Global Privacy Policy Jeevasa
1. Introduction
Jeevasa USA – Institute of Longevity Research, together with its applicable affiliates, hospitals, research centres, wellness centres and associated entities (“Jeevasa,” “we,” “our,” or “us”), respects the privacy, confidentiality and security of personal information entrusted to us.
This Global Privacy Policy explains how we collect, receive, use, process, store, transfer, disclose, protect and otherwise handle personal information when you:
- visit or interact with a Jeevasa website, mobile application or digital platform;
- contact or communicate with us;
- submit an enquiry, appointment request or eligibility assessment;
- receive healthcare, wellness or related services from a Jeevasa facility;
- participate in an approved research activity or study;
- interact with Jeevasa as a patient, prospective patient, attendant, caregiver, research participant, visitor, employee, applicant, consultant, healthcare professional, vendor, business partner or investor; or
- otherwise provide personal information to Jeevasa.
This Privacy Policy is intended to operate as a global privacy framework. Specific rights and obligations may vary according to your location and according to the Jeevasa entity processing your information.
Where applicable, our processing is intended to comply with relevant privacy and data-protection legislation, including the laws described in this Policy and other applicable national, state, provincial or local laws.
This Privacy Policy does not constitute consent by itself. Where applicable law requires consent, explicit consent, authorization or another specific lawful basis before particular processing takes place, Jeevasa will obtain or establish that lawful basis separately.
2. Who Is Responsible for Your Personal Information?
The entity acting as the data controller, Data Fiduciary, personal information processor, regulated entity or equivalent responsible organization will ordinarily be the Jeevasa entity that determines why and how your personal information is processed.
For the global website and central digital operations, the principal entity is:
Jeevasa – Institute of Longevity Research
Headquarters: 4660 La Jolla Village Drive, Suite 100 San Diego, California 92122 (USA)
Where a local Jeevasa hospital, research centre, wellness centre or affiliated organization independently determines the purposes and means of processing, that entity may act as a separate or joint controller as permitted by applicable law.
Additional local privacy notices may be provided where necessary.
3. Privacy Laws and Regulatory Framework
Depending upon the relevant Jeevasa entity, the nature of the processing and the location of the individual, this Policy may operate alongside applicable legislation including:
United States
Applicable U.S. federal and state privacy, health-information, consumer-protection and data-breach laws, which may include:
- the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), its Privacy, Security and Breach Notification Rules, where the relevant Jeevasa entity or activity is subject to HIPAA;
- applicable provisions of the Health Information Technology for Economic and Clinical Health Act (“HITECH”);
- the Federal Trade Commission Act;
- the FTC Health Breach Notification Rule, where applicable to health information that falls outside HIPAA;
- the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act and subsequent regulations, where applicable;
- Washington’s My Health My Data Act, where applicable; and
- other applicable U.S. state privacy, consumer-health-data, biometric, genetic-information and data-breach laws.
HIPAA does not automatically apply to every healthcare-related organization or every category of health information. HIPAA protections apply where the relevant entity or processing qualifies as a covered entity, business associate or otherwise falls within HIPAA’s regulatory scope.
European Economic Area
Where applicable, Jeevasa processes personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), together with applicable national data-protection and electronic-communications laws.
The GDPR may apply to organizations outside the European Union when they offer goods or services to individuals in the EU or monitor their behaviour within the EU.
United Kingdom
Where applicable, personal information relating to individuals in the United Kingdom is processed in accordance with the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003, and those laws as amended, including relevant amendments introduced by the Data (Use and Access) Act 2025.
Switzerland
Where applicable, processing relating to individuals in Switzerland is subject to the Swiss Federal Act on Data Protection (“FADP”) and related regulations. Health, genetic and certain biometric information are recognized as sensitive personal data under the FADP.
India
For processing relating to India, Jeevasa will comply with applicable provisions of:
- the Information Technology Act, 2000 and applicable rules thereunder, to the extent they remain applicable;
- the Digital Personal Data Protection Act, 2023 (“DPDP Act”);
- the Digital Personal Data Protection Rules, 2025; and
- applicable healthcare, medical-record, clinical, research and other sector-specific requirements,
in each case to the extent such provisions are in force and applicable from time to time.
