Legal

Privacy Policy

This policy explains what personal data EnduroLiving collects across enduroliving.co.uk and our product apps — EnduroIndex, The Longevity Project, EnduroAge, The Outpost and EnduroPerformance — how we use it, and the choices you have. By using any of these you agree to this policy.

Last updated September 2026 · EnduroLiving

1. Who we are and what this covers

EnduroLiving (“we”, “us”, “our”) is the data controller for personal data collected through this website, your EnduroLiving account, and the product apps you reach from it — EnduroIndex, The Longevity Project, EnduroAge, The Outpost and EnduroPerformance. They share a single EnduroLiving account (one login, one Stripe customer, one EnduroPoints balance), so this policy covers the account itself and, below, what each product additionally collects because of what it does.

EnduroLiving

10 Dundas Street West, Saltburn-by-the-Sea, North Yorkshire, TS12 1BL

info@enduroliving.co.uk · 07951 447093

2. Data we collect

  • Account data — name, email address and authentication credentials for your EnduroLiving account.
  • Payment data — processed securely by Stripe; we do not store your card details.
  • EnduroPoints — your points balance and reward redemptions.
  • Booking and health-screening data — for Outpost sessions, the answers you give in our pre-session health screening (see health & safety).
  • Usage data — log data, device information and basic analytics about how you interact with our sites and apps.
  • Communications data — emails and notifications we send you, and your preferences and consents for them.

3. EnduroIndex: health, biometric and lab data

EnduroIndex calculates a daily wellness score and personalised protocols, which needs more than account data:

  • Health and biometric data — values you enter or that we receive from connected wearables (e.g. WHOOP, Garmin, Strava) such as HRV, resting heart rate, sleep, training load and activity data.
  • Blood test and lab report uploads — if you upload a blood test or lab report (PDF or image), it is sent to our AI provider solely to extract the biomarker results shown in it (marker names, values and reference ranges).

The uploaded file itself is not permanently stored. It is processed to extract the results and then discarded once extraction is complete. The extracted results are stored in your account so you can view them over time and so we can factor them into your protocols — whether you upload through EnduroIndex directly or through the central Reports section of your EnduroLiving account. You can delete an individual lab report, along with its extracted results, at any time from the app; deleting your account removes this data too, except anything we must keep for a legal obligation.

Health and biometric data, including any blood test or lab report you upload, is special category data under UK GDPR and is processed on the basis of your explicit consent, which you can withdraw at any time by contacting us or removing the data yourself in the app.

4. The Longevity Project: purchases and reading progress

The Longevity Project is a one-time guide purchase, which additionally involves:

  • Purchase records — that you have purchased access, the Stripe session reference and timestamp. We do not see or store your card details.
  • Reading progress — which chapters you have opened or marked complete, so you can resume where you left off.

Recovery Audit and Recovery Intelligence results you generate are stored against your account in the same way as other test results, so they can be reflected in your central Reports.

5. AI processing

Some features rely on a third-party artificial intelligence provider to process your data and return a result. We currently use Anthropic (Claude) as our AI sub-processor. Depending on the feature, the data sent for AI processing may include your biometric and wellness data (to generate your EnduroIndex score, protocols and AI coach responses) and the contents of a blood test or lab report you upload (to extract biomarker results).

Our AI provider processes this data only to return the requested result. Under our agreement with them, data sent through their business API is not used to train their models. We do not use AI to make legally significant automated decisions about you, and our scores, protocols and content are for general wellness and are not medical advice.

6. Legal bases (UK GDPR)

We process your data based on your consent (for health and special category data, including biometric data and any blood test or lab reports you upload, and for optional cookies), to perform our contract with you (running your account, subscription or purchase), to comply with legal obligations (such as tax and accounting records), and for our legitimate interests in operating and securing the service. You can withdraw consent at any time by contacting us; this does not affect processing already carried out.

7. Sharing

We share data with trusted processors who help us run EnduroLiving and its products, including:

  • Stripe — payment processing across every product.
  • Anthropic — AI processing for EnduroIndex’s coach and lab-report extraction, as described above.
  • Resend — sending account, transactional and lifecycle email.
  • Hosting and database providers — running the sites and apps.
  • Wearable services you connect — e.g. WHOOP, Garmin, Strava, to receive the data you authorise.

Each acts on our instructions under a data-processing agreement. We do not sell your personal data.

8. International data transfers

Some of our processors, including our AI provider, are located outside the UK and EEA (for example in the United States). Where your data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses to protect it.

9. Retention

We keep your account, biometric and lab result data for as long as your account is active. Uploaded blood test and lab report files are not retained after processing. Purchase and account records are kept for up to 7 years after your account closes, to meet UK accounting requirements. You can delete individual lab reports or your entire account at any time from the app, and may also request deletion of specific data by contacting us. When you delete your account we remove your personal data, except anything we are required to keep to meet a legal obligation.

10. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict or object to processing of your personal data, to withdraw consent, and to data portability. To exercise these rights, email info@enduroliving.co.uk. You also have the right to complain to the UK Information Commissioner’s Office (ICO).

11. Cookies

Cookies and similar technologies are covered separately in our Cookie Policy.

12. Changes

We may update this policy from time to time as EnduroLiving and its products change. Material changes will be notified through the app, the site, or by email.

This page is provided for general information and is not legal advice. We keep our policies under review and may update them; the date above shows when this version took effect. Questions? Email info@enduroliving.co.uk.