Vanguard Man
Privacy Policy
Last Updated: June 2026
1. Who We Are and How to Contact Us
This Privacy Policy is issued by Gorilla Strength LLC, a company registered in the United Arab Emirates, operating under the trade name Vanguard Man ("Vanguard Man", "we", "us", "our"). We operate a private performance longevity platform delivering advanced biomarker diagnostics, physician-coordinated clinical protocols, and elite health coaching services to members globally.
Registered address: Dubai, United Arab Emirates
Privacy enquiries and data requests: concierge@vanguardman.co
Website: vanguardman.co
For the purposes of the UK General Data Protection Regulation and EU General Data Protection Regulation, Gorilla Strength LLC acts as the Data Controller in respect of personal data processed under this Policy.
2. Scope of This Policy
This Policy applies to all personal data we collect and process in connection with your use of our website at vanguardman.co and any subdomains; your application to become a Vanguard Man member; your active membership and the delivery of services to you; communications between you and our team, coaches, and affiliated physicians; and data collected through integrated wearable devices and third party platforms.
This Policy should be read alongside our Terms of Service at vanguardman.co/terms and our Medical Consent Agreement at vanguardman.co/medical-consent.
3. The Data We Collect
We collect and process the following categories of personal data:
- Identity and Contact Data: Full legal name, date of birth, nationality, residential address, email address, telephone number, and where required for clinical or prescription services, government-issued identification.
- Health and Medical Data: Biomarker results from laboratory analysis, physician consultation notes, prescription records, therapeutic protocol records, biological age assessments, medical history you disclose to us, current medications and supplements, allergies and contraindications, and clinical correspondence. This constitutes special category data under GDPR and UK GDPR and sensitive personal information under applicable US state privacy laws.
- Biometric and Performance Data: Body composition metrics, body weight and measurements, and wearable device data streams including sleep architecture, resting heart rate, heart rate variability, activity levels, and recovery scores from platforms including Whoop, Oura, Garmin, and Apple Watch where you authorise integration.
- Lifestyle and Behavioural Data: Dietary intake logs, training adherence records, protocol compliance data, travel schedules, stress indicators, and any lifestyle information you share with your coach.
- Communication Data: Messages exchanged between you and your health coach, communications with our concierge and coordination team, and information provided during onboarding, assessments, check-ins, and reviews.
- Financial Data: Payment card details, billing address, and transaction records. Payment card data is processed by our third party payment processor and is not stored on our systems.
- Technical and Usage Data: IP address, browser type, device identifiers, pages visited, time spent on pages, referring URLs, and cookie data collected through your use of our website. See Section 9 for full cookie disclosure.
4. How and Why We Use Your Data
We process your personal data on the following lawful bases:
- Contract Performance: We process identity, contact, communication, financial, and performance data to fulfil our contractual obligations to you as a Vanguard Man member, including delivering your protocol, managing your coaching relationship, coordinating your laboratory testing, and administering your membership.
- Explicit Consent — Special Category Health Data: We process your health, medical, and biometric data on the basis of your explicit consent, given through your execution of our Medical Consent Agreement. You may withdraw this consent at any time, understanding that withdrawal will affect our ability to deliver your protocol safely. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
- Legitimate Interests: We process technical and usage data to maintain and improve our website and platform, to detect and prevent fraud and security threats, and to ensure the security of our systems and your data. These interests do not override your fundamental rights and freedoms.
- Legal Obligation: We process and retain certain data categories to comply with our legal obligations, including medical record retention requirements, tax and financial record obligations, and regulatory reporting requirements in applicable jurisdictions.
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.
5. Who We Share Your Data With
We share your personal data only with the following categories of recipients, strictly to the extent necessary to deliver your membership services:
- Your Dedicated Health Coach: Your assigned performance coach accesses your health, biometric, lifestyle, and communication data for the purpose of delivering daily protocol management, nutrition guidance, training programming, and lifestyle adjustment.
- Vanguard Man Internal Team: Our concierge, coordination, and administration staff access identity, contact, and membership data for scheduling, logistics, billing, and membership management. Access is restricted on a need-to-know basis.
- Independent Affiliated Physicians: Board-certified physicians within our licensed clinical network access your biomarker results, health history, and protocol data for the purpose of reviewing your diagnostic results, directing clinical protocols, and where applicable issuing and managing prescriptions. These physicians act as independent data controllers in respect of the clinical records they hold.
- Accredited Laboratory Partners: Quest Diagnostics, Labcorp, and our accredited GCC and European laboratory partners receive your identity data and biological samples for the purpose of processing your biomarker panel and returning results to Vanguard Man and your affiliated physician.
- Compounding Pharmacy Partners: Where your membership tier includes physician-prescribed therapeutic protocols, your identity, address, and prescription data is shared with licensed compounding pharmacy partners for the purpose of preparing and dispatching your prescribed compounds. This applies to Advanced Longevity members only.
- Technology Infrastructure Providers: We use third party technology platforms for secure data storage, platform operation, communication infrastructure, and analytics. These providers act as data processors and are bound by written Data Processing Agreements requiring them to process your data only on our instructions and to maintain appropriate security standards. A full list of current infrastructure providers is available on request at concierge@vanguardman.co.
- Wearable Platform Integrations: Where you authorise integration of your wearable device data, the relevant platform transfers data to us via authorised API connection. Your relationship with these platforms is governed by their own privacy policies.
