1. Data controller
LONGEVITA HEALTH is the controller of personal information used for Longevita Pets. Our address is Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. Company/licence number: 88697.
Privacy questions and rights requests should be sent to dataprotectionofficer@longevitapets.com. This is our data-protection contact address.
2. Information we collect
- Identity and contact information, including name, email, telephone number, date of birth, address and postcode.
- Club information, including membership number, secure passcode hash, points, membership-card status and account history.
- Pet information, including name, type, breed and date of birth.
- An optional selection of ESA Registry or Assistance Dogs UK and the 12-digit registration number supplied by the member or customer. We do not verify that number against an external registry.
- Order and fulfilment information, including products, amounts, delivery address, tracking reference, status and PayPal transaction identifiers. We do not receive or store full payment-card details entered with PayPal.
- Messages, enquiries, returns information and other communications.
- Technical and security information such as IP address, request logs, session information and events needed to protect the service.
3. How we use information and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Create and administer club membership, orders, delivery, returns, points and membership cards. | Performance of a contract or steps requested before a contract. |
| Provide customer service and respond to enquiries. | Contract and legitimate interests in supporting customers. |
| Process payments and prevent fraud or misuse. | Contract and legitimate interests in secure trading. |
| Keep accounting, transaction and compliance records. | Legal obligation and legitimate interests. |
| Secure, diagnose and improve the website and services. | Legitimate interests in reliable and secure operations. |
| Send transactional emails about membership, payments, account changes, orders and dispatch. | Contract, security and legitimate interests. These are not marketing emails. |
We do not currently use club or order information for unsolicited marketing. If marketing is introduced, we will provide the legally required choice and update this policy.
4. Who receives information
We share only what is reasonably necessary with service providers involved in payment processing, website and database hosting, email delivery, packing, tracked postage, customer support, professional advice, fraud prevention and legal compliance. PayPal processes payment information under its own privacy terms.
We may disclose information where required by law, to protect customers or the service, or in connection with a legitimate business reorganisation subject to appropriate safeguards.
Providing an organisation registration number does not mean we share the member’s full account information with ESA Registry or Assistance Dogs UK. Allocation reporting will be limited to information reasonably required to account for the five-per-cent allocation.
5. International processing
LONGEVITA HEALTH is established in the United Arab Emirates, while customers, returns handling and fulfilment are in the United Kingdom and technical service providers may operate in the United Kingdom or European Economic Area. Personal information may therefore be accessed or processed outside the United Kingdom.
Where UK data-protection law requires safeguards for an international transfer, we use contractual, organisational and technical measures appropriate to the transfer and service involved. Contact us for further information about safeguards relevant to your information.
6. Retention
- Membership information is normally kept while the account is active and for up to 24 months after closure, except where transaction or legal records must be retained longer.
- Order, payment, refund and accounting records are normally retained for up to seven years.
- Customer-service and returns correspondence is normally retained for up to 24 months after the matter is closed, unless needed for a claim or legal obligation.
- Routine security logs are normally retained for up to 90 days, unless an incident requires longer investigation.
We may keep information longer where required by law, for an unresolved dispute, fraud prevention or the establishment, exercise or defence of legal claims.
7. Security
We use access controls, encrypted connections, hashed passcodes, restricted administration, logging and other proportionate safeguards. No internet service can guarantee absolute security. Customers should keep membership passcodes private and contact us if they suspect unauthorised access.
8. Your rights
Depending on the circumstances, UK data-protection law gives rights to be informed, access personal information, correct inaccurate information, request erasure, restrict processing, receive portable data, object to certain processing and challenge qualifying automated decisions. Some rights are limited where information must be retained for legal, contractual or security reasons.
Send a request to dataprotectionofficer@longevitapets.com. We may request information needed to verify identity. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
9. Automated decisions and children
We do not use personal information to make solely automated decisions with legal or similarly significant effects. Club membership and purchases are intended for adults aged 18 or over.
10. Cookies and changes
See our Cookie Policy for information about essential sessions and PayPal checkout. We may update this policy when services or laws change. The effective date will be shown at the top.