Privacy Policy.

Last updated: June 2025

We, at EVA and in all the subsidiaries and related companies (collectively referred to as "we" or "our" or "us"), are committed to protecting and safeguarding the privacy of your personal data. This Privacy Policy (referred to as "Policy") explains how we collect, use, disclose, and safeguard your information across all aspects of our business, including our website, retail operations, events, marketing activities and customer interactions. This Policy applies to personal data and to the management of that personal data in any form, whether oral, electronic or written. Please read this Policy carefully to understand your rights and our practices regarding your personal data.

1. Information we collect

Personal information is any information that can be used to personally identify you. We collect the following categories of personal data.

Personal information

We may collect personal information, such as your name, gender, home and mailing address, telephone number, date of birth and age, residency and visa status, national ID and/or passport information, banking details, billing and shipping addresses, information required to comply with laws, the requests and directions of law enforcement authorities or court orders and any information relating to you that you provide to us directly via email, website at an event or indirectly via your representatives.

In addition to standard personal information, we may collect, receive, store and process health-related information including laboratory test results, diagnostic information, health assessments, supplement information, lifestyle information, wellness information, medical history information voluntarily provided by you, and other information relating to your health and wellbeing ("Health Information").

Health Information is collected and processed solely for the purposes described in this Privacy Policy and to enable the provision of the Services.

Information from third parties

We may receive personal information and Health Information from authorised third parties including clinics, laboratories, healthcare providers, diagnostic centres, wellness practitioners, insurers, service providers and business partners where you have requested or authorised such sharing, such sharing is necessary for the provision of any services, or we are otherwise permitted or required by law to receive such information.

3. How we use your information

We process your personal data for the following purposes, based on the principles of lawful, fair and transparent processing: to communicate with you and to provide you products and services, to contact you for matters related to our relationship or contract with you, to comply with our contractual obligations, to process and fulfil your orders including shipping and returns, to send you marketing communications (where we have obtained your consent), to respond to your requests, queries or your feedback, to improve our products, services and customer experience, to personalise your experience, to conduct surveys and market research to improve our services (with your consent), to verify your identity, to prevent and investigate fraud and other misuses, to comply with legal obligations including tax, accounting and reporting requirements, and for purposes required by law or regulation.

During the provision of any services, we may use your information to provide access to laboratory results, to generate wellness insights, to generate supplement recommendations, to facilitate health tracking and progress monitoring, to personalise your experience within the App, to facilitate communication between you and participating clinics or laboratories, and to improve our algorithms, software and platform functionality.

The App is designed to enable users to access, review, monitor and manage health-related information. Therefore, we may also use your data to process laboratory results, health metrics, supplement information, wellness information, progress tracking information and other Health Information for the purposes of displaying results through the App, generating insights and recommendations, tracking progress, administering supplement programmes, facilitating appointments, communications and information exchange between users and independent healthcare providers where such functionality is made available through the App, improving the Services and complying with legal obligations.

EVA processes Health Information only for the specific purposes described in this Policy, including displaying health information, providing App functionality, generating wellness content, maintaining user accounts, facilitating communications with authorised providers and complying with legal obligations. EVA does not sell Health Information to third parties.

4. Sharing your information

4.1 Health-care and other third parties

For the provision of the services, we may share your data with laboratories, clinics, healthcare providers, supplement providers, cloud hosting providers, payment processors, analytics providers, technology partners, professional advisers and/or regulators and governmental authorities where required.

4.2 Service providers

We may share your data with third-party service providers who perform functions on our behalf, such as payment processing, shipping, marketing, and customer support. These providers are bound by contractual agreements to safeguard your data and use it solely for the purposes we specify.

4.3 Legal requirements

We may disclose your information if required by law or to protect our rights, property, or safety, or that of others. This includes compliance with any legal obligations (including responding to a court order or subpoena) under the applicable law. We may also share personal information if a government agency or investigatory body requests it.

4.4 Business transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction or shared under a confidentiality agreement. We will take reasonable steps to ensure that your personal data continues to be protected in such scenarios.

4.5 Cross border

Your information may be stored or processed in the United Arab Emirates or in other jurisdictions where our service providers maintain infrastructure. Where Health Information is transferred outside the UAE, EVA shall implement reasonable contractual, organisational and technical safeguards designed to provide a level of protection substantially equivalent to that required under applicable UAE data protection laws.

5. AI processing

Certain Services utilise artificial intelligence, machine learning systems and automated analytical tools to generate insights, recommendations, explanations and other outputs. Such processing may involve analysis of your Health Information and personal information in order to provide personalised Services. Automated outputs are intended for informational purposes only and should not be treated as medical advice.

6. Protecting your data and keeping it accurate

We store your personal information in different ways, including on paper and electronic form. We take reasonable steps to protect the information from misuse and loss and unauthorised access, modification or disclosure. Our devices have electronic security systems in place, including firewalls and access controls to control access to your personal information. We also encrypt information for maximum safety. However, the internet is never 100% secure, and we cannot promise that your information will be completely safe.

7. Your rights in regard to personal data

In the event that you wish to access your information we hold, request us to rectify incorrect information, object to or restrict processing, request your data in a structured commonly used and machine-readable format to transfer to another service provider, or to request erasure, we will do so within one month of the request. However, you may need to verify yourself before we can correctly address your request.

Please be aware that your rights in relation to personal information are not absolute and regardless of your request, some information cannot be amended or deleted due to legal or technical reasons.

To exercise any of these rights, please contact us at privacy@eva.ae.

8. Data security

We implement appropriate technical, administrative, and physical measures to safeguard your personal data against unauthorised access, loss, destruction, or alteration. These measures include encryption, firewalls, and secure data storage. Despite our efforts, no method of data transmission or storage is 100% secure, and we cannot guarantee absolute security. However, we are committed to continuously improving our data protection efforts.

10. Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected or as required by law, including for the purposes of satisfying any legal, accounting, or reporting requirements. Retention periods may vary depending on the nature of the information and applicable legal requirements.

11. Changes to this Policy

This Policy may be amended at any time, regardless of any other agreements or contractual terms with you or others. We may update this Policy periodically to reflect changes in our data processing practices or legal obligations. Any changes will be communicated through appropriate channels, such as our website. We encourage you to review this Policy regularly.

12. Consent

By creating an account and using the services, you expressly consent to the collection, receipt, storage, processing, analysis and sharing of your Health Information as described in this Privacy Policy and the Terms. You further authorise participating clinics, laboratories and healthcare providers to disclose Health Information relating to you to us for the purposes of providing the services.

13. Contact us

If you have any questions, concerns, or requests regarding this Policy or how we handle your personal data, please contact us at:

Elite Vita Health L.L.C-FZ
Address: Building 49, Healthcare City, Dubai, United Arab Emirates
Email: privacy@eva.ae

This Privacy Policy is intended to comply with applicable data protection laws of the United Arab Emirates and any other jurisdiction whose mandatory laws apply to the processing activities described herein.