India’s DPDP Act and DPDP Rules are subject to phased commencement, and Jeevasa will adapt its Indian privacy practices as relevant provisions become effective.
Asia-Pacific and Other Jurisdictions
Where Jeevasa offers services to, or processes personal information relating to, individuals in other Asian jurisdictions, applicable local privacy requirements will be observed. These may include, depending upon circumstances:
- the Personal Information Protection Law (“PIPL”) of the People’s Republic of China;
- Japan’s Act on the Protection of Personal Information (“APPI”);
- Singapore’s Personal Data Protection Act (“PDPA”);
- South Korea’s Personal Information Protection Act (“PIPA”); and
- other applicable national or regional privacy legislation.
Where different laws apply simultaneously, Jeevasa will seek to apply the requirement providing the appropriate level of protection required by the applicable legal framework.
4. Personal Information We May Collect
The personal information we collect depends on your relationship with Jeevasa and the services you request.
A. Identification and Contact Information
This may include:
- name;
- date of birth;
- age;
- gender, where relevant;
- residential or correspondence address;
- telephone or mobile number;
- email address;
- nationality or citizenship;
- emergency-contact details;
- caregiver or family-member details; and
- other information required to identify or communicate with you.
B. Healthcare and Medical Information
Where necessary for healthcare, consultation, eligibility assessment, treatment, research or related services, we may process information concerning:
- present and previous health conditions;
- symptoms;
- medical history;
- diagnoses;
- medication and prescription history;
- allergies;
- treatment history;
- clinical observations;
- laboratory and diagnostic reports;
- pathology information;
- imaging and radiology records;
- physician notes;
- consultation records;
- vital signs and clinical measurements;
- treatment plans and outcomes;
- rehabilitation or follow-up information; and
- other information relevant to your health or proposed treatment.
Health information receives enhanced protection where required by applicable law.
C. Genetic and Biometric Information
Where medically, scientifically or legally appropriate, Jeevasa may process genetic, genomic, biological or biometric information.
Such processing will be undertaken only where there is an appropriate clinical, research, identification, security or legal purpose and where any additional consent, authorization or other legal condition required for such information has been satisfied.
D. Official Identification Information
Where reasonably necessary and legally permitted, this may include:
- passport details;
- government identification details;
- Aadhaar information in India where legally permitted and necessary;
- PAN details;
- driving licence information;
- immigration or travel-document information; and
- other government-issued identifiers.
We seek to avoid collecting official identification information where it is not reasonably necessary.
E. Financial, Billing and Insurance Information
This may include:
- billing information;
- transaction information;
- insurance details;
- policy or claim information;
- reimbursement information;
- payment status;
- banking information where required; and
- payment-card information processed through authorized payment providers.
Where external payment processors are used, Jeevasa may not directly receive or retain complete payment-card credentials.
F. Website, Device and Technical Information
When you use our digital services, we may collect:
- IP address;
- browser type;
- operating system;
- device type and identifiers;
- referring and exit pages;
- date and time of access;
- website navigation and interaction information;
- approximate location derived from IP or device settings;
- cookie and similar technology identifiers;
- application diagnostic information; and
- security and fraud-prevention logs.
G. Communications
We may maintain records of communications made through:
- email;
- telephone;
- website forms;
- messaging services;
- video consultation platforms;
- patient-support channels;
- customer-service systems; and
- other authorized communication channels.
Calls or video interactions will be recorded only where permitted by applicable law and after any legally required notice or consent.
H. Photographs, Audio, Video and CCTV
Jeevasa facilities may use CCTV and other security systems for legitimate safety, security and access-control purposes.
Photographs, audio recordings or videos used for testimonials, education, publicity, research or marketing will be processed under an appropriate legal basis and with additional authorization where required.
I. Research Information
Where an individual participates in research, Jeevasa may process information specified in the applicable research protocol, participant information sheet, informed-consent documentation, ethics approval or other research documentation.
J. Employment and Recruitment Information
For employees, consultants and applicants, information may include:
- employment and education history;
- qualifications;
- professional licences;
- references;
- attendance;
- compensation and payroll data;
- bank information;
- tax information;
- performance information;
- training;
- workplace investigations or disciplinary records;
- benefits;
- immigration or work authorization information; and
- other information reasonably necessary for employment administration.
