We may collect and process the following categories of personal data:
- Identification data (name, date of birth, contact details)
- Payment and billing information
- Health data obtained via blood tests, consultations, or questionnaires
- Platform usage data (login details, communications, technical logs)
3. Purposes and legal bases
We process your personal data for the following purposes:
- To provide our intermediary services (performance of a contract – Article 6(1)(b) GDPR)
- To facilitate blood tests and consultations with healthcare providers (performance of a contract)
- To comply with legal obligations (Article 6(1)(c) GDPR)
- With your explicit consent, to process health data and provide personalized health insights (Article 9(2)(a) GDPR)
4. Medical records and responsibilities
- Independent healthcare providers (BIG- and AGB-registered) remain the legal custodians of medical records and are subject to statutory retention obligations, including the minimum 20-year retention period under Dutch law.
- LiveLong may provide technical hosting and secure storage of these records on behalf of healthcare providers. This delegation does not affect the provider's legal responsibility for maintaining and safeguarding the medical record.
- In this context, LiveLong acts as a data processor for medical records, processing health data solely under the explicit instructions of the healthcare provider.
- LiveLong acts as data controller only for non-medical data such as account details, billing, and platform usage data.
5. Sharing of data
We only share your data with:
- Accredited laboratories and healthcare providers, insofar as necessary to deliver services
- IT and hosting providers supporting our platform
- Public authorities if required by law
All third parties are bound by confidentiality and data processing agreements.
6. International transfers
Your personal data is stored within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards (such as EU Standard Contractual Clauses).
7. Data retention
- Personal data processed by LiveLong for account and service purposes is retained only as long as necessary to fulfil the purposes for which it was collected, in line with statutory retention periods.
- Medical records maintained by healthcare providers are subject to their own statutory and professional retention obligations, not LiveLong's.
8. Your rights
You have the right to:
- Access your data
- Request correction or deletion
- Restrict or object to processing
- Withdraw consent at any time (without affecting prior lawful processing)
- Receive a copy of your data in a portable format (data portability)
Requests can be sent to: support@livelong.nl.
9. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. This includes logging access to electronic patient records (EPRs) and limiting access strictly to clients and independent healthcare providers.
10. Complaints
If you believe your data is processed unlawfully, you may contact us at support@livelong.nl or lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
11. Updates
We may amend this Privacy Statement from time to time. The latest version is always available on our website.