Privacy Policy
1. Data controller
- Controller: Plentir Tech, S.L.
- Registered address: C/ de Bárbara de Braganza, 10. Centro, 28004 Madrid, Spain
- Email: info@plentir.com
2. What data do we process?
Depending on your relationship with Plentir, we may process:
- Identifying and contact data: first name, surname, email address, postcode, year of birth, city.
- Profile and interest data: sex, preferences or areas of health that concern you, and the answers you provide in our wellbeing questionnaires.
- Health data (special category, art. 9 GDPR): lab results, indicators and other health information you choose to share within Plentir's services.
- Browsing data: IP address, cookie identifiers and site usage data (see the Cookie Policy).
Health data is only processed with your explicit consent and under reinforced security measures.
3. Purposes and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Managing your sign-up to the early-access list and sending you updates | Consent (art. 6(1)(a)) |
| Providing and personalising the health and longevity services | Performance of a contract (art. 6(1)(b)) |
| Processing health data for support and recommendations | Explicit consent (art. 9(2)(a)) |
| Handling requests and enquiries (including applications from professionals) | Consent / legitimate interest (art. 6(1)(a) / 6(1)(f)) |
| Web analytics and improving the site | Consent (cookies) |
| Complying with legal obligations | Legal obligation (art. 6(1)(c)) |
4. Retention period
We keep your data for as long as the relationship lasts and, once it ends, for the periods legally required to address any liabilities. Data processed on the basis of consent is kept until you withdraw it.
5. Recipients and processors
We do not disclose your data to third parties except where legally required. To provide the service we may rely on suppliers acting as data processors (hosting, email marketing and web analytics tools, and collaborating healthcare professionals), with whom we sign the contracts required by art. 28 GDPR. Where a supplier involves international transfers, appropriate safeguards will apply (standard contractual clauses or others provided for in the GDPR).
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, as well as withdraw your consent, by writing to info@plentir.com and stating the right you wish to exercise. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) if you believe the processing does not comply with the applicable rules.
7. Security measures
Plentir applies technical and organisational measures appropriate to the risk, reinforced because health data is involved, to guarantee the confidentiality, integrity and availability of the information.
8. Changes to this policy
We may update this policy to reflect changes in the applicable rules or in our services. Any change will be published on this same page.
Last updated: 19 June 2026.
← Back to home