K. Vendor, Partner and Investor Information
This may include:
- business contact details;
- company information;
- agreements;
- invoices;
- banking information;
- compliance documentation;
- correspondence;
- investment-related information; and
- due-diligence records.
5. How We Obtain Personal Information
We may obtain information:
- directly from you;
- from your parent, guardian, caregiver or authorized representative;
- from physicians, hospitals, laboratories, pharmacies or other healthcare providers;
- from insurers or third-party administrators;
- through referrals;
- from research collaborators;
- through our websites, apps and digital systems;
- from authorized business partners and service providers;
- from employers where lawful;
- from government or regulatory authorities;
- from publicly available sources where lawful; and
- from other sources where collection is permitted by applicable law.
6. Why We Process Personal Information
Jeevasa may process personal information for purposes including:
- responding to enquiries;
- scheduling consultations and appointments;
- assessing potential eligibility for services or treatment;
- verifying identity;
- providing healthcare, medical, wellness and related services;
- coordinating patient care;
- maintaining medical and clinical records;
- communicating treatment or follow-up information;
- processing payments and insurance claims;
- maintaining patient relationships;
- operating laboratories or research programs;
- conducting ethically and legally authorized research;
- improving healthcare services and outcomes;
- performing quality assurance, clinical governance and audits;
- maintaining safety and security;
- preventing fraud or misuse;
- operating and securing our websites and digital systems;
- providing customer and patient support;
- administering employees, applicants and contractors;
- managing vendors and business relationships;
- meeting accounting, taxation and financial obligations;
- establishing, exercising or defending legal claims;
- responding to lawful regulatory, judicial or governmental requirements;
- protecting vital interests where urgent circumstances require;
- conducting analytics and service improvement;
- sending marketing communications where legally permitted; and
- fulfilling other purposes disclosed to you at or before collection.
We will not materially use personal information for an incompatible new purpose without establishing an appropriate legal basis and providing additional notice or obtaining consent where required.
7. Legal Bases for Processing
Where applicable law requires Jeevasa to identify a lawful basis for processing, we may rely upon one or more of the following:
- your consent;
- your explicit consent where required for sensitive or health information;
- performance of a contract or steps requested before entering a contract;
- compliance with a legal obligation;
- protection of your or another person’s vital interests;
- legitimate interests pursued by Jeevasa or another party, where those interests are not overridden by applicable privacy rights;
- provision and management of healthcare;
- public-health obligations where legally permitted;
- scientific or medical research performed with appropriate safeguards; or
- establishment, exercise or defence of legal claims.
For information considered a special category of personal data under the GDPR or equivalent laws—including health, genetic or qualifying biometric data—Jeevasa will also establish any additional legal condition required for such processing.
8. Healthcare, Genetic and Other Sensitive Information
Jeevasa recognizes that healthcare, genetic, biometric and other sensitive information requires a heightened level of protection.
We apply safeguards intended to restrict access to individuals who require information for authorized clinical, operational, research, compliance or other legitimate purposes.
Sensitive information will not be used for unrelated advertising or other materially incompatible purposes unless permitted by law and, where required, specifically authorized by the individual.
9. Research and Scientific Data
As an organization involved in longevity and healthcare research, Jeevasa may conduct or participate in scientific, medical, clinical or observational research.
Where personal information is used for research, Jeevasa may use techniques such as:
- anonymization;
- de-identification;
- pseudonymization;
- aggregation;
- coding of participant identities; and
- access controls.
Where required, research will be undertaken pursuant to applicable informed-consent requirements, research protocols, ethics or institutional-review processes and applicable law.
Research participants may receive a separate research privacy notice or informed-consent document. If such documentation establishes more specific requirements for particular research processing, that documentation will apply to that research activity.
10. United States Health Information and HIPAA
Certain healthcare activities conducted by Jeevasa in the United States may be subject to HIPAA.
Where Jeevasa acts as a HIPAA covered entity or business associate, protected health information (“PHI”) will be handled in accordance with applicable HIPAA requirements.
