Privacy Policy

The responsible party is William J. Powell, a South African sole proprietor trading as PRIME LONGEVITY™ (“PRIME”, “we”, “us” or “our”), of 6 Mountainview Street, Capolavoro Mountain Estate, Kylemore, Stellenbosch, 7600, South Africa. You can reach us at hello@prime-longevity.com or +27 82 775 9987.

This policy covers prime-longevity.com and the Services described in the Terms of Service, including the movement capacity questionnaire, the PRIME Movement Assessment™, the GLP-1 Strength Protection Plan™ and any programme delivered through the site.

We collect only what a Service needs in order to work:

• Assessment information: your age, gender, optional name, email address and your answers to the movement, lifestyle and safety-screening questions.
• Purchase information: the email address you give at checkout, together with the payment reference, amount, currency and payment status returned to us by Paystack.
• Communication information: the content of emails you send us, such as a support request, complaint or refund request.
• Technical information: your IP address and basic request information, used transiently to rate-limit the assessment and checkout endpoints so they cannot be used to send unwanted email.

We do not operate advertising or analytics tracking on this website, and we do not build behavioural profiles of visitors.

You may withdraw that consent at any time, though we may then be unable to provide an assessment or programme safely. Please give us only the health information reasonably needed for the Service. Do not send diagnoses, scans, medical records or clinical correspondence unless we specifically ask for them.

• To generate and email your PRIME Longevity Profile™: performance of your request and, for the health-related answers, your express consent.
• To take payment, confirm a booking and deliver a purchased programme: performance of our contract with you.
• To send transactional messages about payment, booking, safety and programme delivery: performance of our contract with you. These are part of the Service and are not marketing.
• To answer a query, complaint or refund request: performance of our contract with you and our legitimate interest in resolving it.
• To keep the site secure and prevent abuse of the email and checkout endpoints: our legitimate interest in protecting the Service and third parties.
• To meet tax, accounting and other legal obligations: compliance with a legal obligation.

We will send marketing messages only where we have a lawful basis to do so, and every such message will carry a practical way to opt out.

We do not sell your personal information. We share it only with the operators who run parts of the Service for us, under contract and only for that purpose:

• Paystack: payment processing. Paystack collects your card details directly; PRIME never receives or stores complete card details.
• Resend: delivery of your profile, receipts and other transactional email.
• Cloudinary: hosting of the exercise video library and site media.
• Vercel: website hosting and delivery.
• Our professional advisers, and any regulator, court or authority, where the law requires or permits disclosure.

Some of the operators above process information outside South Africa. Where that happens, we rely on the conditions in section 72 of POPIA: a recipient bound by rules or a contract providing an adequate level of protection, your consent, or a transfer necessary for the performance of your contract with us.

• Assessment answers are scored in memory and are not stored in a database. Your profile is generated, emailed to you and then discarded. We do not keep a copy, which is why the assessment page asks you to save or print your profile.
• Purchase records, including the payment reference, amount and email address, are retained for as long as tax and accounting law requires.
• Email correspondence is retained for as long as needed to deal with the matter and any resulting dispute.
• Rate-limiting records of IP addresses are held only in server memory, expire within hours and are lost on restart.

We use one cookie, and it is strictly necessary. After you buy the GLP-1 Strength Protection Plan™, unlocking the exercise video library sets a signed, HTTP-only cookie that proves your purchase so the library stays open on that device. It carries no advertising identifier and is not used for tracking. We set no analytics or advertising cookies.

The site is served over HTTPS, assessment answers are processed on the server rather than exposed to the browser, access to the video library is granted by a signed cookie, and we log only what is needed to run the Service. We never log your assessment answers. No system can be guaranteed completely secure, but we take reasonably practicable technical and organisational steps as POPIA requires. If a security compromise affects your personal information, we will notify you and the Information Regulator as the law requires.

Under POPIA you have the right to:

• ask what personal information we hold about you and request a copy;
• ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully;
• object to processing on reasonable grounds;
• withdraw a consent you have given, without affecting processing already carried out;
• ask not to receive direct marketing; and
• complain to the Information Regulator.

To exercise any of these, email hello@prime-longevity.com from the address you used with us. We will respond as soon as reasonably possible and may ask for information needed to confirm your identity.

If you are not satisfied with how we have handled your personal information, you may lodge a complaint with the Information Regulator (South Africa). Please contact us first where you can, so we have a chance to put it right.

The Services are for adults aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

We may update this policy. The effective date and version shown at the top of this page always identify the current version, and we keep an archive of superseded versions. Where a change materially affects how we use information you have already given us, we will tell you.