Privacy Policy
1. Data Controller
Sadaf Mubeen Mirza
longyxhealth
Albert-Einstein-Ring 39, 76726 Germersheim, Rheinland-Pfalz
Email: info@longyxhealth.com
2. Types of Data Collected
We collect the following types of data when you use the contact form on this website:
- Personal identification data (name, email address)
- Your message content and stated area of interest
- Technical access data (IP address, browser, timestamp — collected by our hosting provider)
We do not collect health data through this website at this stage. Any health information you voluntarily include in your message will be treated with strict medical confidentiality.
The waitlist form on this website collects a 'Primary Interest' field which may indicate health concerns (for example: Fatigue or Burnout, Hormonal Health). This constitutes health-adjacent data and is treated as special category personal data under GDPR Article 9. It is processed on the basis of your explicit consent (Article 9(2)(a)), given when you check the consent box and submit the form. This data is used solely to understand the clinical relevance of your enquiry and to notify you at launch. It is not shared with third parties and is deleted upon your request.
3. Legal Basis
Processing of your contact form data is based on:
- Art. 6(1)(a) GDPR — your consent (submitting the form)
- Art. 6(1)(b) GDPR — steps taken prior to entering a contract (responding to your enquiry)
4. Purpose of Processing
- Responding to your enquiry or discovery call request
- Scheduling consultations
- General communication about longyxhealth services
5. Data Retention
Contact form submissions and correspondence are retained for up to 3 years unless a physician-patient relationship is established, in which case medical record retention obligations apply (10 years, § 630f BGB). You may request deletion at any time by emailing info@longyxhealth.com.
6. Third-Party Services & Data Transfers
- Cloudflare, Inc. — Website hosting and DNS (101 Townsend St, San Francisco, CA 94107, USA). Your IP address and access data may be processed on US servers. Data transfers are protected by EU Standard Contractual Clauses (SCCs). Privacy policy: cloudflare.com/privacypolicy
- Web3Forms — Form submission handling. When you submit the waitlist form, your name, email, and stated interest are transmitted to Web3Forms servers and then forwarded to longyxhealth. Privacy policy: web3forms.com/privacy
- Google LLC — Google Fonts are loaded from Google servers. Your IP address is transmitted to Google when you access this page. Google privacy policy: policies.google.com/privacy
We do not use analytics, tracking cookies, or advertising technologies on this website.
7. Cookies
This website does not set any cookies. No tracking, analytics, or advertising cookies are used.
8. Your Rights under GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data (subject to legal retention obligations)
- Restriction — request that we limit processing of your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — at any time, without affecting the lawfulness of prior processing
To exercise any of these rights, contact: info@longyxhealth.com
9. Supervisory Authority
You have the right to lodge a complaint with the data protection supervisory authority for Rhineland-Palatinate:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34, 55116 Mainz
Phone: +49 6131 208-2449
Email: poststelle@datenschutz.rlp.de
www.datenschutz.rlp.de
10. Changes to This Policy
This privacy policy may be updated as the longyxhealth practice expands and new services or third-party tools are added. The current version is always available at this page. Last updated: May 2026.