HIPAA applies to specified healthcare providers, health plans and healthcare clearinghouses, as well as qualifying business associates. It does not automatically govern all health information held by every healthcare-related company.
Where required by HIPAA, affected individuals will receive a separate HIPAA Notice of Privacy Practices describing permitted uses and disclosures of PHI and applicable patient rights.
This Global Privacy Policy is not intended to replace a legally required HIPAA Notice of Privacy Practices.
Health information that falls outside HIPAA may nevertheless be protected by other federal or state laws. For example, the FTC Health Breach Notification Rule applies in specified circumstances to certain vendors of personal health records and related entities that are not subject to HIPAA.
11. Cookies and Similar Technologies
Our websites and digital services may use cookies, software development kits, pixels, tags, web beacons, local storage and similar technologies.
These technologies may be used for:
- essential website functionality;
- security;
- remembering preferences;
- analytics;
- performance measurement;
- improving user experience; and
- advertising or campaign measurement where legally permitted.
Where applicable law requires prior consent for non-essential cookies or similar technologies, those technologies will not be activated until the appropriate consent has been obtained.
You may be able to modify your preferences through our cookie-management tool or your browser/device settings.
A separate Cookie Policy may provide further information about individual technologies, providers and retention periods.
12. Marketing Communications
Where legally permitted, Jeevasa may send information relating to services, healthcare programs, research, events or other Jeevasa activities.
Where consent is required for direct marketing, communications will be sent only after obtaining appropriate consent.
You may withdraw marketing consent or unsubscribe from marketing communications at any time.
Withdrawal from marketing communications will not prevent Jeevasa from sending essential administrative, healthcare, security or transactional communications.
13. How We Share Personal Information
Jeevasa does not sell personal information for monetary consideration as part of its ordinary business model.
We may disclose information where reasonably necessary to:
Healthcare Professionals
Doctors, nurses, therapists, pharmacists, laboratories, diagnostic providers and other authorized professionals involved in your healthcare.
Jeevasa Affiliates
Jeevasa hospitals, research centres, wellness centres and other affiliated entities where necessary for legitimate operational, clinical, research or administrative purposes and permitted by law.
Service Providers and Processors
Authorized third parties providing services including:
- cloud hosting;
- information technology;
- cybersecurity;
- communications;
- appointment management;
- laboratory services;
- payment processing;
- billing;
- insurance administration;
- professional advisory services;
- analytics; and
- document-management services.
Such providers are required to protect information in accordance with applicable contractual and legal requirements.
Insurers and Third-Party Administrators
Where necessary for insurance verification, pre-authorizations, claims or reimbursement.
Research Partners
Universities, research institutions, laboratories or other approved research collaborators where legally and ethically permissible.
Professional Advisers
Lawyers, auditors, accountants, insurers and other professional advisers subject to appropriate confidentiality obligations.
Government and Regulatory Authorities
Where disclosure is required or permitted by applicable law, regulation, court order, legal process, public-health obligation or lawful governmental request.
Corporate Transactions
Information may be disclosed in connection with a proposed or completed merger, restructuring, acquisition, investment, financing or transfer of business, subject to appropriate legal and confidentiality safeguards.
14. Sale, Sharing and Targeted Advertising Under U.S. Privacy Laws
Although Jeevasa does not ordinarily sell personal information for money, certain U.S. privacy laws may define “sale,” “sharing” or “targeted advertising” more broadly and may include certain disclosures made through advertising or digital analytics technologies.
Where our activities fall within such definitions, eligible users will be provided with applicable rights to opt out.
Where legally required, Jeevasa will also recognize qualifying browser-based opt-out preference signals, such as the Global Privacy Control or an equivalent legally recognized mechanism.
California law provides eligible consumers with rights concerning knowledge, deletion, correction, sale/sharing, sensitive personal information and non-discrimination, subject to statutory exceptions and applicability requirements.
Jeevasa does not knowingly sell consumer health information where such sale is prohibited by applicable law.
15. International Transfers of Personal Information
Because Jeevasa operates internationally, information may be accessed, stored or processed in countries different from the country in which it was originally collected.
Privacy laws and governmental-access rules vary between countries.