- Legal and Regulatory Authorities: We may disclose your data to law enforcement, regulatory authorities, or courts where required by applicable law or to protect the legal rights of Vanguard Man.
We do not sell, rent, trade, or otherwise transfer your personal data to any third party for marketing, advertising, or commercial purposes. We do not share your data with insurance companies, employers, or any party not listed above without your explicit written consent.
6. International Data Transfers
Vanguard Man operates globally. Your personal data may be transferred to and processed in countries outside your country of residence, including transfers between the UAE, United States, United Kingdom, and European Union.
Where we transfer personal data from the European Economic Area or United Kingdom to a third country not recognised as providing an adequate level of data protection, we implement appropriate safeguards including Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner's Office respectively. Copies of applicable transfer mechanisms are available on request at concierge@vanguardman.co.
Where we transfer data within the GCC, we comply with the applicable data protection frameworks of each jurisdiction in which we operate.
7. Data Security
We implement technical and organisational measures appropriate to the sensitivity of the data we process, including end-to-end encryption of health data in transit and at rest; access controls restricting data access to authorised personnel only; role-based access permissions limiting each team member's visibility to data relevant to their function; secure deletion protocols for data no longer required; and regular security assessments of our systems and third party providers.
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach where required by applicable law, and will notify you directly without undue delay where the breach is likely to result in a high risk to your rights.
8. Data Retention
We retain your personal data for the following periods:
- Health and medical records: A minimum of seven years from the end of your membership, or longer where required by applicable law in your jurisdiction. In certain US states and GCC jurisdictions, longer mandatory retention periods apply and will be followed.
- Financial records: Seven years from the date of the relevant transaction, in accordance with applicable tax and accounting obligations.
- Communication and coaching records: Three years from the end of your membership, unless a longer period is required for legal or dispute resolution purposes.
- Technical and usage data: Up to 26 months from collection, consistent with standard analytics retention practices.
Following the expiry of the applicable retention period, your data will be securely and permanently deleted or anonymised.
9. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to operate the website, remember your preferences, analyse usage, and improve your experience.
Strictly necessary cookies are required for the website to function and cannot be disabled.
Analytics cookies help us understand how visitors use the website and are used on an anonymised basis. You may opt out via your browser settings or our cookie preference tool.
Functional cookies remember your preferences and settings to improve your experience.
We do not use advertising or behavioural targeting cookies. You can manage your cookie preferences at any time through your browser settings. Disabling certain cookies may affect the functionality of our website.
10. Your Rights
Depending on your jurisdiction, you have the following rights in relation to your personal data:
- Right of Access: To request a copy of the personal data we hold about you.
- Right to Rectification: To request correction of inaccurate or incomplete personal data.
- Right to Erasure: To request deletion of your personal data, subject to legal retention obligations.
- Right to Restrict Processing: To request that we limit how we use your data in certain circumstances.
- Right to Data Portability: To receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
- Right to Object: To object to processing based on legitimate interests.
- Right to Withdraw Consent: To withdraw consent to the processing of your health data at any time. Withdrawal does not affect prior lawful processing.
- Right to Lodge a Complaint: To lodge a complaint with the relevant supervisory authority in your jurisdiction.
UK residents: Information Commissioner's Office — ico.org.uk
EU residents: The supervisory authority in your EU member state
US residents: Your applicable state attorney general or consumer protection authority
UAE residents: UAE Data Office — uaedataoffice.ae
To exercise any of these rights, contact us at concierge@vanguardman.co. We will respond within 30 days. We may need to verify your identity before processing your request.
11. California Residents — CCPA/CPRA Disclosure
If you are a California resident, you have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, including the right to know what personal information we collect, use, disclose, and sell; the right to delete personal information we hold about you, subject to exceptions; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information — Vanguard Man does not sell or share personal information as defined under the CCPA; the right to limit use and disclosure of sensitive personal information — we use sensitive personal information only to deliver our services to you; and the right to non-discrimination for exercising your CCPA rights.
To submit a CCPA request, contact concierge@vanguardman.co. You may authorise an agent to submit requests on your behalf with written authorisation.
12. Children
Vanguard Man services are intended exclusively for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, contact us immediately at concierge@vanguardman.co and we will delete it without delay.
13. HSA/FSA Notice
Vanguard Man services are private performance and longevity optimisation programs. They are not qualified medical expenses under IRS definitions or equivalent rules in applicable jurisdictions and are not eligible for reimbursement under Health Savings Accounts (HSA), Flexible Spending Accounts (FSA), or equivalent tax-advantaged health accounts. Members are solely responsible for determining the tax treatment of any fees paid to Vanguard Man in consultation with their own qualified tax advisor. Vanguard Man makes no representation regarding the tax deductibility or reimbursability of membership fees under any applicable tax regime.
14. Sample Reports and Protocols
Vanguard Man may provide potential members with sample biomarker reports, protocol documents, or longevity blueprints for illustrative and demonstration purposes. Any such samples are either entirely fictional or have had all personal identifying information, health data, and biomarker values permanently removed and replaced with illustrative figures. These samples do not represent any individual's actual results or actual protocol and are provided solely to illustrate the format, depth, and structure of Vanguard Man's deliverables. You should not rely on sample materials as indicative of the specific results or protocol you will personally receive.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, applicable law, or data processing practices. Material changes will be notified to active members by email to their registered address at least 14 days before taking effect. The current version will always be available at vanguardman.co/privacy. Continued use of our services following notification constitutes acceptance of the updated Policy.