ZLIFE Privacy Policy

Last Reviewed: May 2026

Zen Vitality Partners FZ-LLC ("ZLIFE", "we", "us", "our") is committed to protecting the privacy and confidentiality of every individual who engages with us. This Privacy Policy explains how we collect, use, protect, and share personal information in connection with our website, programmes, and services.

We handle all personal and health-related information with the same standard of discretion we bring to every aspect of our work — with precision, integrity, and care. By using our website or engaging with our services, you confirm that you have read and understood this Policy.

1. Who We Are
ZLIFE is a longevity governance and health optimisation company operating from Dubai, United Arab Emirates.Legal entity: Zen Vitality Partners FZ-LLC, incorporated under the laws of the United Arab Emirates.We have designated a Data Privacy Lead responsible for overseeing the protection of personal and health data across all programmes and client engagements. All data-related requests, concerns, and enquiries are handled directly and confidentially by this designated contact.

Email: director@zlifeinnovation.com
Website: https://www.zlifeinnovation.com

This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of our website and services and are available at: https://www.zlifeinnovation.com

2. The Information We Collect
We collect personal information only where it is necessary, relevant, and proportionate to the purpose for which it is collected.

A. Information you provide directly
When you enquire about our services, engage in a consultation, or enrol in a programme, we may collect:
· your full name and contact details
· date of birth and identity verification information
· billing and payment information
· lifestyle, health, and wellbeing information provided during onboarding or programme delivery
· communication preferences and correspondence with our team

B. Health and biometric information
With your explicit prior consent, we may receive and process sensitive health information in connection with your programme, including:
· biomarker and blood test results
· laboratory analyses and clinical interpretations provided by independent licensed professionals
· lifestyle, nutrition, recovery, and wellbeing data relevant to your programme

All biological sample collection and clinical testing is performed exclusively by licensed independent medical providers who retain full clinical responsibility for their services. ZLIFE receives and processes such data solely for programme coordination and delivery purposes.

C. Information collected automatically
When you visit our website, we may collect certain technical information automatically, including:
· IP address and approximate location
· device type and browser information
· pages visited and time spent on our website
· referring website or search terms

This information is collected through cookies and similar technologies and is used solely to improve the performance and user experience of our website. Please see Section 12 for full details of our cookie practices.

D. Information received from third parties
In connection with programme delivery, we may receive information from:
· licensed hospitals, laboratories, and medical partners engaged for testing and clinical interpretation
· payment processors and financial institutions
· analytics platforms used to improve our website performance

3. How We Use Your Information
We use personal and health information solely for the following purposes:
· to deliver, coordinate, and personalise your ZLIFE programme
· to communicate with you and your designated representatives regarding your programme
· to securely transmit relevant health and biomarker data to licensed third-party specialists engaged for your programme, with your consent
· to integrate clinical insights into your personalised lifestyle programmeto process payments and manage your account
· to improve our services, website, and programme delivery
· to comply with our legal and regulatory obligations

We do not use your personal or health information for marketing profiling, automated decision-making, or any purpose unrelated to your programme and our legitimate business operations. We do not sell, rent, or trade your personal information under any circumstances.

4. Our Legal Basis for Processing
We process personal data on the following legal bases, depending on the nature of the information and the purpose of processing:
Explicit consent — for the collection, receipt, storage, and sharing of sensitive health and biometric data. You may withdraw this consent at any time by contacting: director@zlifeinnovation.comWithdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Contract performance — for processing necessary to deliver your programme in accordance with your signed Client Agreement or Family Programme Agreement.
Legitimate interests — for processing necessary to operate and improve our business, provided such interests are not overridden by your rights and freedoms. This includes website analytics and internal programme quality management.
Legal obligation — for processing required to comply with applicable law, regulation, or lawful authority requests.
Where we rely on legitimate interests as our legal basis, we conduct an internal assessment to ensure your rights are protected. You may request details of this assessment by contacting our Data Privacy Lead.

5. Sharing Your Information
We share personal and health information only where necessary and only with the following categories of recipients:Licensed medical and clinical partners — licensed medical professionals and clinical partners engaged for testing, analysis, or clinical interpretation as part of your programme. Such sharing occurs only with your explicit consent and is limited to what is necessary for programme delivery. All clinical professionals engaged in connection with your programme are bound by professional obligations of confidentiality in addition to contractual obligations imposed by ZLIFE. Programme delivery partners — independent professionals engaged to deliver specific programme services, including personal trainers, nutritionists, chefs, and wellbeing specialists. Information shared with these partners is limited to what is operationally necessary for precise and personalised programme delivery.Payment processors — for the secure processing of programme fees. Payment processors are contractually required to protect your financial information in accordance with applicable standards. Analytics and operational platforms — for website performance and operational management. These platforms are selected for their security standards and data protection commitments. Legal and regulatory authorities — where we are required by law or lawful authority to disclose information.
We will notify you of any such disclosure where we are legally permitted to do so. All third parties with whom we share personal information are subject to appropriate contractual obligations designed to protect the confidentiality and integrity of your data.We do not sell personal data. We do not share personal data for third-party marketing purposes.

6. International Data Transfers
ZLIFE serves clients across multiple countries and jurisdictions. In delivering our programmes, personal and health data may be transferred to and processed in countries outside the United Arab Emirates, including countries within the European Economic Area, the United Kingdom, and other jurisdictions where our licensed partners operate.
All international transfers of personal data are conducted subject to appropriate safeguards, including:
· contractual protections with all data recipients
· encryption of data in transit and at rest
· access controls limiting data to authorised personnel only
· compliance with applicable cross-border data transfer requirements under UAE PDPL, GDPR, and UK GDPR
Where transfers involve sensitive health data, additional safeguards are applied in accordance with the requirements of applicable data protection law.

