1. Privacy Policy
1.1 Data Collection & Purposes
We collect personal data when you:
- Contact us (via phone, email, web forms): name, email, phone, geolocation.
- Create an account: name, email, geolocation.
- Use or purchase products/services: name, email.
- Browse our site: IP address, browser and usage data, geolocation.
- Receive personalized offerings: geolocation.
- Connect a wearable: wearable data.
- Engage with the Platform: behavioral input and individual survey responses.
1.2 Legal Basis
- Contractual necessity for Services, communication, and account management.
- Legitimate interest for analytics, marketing, communication, security, fraud detection, service/platform improvement, and research.
- Legal obligations: regulatory, security, compliance.
- Consent, where required.
1.3 Retention
Personal data is kept for as long as needed to render the Services, and in any event until service termination; some data is retained for up to one month post-termination, or longer where required by law.
1.4 Cookies & Tracking
We use cookies and tracking tools (e.g., Hotjar, Plausible Analytics) for essential functionality, analytics, personalization, and marketing. Detailed cookie settings and consent mechanisms are provided.
1.5 Disclosure of Personal Data
We may share your personal data with: law enforcement or regulatory agencies when legally required; providers of Third-Party Services; and third-party service providers, including Google under a data processing agreement.
1.6 Security
We implement technical and organizational measures, including access control, encryption, firewalls, internal confidentiality, and regular audits/backups, to protect your data. Only authorized personnel have access.
1.7 Third-Party Sites and Services
This policy does not apply to external sites linked from ours (including the providers of Third-Party Services). We recommend reviewing their privacy notices before use.
1.8 Changes to This Policy
We reserve the right to make updates. When significant, we will notify you; otherwise, please review this policy periodically.
1.9 Contact
Privacy questions: support@alively.com.
1.10 Our Representatives in the EU/EEA and the UK
The controller of your personal data is Healthspan Holding Corporation, trading as Alively, a company incorporated in Delaware, USA.
Healthspan Holding Corporation (trading as Alively) has appointed DataRep as its Data Protection Representative under the General Data Protection Regulation (EU) 2016/679 in the EU/EEA, and under the Data Protection Act 2018 / UK GDPR in the United Kingdom. DataRep is also appointed as Alively's Legal Representative under the Digital Services Act (Regulation (EU) 2022/2065) in the EU/EEA.
Our Representative is Data Protection Representative Limited (trading as DataRep), 77 Camden Street Lower, Dublin, D02 XE80, Ireland, registered in Ireland under number 616588.
Data protection matters (GDPR and UK GDPR)
To raise a question or exercise your rights in respect of your personal data, you may contact DataRep by:
- emailing datarequest@datarep.com, quoting Alively in the subject line;
- using the online webform at www.datarep.com/data-request; or
- posting your inquiry to DataRep at whichever of the addresses listed below is most convenient for you.
Digital Services Act matters
To contact our DSA Legal Representative — for example to report illegal content — you may:
- email digitalrequest@datarep.com, quoting Alively in the subject line;
- use the online webform at www.datarep.com/data-request;
- write to DataRep, The Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland; or
- call +353 (1) 919 8899 (DataRep will ask you to follow up by email to confirm your request).
Please note: when writing to any of these addresses, it is essential that you mark your letter for 'DataRep' and not for 'Alively', or your inquiry may not reach us. Please refer clearly to Alively within your correspondence. On receiving your correspondence, Alively is likely to request evidence of your identity, so that your personal data is not disclosed to anyone other than you.
DataRep can only assist with data protection and Digital Services Act matters. For questions about your Alively account, our products, or our services, please contact us directly at support@alively.com.
DataRep contact locations
| Country | Address |
|---|---|
| Austria | DataRep, City Tower, Brückenkopfgasse 1/6. Stock, Graz, 8020, Austria |
| Belgium | DataRep, Rue des Colonies 11, Brussels, 1000 |
| Bulgaria | DataRep, 132 Mimi Balkanska Str., Sofia, 1540, Bulgaria |
| Croatia | DataRep, Ground & 9th Floor, Hoto Tower, Savska cesta 32, Zagreb, 10000, Croatia |
| Cyprus | DataRep, Victory House, 205 Archbishop Makarios Avenue, Limassol, 3030, Cyprus |
| Czech Republic | DataRep, Platan Office, 28. Října 205/45, Floor 3&4, Ostrava, 70200, Czech Republic |
| Denmark | DataRep, Lautruphøj 1-3, Ballerup, 2750, Denmark |
| Estonia | DataRep, 2nd Floor, Tornimae 5, Tallinn, 10145, Estonia |
| Finland | DataRep, Luna House, 5.krs, Mannerheimintie 12 B, Helsinki, 00100, Finland |
| France | DataRep, 72 rue de Lessard, Rouen, 76100, France |
| Germany | DataRep, 3rd and 4th floor, Altmarkt 10 B/D, Dresden, 01067, Germany |
| Greece | DataRep, Ippodamias Sq. 8, 4th floor, Piraeus, Attica, Greece |
| Hungary | DataRep, President Centre, Kálmán Imre utca 1, Budapest, 1054, Hungary |
| Iceland | DataRep, Laugavegur 13, 101 Reykjavik, Iceland |
| Ireland | DataRep, The Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland |
| Italy | DataRep, Viale Giorgio Ribotta 11, Piano 1, Rome, Lazio, 00144, Italy |
| Latvia | DataRep, 4th & 5th floors, 14 Terbatas Street, Riga, LV-1011, Latvia |
| Liechtenstein | DataRep, City Tower, Brückenkopfgasse 1/6. Stock, Graz, 8020, Austria |
| Lithuania | DataRep, 44A Gedimino Avenue, 01110 Vilnius, Lithuania |
| Luxembourg | DataRep, BPM 335368, Banzelt 4 A, 6921, Roodt-sur-Syre, Luxembourg |
| Malta | DataRep, Tower Business Centre, 2nd floor, Tower Street, Swatar, BKR4013, Malta |
| Netherlands | DataRep, Cuserstraat 93, Floor 2 and 3, Amsterdam, 1081 CN, Netherlands |
| Norway | DataRep, C.J. Hambros Plass 2c, Oslo, 0164, Norway |
| Poland | DataRep, Budynek Fronton ul Kamienna 21, Krakow, 31-403, Poland |
| Portugal | DataRep, Torre de Monsanto, Rua Afonso Praça 30, 7th floor, Algès, Lisbon, 1495-061, Portugal |
| Romania | DataRep, 15 Piaţa Charles de Gaulle, nr. 1-T, Bucureşti, Sectorul 1, 011857, Romania |
| Slovakia | DataRep, Apollo Business Centre II, Block E / 9th floor, 4D Prievozska, Bratislava, 821 09, Slovakia |
| Slovenia | DataRep, Trg. Republike 3, Floor 3, Ljubljana, 1000, Slovenia |
| Spain | DataRep, Calle de Manzanares 4, Madrid, 28005, Spain |
| Sweden | DataRep, S:t Johannesgatan 2, 4th floor, Malmo, SE - 211 46, Sweden |
| United Kingdom | DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom |
2. Data Security Policy
Alively implements appropriate technical, organizational, and administrative safeguards to protect personal data in accordance with applicable privacy laws and industry practices. These measures include:
- Data encryption in transit and at rest.
- Access controls limiting data access to authorized personnel.
- Security monitoring and incident-response procedures.
- Data retention and disposal procedures.
- Vendor security assessments where applicable.
Alively will maintain these safeguards consistent with applicable legal requirements and will notify affected parties of any security incidents in accordance with applicable law.