Where international transfers are regulated, Jeevasa will use a lawful transfer mechanism or other safeguard required by applicable law.
For transfers subject to the GDPR, such mechanisms may include adequacy decisions, European Commission Standard Contractual Clauses or another lawful transfer mechanism.
For transfers governed by UK data-protection law, Jeevasa may use UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved EU Standard Contractual Clauses or another legally permitted safeguard, together with required transfer assessments where applicable.
Where Chinese PIPL requirements apply, Jeevasa will comply with applicable cross-border transfer requirements, which may include prescribed security assessments, certification, contractual mechanisms and/or separate consent, depending upon the circumstances.
16. Data Retention
Jeevasa retains personal information only for as long as reasonably necessary for the purpose for which it was collected or subsequently lawfully processed, subject to applicable medical, scientific, contractual, legal and regulatory requirements.
Retention considerations include:
Medical and clinical records: retained according to applicable healthcare and medical-record requirements and legitimate continuity-of-care needs.
Research records: retained according to applicable research protocols, ethical requirements, funding requirements and legal obligations.
Billing, insurance, accounting and taxation records: retained for applicable statutory and audit periods.
Employment records: retained during employment and for applicable post-employment legal or administrative periods.
Enquiries and communications: retained for a period reasonably necessary to address the enquiry, maintain appropriate records and manage subsequent communications.
Website and technical information: retained according to security, analytics and cookie-retention requirements.
Legal or compliance records: retained for the period necessary to establish, exercise or defend legal rights or meet regulatory obligations.
Information may be retained for longer where required by law, court order, regulatory requirement, litigation hold, investigation or other lawful necessity.
Where personal information is no longer required, it will be securely deleted, destroyed, anonymized or otherwise handled in accordance with applicable requirements.
17. Information Security
Jeevasa uses administrative, organizational, physical and technical safeguards designed to protect personal information against:
- unauthorized access;
- unlawful disclosure;
- accidental loss;
- alteration;
- destruction;
- misuse; and
- unauthorized acquisition.
Depending upon the nature of the information and relevant systems, safeguards may include:
- access controls;
- role-based permissions;
- encryption;
- secure transmission;
- authentication controls;
- network and endpoint security;
- monitoring and logging;
- backup and recovery processes;
- staff confidentiality obligations;
- workforce privacy and security training;
- vendor-security requirements; and
- incident-response procedures.
No Internet-based or electronic system can be guaranteed to be completely secure. Jeevasa therefore continually assesses safeguards in light of the sensitivity of information, applicable risks and legal requirements.
18. Personal Data Breaches
Jeevasa maintains processes for identifying, investigating, containing and responding to suspected personal-data or information-security incidents.
Where an incident meets the legal threshold for regulatory or individual notification, Jeevasa will notify affected individuals and/or relevant authorities within the time and manner required by applicable law.
Applicable notification requirements may differ between jurisdictions.
19. Your Privacy Rights
Depending upon where you reside and the law applicable to the relevant processing, you may have one or more rights concerning your personal information.
These may include the right to:
- request confirmation of whether your information is being processed;
- obtain access to personal information;
- request correction of inaccurate information;
- request completion or updating of incomplete information;
- request deletion or erasure where legally available;
- withdraw consent where processing is based on consent;
- object to certain processing;
- request restriction of processing;
- obtain data portability where provided by applicable law;
- opt out of certain sales, sharing or targeted advertising;
- limit certain uses of sensitive personal information;
- challenge or seek human review of certain automated decisions;
- submit a grievance or complaint;
- appeal certain privacy-request decisions where applicable;
- nominate or appoint another person to exercise rights where permitted; and
- complain to a competent privacy or data-protection regulator.
These rights are subject to legal limitations and exceptions. For example, Jeevasa may be required to retain medical information despite a deletion request where healthcare, medical-record, legal, research or regulatory obligations require continued retention.
We may take reasonable steps to verify your identity before processing a privacy-rights request.
Authorized representatives may make requests where permitted by applicable law and where appropriate authorization can be verified.
20. EEA Privacy Rights
Where the GDPR applies, individuals may have rights including:
- information and transparency;
- access;
- rectification;
- erasure;
- restriction;
- data portability;
- objection; and
- safeguards concerning qualifying automated decision-making.
