Privacy Policy
Last updated Sep 24, 2026
Millenary ("Millenary", "we", "our" or "us") is committed to protecting your privacy. This Privacy Policy explains how, as a data controller, we collect, use, disclose and safeguard your personal data when you visit our website, when you create an account on our platform, and when you use our services (collectively, the "Services").
This Privacy Policy sets out the categories of personal data we collect, how and why we use it, who we share it with, how long we keep it, and what rights you have over it.
Who We Are
Millenary is an AI-powered preventive health and longevity platform. We act as data controller under the UK GDPR and, where applicable, the EU GDPR:
Life Mission Technologies, Inc. (trading as Millenary) [Registered company address] United Kingdom Company Registration Number: [ ] Email: operations@millenary.com
Data We Collect
a) Identification and contact details
- Account information — first name, last name, email address, password, date of birth and contact information.
- Profile information — photo (optional), height, weight, lifestyle habits (e.g. sleep, exercise, diet), health goals and family health history.
- Communications — information you provide when you contact our support team, including messages, emails and call records.
b) Data concerning health
- Information about your health — biomarker data, health history, family health background, symptoms, and other health-related information you choose to share.
- Test results — laboratory results generated by our partner laboratories and uploaded to the Millenary platform.
- AI-generated insights — your estimated biological age, biomarker results and risk categorisation, and general lifestyle, nutrition and exercise recommendations generated by our AI-powered tool based on your test results and the information you provide. These insights are not reviewed by a physician or other healthcare professional before being made available to you — see "Important note on our AI-powered insights" below.
- Financial and transactional data — payment details processed via our payment provider. We do not store full card numbers.
c) Data relating to laboratory appointments
- Appointment date and time, laboratory location selected, sample collection details, and communications with our partner laboratories, Randox (United Kingdom) and Echevarne (Spain).
d) Data relating to direct marketing
- Your contact details and your preferences regarding receiving marketing communications about Millenary's plans, promotions and news.
e) Data relating to the use of our Services
- Device information — device type, unique device identifiers, IP address, browser type and mobile network information.
f) Cookies and similar technologies
- See our Cookie Policy for full details of the cookies we use and your choices regarding them.
Important note on our AI-powered insights
Millenary's insights are generated by an AI-powered tool based on the biomarker data in your test results and the lifestyle information you provide. These insights are not reviewed, verified or approved by a doctor or other qualified healthcare professional before they are made available to you. They are provided for general informational purposes only and are not a medical diagnosis, treatment recommendation, or substitute for professional medical advice. Please refer to our Terms & Conditions for the full disclaimer.
How We Use Your Data
| Purpose | Legal basis | Retention period |
|---|---|---|
| Creation and management of your account | Performance of a contract (our Terms & Conditions) | For the duration of your account, plus 5 years thereafter |
| Generation of your AI-powered health insights | Performance of a contract; or your explicit consent for the processing of health data | For the duration of your use of the platform, plus 5 years, or until you withdraw consent |
| Coordinating your laboratory appointment and sample collection | Performance of a contract | For the duration of the contractual relationship, plus 5 years |
| Customer support and account management | Our legitimate interest in managing our relationship with you | For the duration of your request, plus 5 years |
| Billing and accounting | Compliance with our legal obligations | 10 years from the end of the contractual relationship |
| Direct marketing | Your consent; or our legitimate interest in marketing similar products you have already purchased | Until you withdraw consent or object, or 3 years from your last interaction with us |
| Handling complaints and legal claims | Our legitimate interest in managing disputes; compliance with legal obligations | For the duration of the claim, plus 5 years, or until the relevant limitation period expires |
| Cookies and trackers | Your consent; or our legitimate interest in operating a functioning website | See our Cookie Policy |
| Service improvement, research and anonymised statistics | Our legitimate interest in improving our Services (where no health data is used); or your explicit consent (for health data) | Up to 3 years from your last activity, or until account deletion, whichever is earlier |
International Data Transfers
Your personal data is primarily processed within the United Kingdom and the European Economic Area. Where any of our subcontractors process data outside the UK/EEA, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.
Your Data Protection Rights
Under the UK GDPR, the EU GDPR and other applicable data protection laws, you have the following rights over your personal data:
- Right to Access — request confirmation of whether we process your personal data, and a copy of it.
- Right to Rectification — request correction of inaccurate or incomplete data.
- Right to Erasure — request deletion of your data in certain circumstances, for example where it is no longer necessary or you withdraw consent.
- Right to Restrict Processing — request that we limit how we use your data while a dispute is resolved.
- Right to Data Portability — request that we transfer your data to you or another organisation, where technically feasible.
- Right to Object — object to processing based on our legitimate interest, including profiling.
- Right to Object to Direct Marketing — opt out of marketing communications at any time.
- Right to Withdraw Consent — withdraw consent at any time where we rely on it.
- Right to give directions concerning your data after your death
- Right to Lodge a Complaint — with the Information Commissioner's Office (ICO) in the United Kingdom (ico.org.uk), or, if you are based in Spain, with the Agencia Española de Protección de Datos (AEPD, aepd.es).
To exercise any of these rights, contact us at operations@millenary.com.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, as set out in the table above, or as required by applicable law.
Data Security
Millenary implements technical and organisational measures designed to protect your personal data, including:
- Encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256).
- Role-based access controls and multi-factor authentication for all internal systems.
- Regular review of access permissions.
- Regular automated backups and a tested disaster-recovery process.
- Ongoing staff training on data protection and security.
Recipients of Personal Data
- Our partner laboratories: Randox (United Kingdom) and Echevarne (Spain), solely for the purpose of conducting your requested tests.
- Our subcontractors involved in hosting, payment processing and customer support (see our Subprocessors page).
- Millenary personnel, on a need-to-know basis.
- Public or judicial authorities, where required by law.
- A potential acquirer, in the event of a merger, acquisition or sale of assets.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies as described in our Cookie Policy.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date above.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at operations@millenary.com or [Millenary registered address].
Questions about this policy?
Write to operations@millenary.com and we'll get back to you.