Legal
Privacy Policy
Last updated — 21 April 2026
This policy explains what personal data we collect when you interact with We Are Longevity Collective, how we use it, and the rights you have under UK data protection law.
1. Who we are
The data controller is We Are Longevity Collective, operated by Emma Copeland (sole trader), 14 Hatton Court, Lubbock Road, Chislehurst, BR7 5JQ. Contact: emma@wearelc.co.
ICO registration number: [TBC — to be added before public launch].
2. What personal data we collect
- Booking details — first name, last name, email, phone, and any note you provide, via our booking form.
- Payment data — payments are processed by Stripe. We do not see or store your full card number. We receive a confirmation and a reference to the transaction.
- Medical intake — during your pre-event consultation, our practitioners will ask about relevant medical conditions, medications, allergies, and pregnancy status, so we can assess suitability. This is special-category data and is only used for that purpose.
- Email correspondence — any messages you send us and our replies.
- Technical data — server logs kept by our hosting provider (Vercel) and privacy-friendly, aggregate usage analytics. We do not use tracking cookies for advertising.
3. How we use your data and our legal bases
- To deliver your booking and the Experience. Legal basis: performance of a contract.
- To take payment and deal with refunds. Legal basis: performance of a contract.
- To answer your enquiries and provide customer support. Legal basis: legitimate interest.
- To meet our legal and accounting obligations. Legal basis: legal obligation.
- For safety and treatment-suitability decisions (medical intake). Legal basis: explicit consent, which you give at the pre-event consultation.
- Marketing emails — only if you separately opt in. You may withdraw consent at any time via the unsubscribe link or by emailing us. Legal basis: consent.
4. Who we share your data with
We use a small number of trusted processors to operate the service. They only process your data on our instructions and under appropriate contractual safeguards.
- Stripe — payment processing.
- Upstash — booking and capacity storage.
- Vercel — website hosting and infrastructure logs.
- Amazon Web Services (SES) — transactional email delivery.
- GoHighLevel — customer relationship management (where used).
- Practitioners and suppliers delivering the Experience — only data necessary for them to perform their role.
We do not sell your personal data or share it with third parties for their own marketing.
5. International transfers
Some of our processors (notably Stripe and Amazon Web Services) may transfer data outside the UK, including to the United States. Where they do, they rely on appropriate safeguards such as the UK Addendum to the EU Standard Contractual Clauses and the UK extension to the EU–US Data Privacy Framework.
6. How long we keep your data
- Booking and payment records are retained for six years after the event, to meet UK tax and accounting obligations.
- Medical intake records are retained only for as long as reasonably necessary to provide the Experience and any post-event follow-up, and are then securely deleted.
- Marketing email data is retained until you unsubscribe or we decide the list is no longer active.
7. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- ask us to correct data that is inaccurate or incomplete;
- ask us to delete your data, where there is no overriding legal reason to keep it;
- restrict or object to certain types of processing;
- receive a portable copy of data you provided to us;
- withdraw consent at any time, where processing is based on consent;
- complain to the Information Commissioner’s Office at ico.org.uk if you believe we have mishandled your data.
To exercise any of these rights, email emma@wearelc.co.
8. Cookies
We do not use advertising cookies or third-party tracking cookies. The site uses strictly necessary cookies and privacy-friendly, aggregate analytics that do not identify individual visitors.
9. Children
The Experience is not directed at anyone under 18, and we do not knowingly collect personal data from children.
10. Changes to this policy
We may update this policy as the service evolves. The “last updated” date above indicates when it was most recently revised.
11. Contact
For any question about this policy or your personal data, contact Emma Copeland at emma@wearelc.co.