Individuals may also withdraw consent at any time where consent is the legal basis for processing. Withdrawal does not affect processing lawfully conducted before withdrawal.
Eligible individuals may lodge a complaint with the competent national data-protection supervisory authority.
21. United Kingdom Privacy Rights
Where UK data-protection legislation applies, eligible individuals may exercise rights available under the UK GDPR and Data Protection Act 2018, as amended.
Individuals may also have the right to raise concerns with the UK Information Commissioner or other competent authority.
The United Kingdom’s data-protection framework continues to include the UK GDPR and Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025.
22. Swiss Privacy Rights
Where the Swiss FADP applies, individuals may have rights including access to information concerning processing, correction and other remedies provided under Swiss law.
In appropriate circumstances, Swiss law also provides rights concerning data portability and automated individual decisions.
23. California Privacy Notice
If Jeevasa is subject to the CCPA in relation to a California consumer, that consumer may have rights including:
- the right to know categories and/or specific pieces of personal information collected;
- the right to request deletion, subject to exceptions;
- the right to correct inaccurate personal information;
- the right to opt out of qualifying sale or sharing;
- the right to limit certain uses or disclosures of sensitive personal information where applicable; and
- the right not to receive discriminatory treatment for exercising CCPA rights.
The categories of information described in Section 4 of this Policy may constitute personal information or sensitive personal information under California law depending upon the circumstances.
During the preceding 12 months, where applicable, Jeevasa may have disclosed relevant categories of personal information to service providers, contractors, healthcare providers, professional advisers, affiliated organizations and other recipients described in Section 13 for legitimate business purposes.
Whether any particular analytics or advertising disclosure constitutes “sale” or “sharing” under California law will be assessed according to the CCPA and applicable regulations. Where required, Jeevasa will provide legally compliant opt-out controls.
24. Washington Consumer Health Data
Washington’s My Health My Data Act may apply to certain consumer health data that is not otherwise governed by HIPAA and may apply to businesses located outside Washington when the statutory jurisdictional requirements are satisfied.
The law imposes specific requirements relating to collection, sharing and sale of consumer health data and grants qualifying consumers specific rights.
Where Jeevasa is subject to the Washington My Health My Data Act, Jeevasa will provide the legally required Consumer Health Data Privacy Policy and associated rights mechanisms.
The Washington law requires covered entities to publish a consumer health data privacy policy prominently on their homepage.
25. India Privacy Rights
For individuals whose information is subject to Indian law, Jeevasa will provide rights and protections required under Indian privacy legislation as and when applicable provisions are in force.
The DPDP Act, 2023 provides for statutory rights including access to information about personal data, correction and erasure, grievance redressal and nomination, subject to the Act’s provisions and commencement schedule.
Requests concerning personal information processed by Jeevasa in India may be submitted through the contact details provided below.
26. China
Where the Personal Information Protection Law of the People’s Republic of China applies to Jeevasa’s processing, additional safeguards may apply to:
- sensitive personal information;
- consent and separate consent requirements;
- transparency;
- individuals’ rights;
- overseas processing;
- local representation; and
- cross-border transfers.
PIPL can apply to certain processing conducted outside China where personal information of individuals within China is processed for offering products or services to them or analyzing/evaluating their behaviour.
Where legally required, Jeevasa will implement an appropriate Chinese cross-border transfer mechanism and/or designated local representative.
27. Singapore
Where Singapore’s PDPA applies, Jeevasa will observe applicable consent, purpose, notification, protection, retention, transfer, access, correction and breach-notification requirements.
Cross-border transfers subject to Singapore’s PDPA will be handled through mechanisms intended to ensure the required comparable standard of protection.
28. Japan
Where Japan’s APPI applies, personal information will be processed and transferred in accordance with applicable APPI requirements and guidance issued by Japan’s Personal Information Protection Commission.
Additional safeguards may apply to international transfers and certain categories of information.
29. South Korea
Where South Korea’s PIPA applies, Jeevasa will observe applicable requirements concerning privacy notices, lawful processing, security, cross-border transfers, individual rights and breach notification.
Applicable rights can include access, correction, deletion and suspension of processing or transmission, subject to the relevant statutory provisions.