7. Data Retention
We retain personal and health information only for as long as is necessary to fulfil the purposes for which it was collected. As a general principle:
· programme-related personal and health data is retained for a period of five (5) years following the conclusion of your programme, unless a shorter or longer period is required by applicable law
· financial and billing records are retained for the period required by applicable tax and financial regulations
· website analytics data is retained for no longer than twenty-four (24) months
· enquiry and communication records are retained for a period of two (2) years from the date of last contact where no programme engagement follows
You may request the deletion of your personal data at any time by contacting director@zlifeinnovation.com, subject to any legal retention obligations that may apply.

8. Data Security
We implement robust technical and organisational measures to protect personal and health data against unauthorised access, disclosure, alteration, or destruction.
These measures include:
· encryption of data at rest and in transit
· role-based access controls limiting data access to authorised personnel only
· secure, access-controlled storage platforms
· regular review of our data security practices and procedures
· contractual security obligations imposed on all third-party data recipients

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. Where required by applicable law, we will also notify the relevant supervisory authority within the timeframes prescribed by that law, including within 72 hours where required under GDPR. While we take every reasonable measure to protect your data, no system of data transmission or storage can be guaranteed to be entirely secure. We are committed to responding promptly and transparently to any security incident that may affect your personal information.

9. Your Rights
Depending on your country of residence and applicable law, you may have the following rights in relation to your personal data:Right of access — to request a copy of the personal data we hold about you.Right to rectification — to request correction of inaccurate or incomplete personal data.Right to erasure — to request deletion of your personal data, subject to applicable legal retention obligations.Right to restrict processing — to request that we limit the way we use your personal data in certain circumstances.Right to data portability — to receive your personal data in a structured, commonly used, and machine-readable format.Right to object — to object to processing based on legitimate interests.Right to withdraw consent — to withdraw consent to the processing of sensitive health data at any time, without affecting the lawfulness of processing carried out prior to withdrawal.To exercise any of these rights, please contact our Data Privacy Lead at director@zlifeinnovation.com.
We will respond to all requests within thirty (30) days of receipt. Where a request is complex or numerous, we may extend this period by a further sixty (60) days and will notify you accordingly. We will never discriminate against you for exercising your data rights.

10. Additional Rights for EU and UK Residents
If you are located in the European Union or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR respectively, including the right to lodge a complaint with your local data protection supervisory authority.In the EU, your relevant supervisory authority is the data protection authority of the EU member state in which you reside, work, or where an alleged infringement occurred.
In the UK, the relevant supervisory authority is the Information Commissioner's Office (ICO), which can be contacted at www.ico.org.uk
We encourage you to contact us directly in the first instance so that we can address your concerns promptly and confidentially.Automated decision-making: We do not use automated decision-making or profiling in a way that produces legal or similarly significant effects on individuals. All programme decisions are made by our team in consultation with licensed professionals and in direct communication with you.

11. Additional Rights for Saudi Arabian Residents
If you are located in the Kingdom of Saudi Arabia, your personal data is processed in accordance with the Saudi Arabian Personal Data Protection Law (PDPL) and its implementing regulations.You have the right to access, correct, and request deletion of your personal data. You also have the right to be informed of the purposes for which your data is processed and to withdraw consent at any time.Cross-border transfers of your personal data are conducted subject to the requirements of the Saudi PDPL, including appropriate safeguards to protect the confidentiality and integrity of your information.For all data-related enquiries, please contact our Data Privacy Lead at director@zlifeinnovation.com

12. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to ensure the website functions correctly, to analyse how it is used, and to improve the experience for our visitors.We use the following categories of cookies:Strictly necessary cookies — essential for the website to function. These cannot be disabled.Analytics cookies — used to understand how visitors interact with our website, such as which pages are visited most frequently. This data is aggregated and anonymous. These cookies are only placed with your consent.Preference cookies — used to remember your preferences and settings for future visits. These cookies are only placed with your consent.We do not use advertising or third-party marketing cookies.You may manage your cookie preferences at any time through our cookie settings banner or through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.For more information about the specific cookies we use, please contact us at director@zlifeinnovation.com

13. Children and Minor Participants
Our website and general services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18 through our website.Where minor family members participate in a ZLIFE family programme under the supervision and written consent of a parent or legal guardian, their participation and anyassociated data handling is governed exclusively by the terms of the ZLIFE Family Programme Agreement and the specific consent provided by their guardian. Such participation is managed entirely through our secure programme delivery process and not through our website.If you believe we have inadvertently collected personal data relating to a minor without appropriate guardian consent, please contact us immediately at director@zlifeinnovation.com and we will take prompt action to address this.

14. Third-Party Links
Our website may contain links to external websites or platforms. We are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any third-party websites you visit.

15. Updates to This Policy
We review this Privacy Policy regularly and may update it from time to time to reflect changes in our practices, services, or applicable law.Where we make material changes to this Policy, we will notify active clients directly by email prior to the changes taking effect. The updated Policy will always be available on our website with the effective date clearly stated.We will never retrospectively reduce your rights under this Policy without your explicit consent.

16. Contact Us
For any questions, requests, or concerns relating to this Privacy Policy or the handling of your personal data, please contact our Data Privacy Lead:
Email: director@zlifeinnovation.com
Website: https://www.zlifeinnovation.com

ZLIFE operates from Dubai, United Arab Emirates.We are committed to responding to all privacy enquiries promptly, confidentially, and with the same level of care we bring to every aspect of our client relationships.