Privacy policy
Last updated: August 11, 2026
- INTRODUCTION
FIM Longevity Services Company, a company registered in the Kingdom of Saudi Arabia under Commercial Registration No. 7051123201, operating as “The Longevity Suite KSA” (“we”, “us”, “our”), is committed to protecting the privacy and personal data of our clients, website visitors, and users of our wellness and longevity services.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data in compliance with the Saudi Personal Data Protection Law (PDPL) (Royal Decree No. M/19 of 9/2/1443H) and its Implementing Regulations, as issued and enforced by the Saudi Data & Artificial Intelligence Authority (SDAIA).
It applies to all personal data collected through our website https://thelongevitysuite.sa, our clinics/centers located at Al Nakheel District, Al Takhassusi, Riyadh 12383, Saudi Arabia, and any related communications, bookings, or services.
- WHO WE ARE — DATA CONTROLLER
- Legal name: FIM Longevity Services Company
- Commercial Registration No.: 7051123201
- Registered address: Al Nakheel District, Al Takhassusi, Riyadh 12383, Saudi Arabia
- Contact email:info@thelongevitysuite.sa
- Phone: +966 11 494 3676
- PERSONAL DATA WE COLLECT
| Category | Examples |
| Identity data | Full name, national ID / Iqama / passport number, date of birth, gender, nationality |
| Contact data | Email address, phone number, home/billing address |
| Health & wellness data (sensitive data) | Medical history, biomarkers, lab results, genetic/wellness assessments, longevity program data, treatment notes, physician consultations |
| Booking & service data | Appointment history, service preferences, program enrollment |
| Payment data | Payment method, billing details, transaction history (processed via secure third-party payment processors) |
| Technical data | IP address, device/browser type, cookies and similar technologies (see our [Cookie Policy]) |
| Communication data | Messages sent via contact forms, WhatsApp, email, or phone; call recordings (if applicable) |
| Marketing data | Preferences for receiving offers, newsletter subscriptions |
- HOW WE COLLECT YOUR DATA
- Directly from you: website forms, appointment bookings, in-clinic registration, consultations, phone/WhatsApp communications
- Automatically: cookies and analytics tools when you browse our website
- From third parties: referral partners, insurance providers (where applicable), payment processors
- PURPOSES AND LEGAL BASIS FOR PROCESSING
We process your personal data for the following purposes, relying on the legal bases available under the PDPL:
| Purpose | Legal basis |
| Delivering longevity/wellness services, medical consultations, and treatments | Performance of a contract / explicit consent (for health data) |
| Appointment scheduling and client management | Contractual necessity |
| Billing and payment processing | Contractual necessity / legal obligation |
| Sending appointment reminders and service-related communications | Legitimate interest / contract |
| Marketing communications (newsletters, offers) | Consent (opt-in, withdrawable at any time) |
| Website analytics and performance improvement | Consent (via cookie banner) |
| Complying with legal, regulatory, or Ministry of Health requirements | Legal obligation |
| Fraud prevention and security | Legitimate interest |
- SENSITIVE DATA (HEALTH DATA)
Health and genetic/wellness data are treated as sensitive personal data under the PDPL. We only collect and process such data with your explicit, informed consent, and we apply enhanced security and confidentiality measures, in line with applicable healthcare regulations in the Kingdom (including Ministry of Health requirements where relevant).
- SHARING AND DISCLOSURE OF PERSONAL DATA
We do not sell your personal data. We may share it with:
- Licensed medical practitioners and specialists involved in your care
- Service providers acting on our behalf (IT hosting, booking platforms, payment processors, laboratories) under confidentiality and data protection obligations
- Government or regulatory authorities, where required by law (e.g., Ministry of Health, SDAIA)
- Professional advisors (legal, audit) under confidentiality obligations
All third parties processing data on our behalf are contractually bound to comply with PDPL requirements.
- CROSS-BORDER DATA TRANSFERS
If personal data is transferred or processed outside the Kingdom of Saudi Arabia (e.g., cloud hosting, international service providers), we ensure such transfers comply with PDPL requirements, including one or more of the following safeguards:
- Approval from SDAIA where required
- Adequate level of data protection in the destination country
- Contractual clauses ensuring an equivalent level of protection
- Your explicit consent, where applicable
- DATA RETENTION
We retain personal data only for as long as necessary to fulfill the purposes described in this policy, including:
- Medical/health records: in accordance with applicable healthcare record-keeping regulations in KSA
- Booking and transaction records: 5 years for accounting/legal purposes
- Marketing data: until you withdraw consent
Once retention periods expire, data is securely deleted or anonymized.
- DATA SECURITY
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure, including encryption, access controls, and staff confidentiality obligations.
- YOUR RIGHTS
Under the PDPL, you have the right to:
- Be informed about how your data is processed
- Access a copy of your personal data
- Request correction of inaccurate data
- Request deletion of your data (subject to legal/medical record retention obligations)
- Withdraw your consent at any time (this does not affect the lawfulness of processing prior to withdrawal)
- Object to processing for direct marketing purposes
- Request correction of inaccurate data
- Lodge a complaint with SDAIA if you believe your rights have been violated
To exercise any of these rights, contact us at info@thelongevitysuite.sa.
- CHILDREN’S DATA
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors without the consent of a parent or legal guardian.
- COOKIES
Our website uses cookies and similar technologies. Please refer to our [Cookie Policy] for full details on the types of cookies used and how to manage your preferences.
- THIRD-PARTY LINKS
Our website may contain links to third-party websites. We are not responsible for the privacy practices of such external sites.
- CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date.
- CONTACT US
FIM Longevity Services Company
Al Nakheel District, Al Takhassusi, Riyadh 12383, Saudi Arabia
Email: info@thelongevitysuite.sa
Phone: +966 11 494 3676