30. Children and Minors
Jeevasa’s general websites are intended primarily for adults and are not designed to encourage children to submit personal information independently.
Healthcare or research services may, however, legitimately involve children or minors.
Where personal information concerning a child is processed, Jeevasa will comply with applicable parental-consent, guardian-authorization, capacity, healthcare-consent and child-data-protection requirements.
The applicable age threshold and authorization requirements vary between jurisdictions.
31. Automated Decision-Making and Artificial Intelligence
Jeevasa may use digital tools, analytics or artificial-intelligence-assisted technologies to support research, administration, service improvement or healthcare-related workflows.
Such technologies will not replace legally required professional judgement or human oversight where such oversight is required.
Where Jeevasa conducts solely automated processing that produces legal or similarly significant effects and applicable law provides additional rights, Jeevasa will provide the disclosures, safeguards, ability to contest decisions and/or human review required by law.
32. De-Identified, Anonymous and Aggregated Information
Where legally permitted, Jeevasa may create de-identified, anonymized, statistical or aggregated information for:
- research;
- scientific analysis;
- epidemiology;
- quality improvement;
- business intelligence;
- service development; and
- other lawful purposes.
Where information has been rendered genuinely anonymous such that an individual is no longer identifiable under the applicable legal standard, it may no longer constitute personal information under relevant privacy legislation.
Jeevasa will not attempt to re-identify information where doing so is prohibited by law or inconsistent with applicable contractual or ethical requirements.
33. Third-Party Websites and Services
Our websites may contain links to websites, applications or services operated independently by third parties.
Jeevasa does not control the privacy practices of independent third parties and is not responsible for their privacy notices or processing activities.
We encourage users to review the privacy practices of third-party services before providing personal information.
34. Exercising Your Rights
To exercise a privacy right or submit a privacy-related enquiry, please contact:
Jeevasa USA – Institute of Longevity Research
Privacy / Data Protection Contact:
Email: contact@jeevasa.com
Global Website: jeevasa.com
Registered U.S. Address: 4660 La Jolla Village Drive, Suite 100 San Diego, California 92122 (USA)
When submitting a request, please describe the request with sufficient information to allow us to identify the relevant records.
For security and confidentiality, we may require appropriate identity verification before releasing or modifying personal information.
35. Complaints and Regulatory Authorities
We encourage individuals to contact Jeevasa first so that we may investigate and address privacy concerns.
Where applicable law provides a regulatory complaint right, you may also contact the competent privacy, data-protection, healthcare or supervisory authority in your jurisdiction.
Nothing in this Privacy Policy is intended to restrict any statutory right to lodge a complaint with a competent authority.
36. Changes to This Privacy Policy
Privacy, healthcare, technology and data-protection laws continue to evolve.
We may therefore amend this Privacy Policy from time to time to reflect:
- changes in applicable law;
- regulatory guidance;
- changes to Jeevasa services;
- changes in technology;
- changes in data-processing practices; or
- improvements to our privacy and security program.
The current version will be published on our website together with its effective or last-updated date.
Where a material change legally requires additional notice or consent, we will provide that notice or obtain that consent before the relevant processing takes effect.
37. Relationship With Other Privacy Documents
This Global Privacy Policy should be read together with other privacy documents that may apply to a particular activity, including, where relevant:
- HIPAA Notice of Privacy Practices;
- Consumer Health Data Privacy Policy;
- Cookie Policy;
- research participant privacy notices;
- clinical or research informed-consent documents;
- patient consent and authorization forms;
- employee privacy notices; and
- jurisdiction-specific privacy supplements.
Where a more specific legally required notice applies to particular information or processing, that notice will govern that specific processing to the extent required by applicable law.
Contact Us
For privacy questions, complaints, requests or concerns:
Jeevasa USA – Institute of Longevity Research
Email: contact@jeevasa.com
Phone
Website: jeevasa.com
Registered Headquarters: 4660 La Jolla Village Drive, Suite 100 San Diego, California 92122 (USA)
Jeevasa is committed to protecting personal information with the same seriousness with which we approach healthcare, research and the trust placed in us by patients, participants, professionals and communities worldwide.