PRIVACY POLICY

1. Who we are

This website is operated by 199 Longevity Ltd (trading as Healthspan Ventures / healthspan.fund), a company registered in England and Wales under number 16267409.
Registered office: 199 Gloucester Terrace, London, W2 6LD, United Kingdom.
For all privacy matters you can contact us at join@healthspan.fund.

2. Scope of this Policy

This Privacy Policy explains how we collect, use, store and share personal information when you:

• visit healthspan.fund or any sub-domain we control;
• submit a company, request investor access, subscribe to updates, or otherwise provide your data to us;
• interact with us on email, X, or other channels in connection with Healthspan Ventures.

It applies to all visitors, users and others who access the site (“you”).

3. What data we collect

Do not submit sensitive personal data, patient data, or confidential technical information unless we have agreed an appropriate process in writing.

4. Why we process your data & legal grounds

5. Cookies & analytics

We use first-party cookies for session management and to remember your preferences.

We also employ privacy-focused analytics (currently Plausible) that aggregate visitor behaviour without setting tracking cookies or collecting personal identifiers. You can disable cookies via your browser; essential site functions will remain available.

6. How we share data

• Service providers – vetted partners who host servers, email our newsletters, manage forms, or support due diligence workflows. They receive only the information necessary to perform their function and must follow our security instructions.
• Fund and compliance providers – if a private fund process is opened, we may share relevant data with fund administrators, AML/KYC providers, banks, auditors, tax advisers, legal advisers, and other regulated or professional service providers.
• Legal or regulatory bodies – where required to comply with the law, court order or regulator.
• Corporate events – if we merge, sell assets or undergo restructuring, data may transfer to the new entity under the same protections.

We never sell your personal information.

7. International transfers

Our main servers are located in the United Kingdom. Some providers may operate in countries outside the UK or EEA. Whenever data leaves the UK/EEA we rely on an adequacy decision or on Standard Contractual Clauses approved by the UK ICO and European Commission.

8. Data retention

We keep personal data only as long as needed for the purposes set out above:

• Inbound and update emails: until you unsubscribe or 24 months after last interaction, whichever is earlier.
• Portal, investor, founder, diligence, AML/KYC, source-of-funds, source-of-wealth, subscription, and fund records: as long as needed for relationship management, regulatory, audit, tax, anti-money-laundering, or legitimate business purposes.
• Technical logs: up to 12 months, unless required for security investigations.

Data scheduled for deletion is permanently erased or fully anonymised.

9. Security measures

We use industry-standard TLS encryption in transit, role-based access controls, periodic penetration testing and encrypted backups. No transmission method is 100 % secure; if we detect a breach that poses a high risk to you, we will notify you and the relevant authority without undue delay.

10. Your rights

Under UK GDPR you can:

1. Access the personal data we hold about you.
2. Rectify inaccurate or incomplete data.
3. Erase your data (“right to be forgotten”) in certain circumstances.
4. Restrict or object to processing where we rely on legitimate interests.
5. Port data to another controller.
6. Withdraw consent at any time where processing is based on consent.

To exercise these rights, email join@healthspan.fund. We will respond within one month. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk).

11. Children

healthspan.fund is not directed at individuals under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this Policy

We may update this Privacy Policy to reflect operational, legal or regulatory changes. New versions will be posted on this page and, where changes are material, we will notify you by email.

13. Contact

For any questions about this Policy or your personal data, please write to: