Longaevitas Health
Log In
← Back to home

Longaevitas Health

Legal

Longaevitas Health is a technology platform for doctor-led personalised preventative care and longevity planning. These documents set out how the platform works, how your data is handled, and the medicolegal boundaries of the service.

PAIA MANUAL

LONGAEVITAS HEALTH (PTY) LTD, PROMOTION OF ACCESS TO INFORMATION ACT MANUAL

Last Updated: 28 July 2026 Entity: Longaevitas Health (Pty) Ltd CIPC Number: 2025/413084/07 Registered Address: 18 Kent Road, Dunkeld West, Randburg, 2196

1. INTRODUCTION

This Manual is published in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 ("PAIA"), read with the Protection of Personal Information Act 4 of 2013 ("POPIA"). It sets out the records held by Longaevitas Health (Pty) Ltd, the procedure for requesting access to those records, and the prescribed information about the personal information we process.

Longaevitas Health (Pty) Ltd operates a wellness and screening platform for doctor-led longevity planning and preventative care. We process health information for wellness screening and risk stratification, and to enable independent registered doctors to interpret those results. We are not a medical scheme, scheme administrator or healthcare broker, and diagnosis and treatment remain with the member and their own GP or specialist. This shapes the records we hold and the purposes described below.

2. INFORMATION OFFICER

Information Officer: The Chief Executive Officer, Longaevitas Health (Pty) Ltd Deputy Information Officer: The Chief Medical Officer Email: support@longaevitashealth.com Postal and physical address: 18 Kent Road, Dunkeld West, Randburg, 2196

The Information Officer is registered with the Information Regulator (South Africa) in accordance with section 55(2)(a) of POPIA and the Regulator's registration requirements. Requests, complaints and data subject requests may be sent to the address above.

3. GUIDE BY THE INFORMATION REGULATOR

A guide on how to use PAIA has been compiled by the Information Regulator in terms of section 10 of PAIA and is available at https://www.justice.gov.za/inforeg/.

4. RECORDS HELD

Longaevitas Health holds records relating to: company governance and statutory filings; employee, contractor and independent practitioner records; member account, assessment, body measurement and biomarker data; clinical records relating to Doctor-led VitaPrint Analysis, doctor notes, referral letters and sign-off; membership and VitaPrint Cycle subscription records; Ambassador registrations, referrals, commissions and payouts; wellness partner and retailer agreements; financial, tax and payment records; supplier and service-provider agreements; and IT system, access and security logs.

Certain records are available in terms of other legislation, including the Companies Act 71 of 2008, the Income Tax Act 58 of 1962, the Tax Administration Act 28 of 2011, the Value Added Tax Act 89 of 1991, the Basic Conditions of Employment Act 75 of 1997, the Labour Relations Act 66 of 1995, the National Health Act 61 of 2003 and the Health Professions Act 56 of 1974.

5. CATEGORIES OF PERSONAL INFORMATION PROCESSED

We process the following categories of personal information:

  • Members: identification and contact details, demographic information, account credentials and preferences, health assessment answers, body measurements, biomarker and laboratory results, uploaded reports, clinical correspondence, subscription and payment metadata, and technical and usage data.
  • Practitioners and staff: identity, HPCSA registration, qualifications, banking and payroll details, performance and payout records.
  • Ambassadors: identity and contact details, referral activity, banking details and commission records.
  • Suppliers and service providers: contact details, contracting and billing information.

Health information constitutes Special Personal Information under POPIA and is processed on the basis of express consent and section 32 of POPIA.

6. CATEGORIES OF RECIPIENTS

Personal information may be provided to: the HPCSA-registered doctors and clinical teams involved in a member's analysis; pathology laboratories and sample-collection partners; healthcare professionals to whom a member is referred, on the member's instruction; operators appointed under written operator agreements (cloud hosting and database services, payment processors, email and messaging providers, analytics and artificial intelligence processing services); professional advisers; and regulators, professional bodies or law-enforcement agencies where required by law.

7. PLANNED CROSS-BORDER TRANSFERS

Certain operators process personal information outside the Republic of South Africa: cloud application hosting and edge delivery (European Union, United States); managed database, authentication, storage and backup services (European Union, with support access from the United States); artificial intelligence processing for document extraction and drafting support (United States, European Union); transactional and authentication email delivery (United States, European Union); payment processing (South Africa, with card-scheme processing that may involve the United States); and product analytics and error monitoring (European Union, United States).

Such transfers are made only where the safeguards required by section 72 of POPIA are in place, including binding contractual terms providing an adequate level of protection substantially similar to POPIA and equivalent restrictions on onward transfer. Laboratory testing and all clinical review take place in South Africa. A current list of operators and their processing locations is available from the Information Officer on request.

8. INFORMATION SECURITY MEASURES

Longaevitas applies technical and organisational measures appropriate to the risk, including encryption in transit and at rest, role-based access control, least-privilege database policies, audit logging of access to health information, multi-factor authentication for privileged accounts, written confidentiality undertakings, operator agreements, periodic vulnerability review and a documented security compromise response procedure aligned to section 22 of POPIA.

9. REQUESTING ACCESS

Requests for access to records must be made on the prescribed Form 2 and submitted to the Information Officer at the contact details above. Requests must identify the record, the form of access required, and the right the requester seeks to exercise or protect. Prescribed fees apply as published in the PAIA regulations. Decisions are issued within 30 days, extendable in the circumstances permitted by PAIA, and reasons are given for any refusal together with details of internal and judicial remedies.

A data subject seeking access to, correction or deletion of their own personal information may instead use the request procedure in the Privacy Policy, or the prescribed POPIA forms, at no charge for a first request.

10. GROUNDS FOR REFUSAL

Access to records may be refused on the grounds set out in Chapter 4 of PAIA, including mandatory protection of the privacy of third parties, medical confidentiality, commercial information of third parties, records protected by legal privilege, and records containing confidential clinical information about another person.

11. INFORMATION REGULATOR

Information Regulator (South Africa) JD House, 27 Stiemens Street, Braamfontein, Johannesburg Email: complaints.IR@justice.gov.za and PAIAComplaints@inforegulator.org.za Website: https://www.justice.gov.za/inforeg/

12. AVAILABILITY AND REVIEW

This Manual is available free of charge on the Longaevitas website and on request from the Information Officer. It is reviewed at least annually.

© 2026 Longaevitas Health (Pty) Ltd. All rights reserved.