Privacy Policy
Last updated: 25 May 2026
Who we are
Ofllo is a technology platform operated by Innoviqor Consulting LP that connects patients with independent, EU-licensed medical professionals. Innoviqor Consulting LP is the data controller responsible for your personal data under the GDPR. Ofllo does not provide medical advice, diagnosis, or treatment.
What data we collect
- Name and email address (on signup)
- Health data entered voluntarily by the patient (vitals, logs, uploaded documents)
- Appointment and consultation history
- Payment information — processed by Stripe; Ofllo and Innoviqor Consulting LP do not store card details
Why we collect it
To provide the telehealth booking, consultation, and health monitoring service you have signed up for.
Legal basis under GDPR
- Standard personal data: explicit consent (Article 6(1)(a))
- Health data: explicit consent (Article 9(2)(a))
Note: health data is special category data under GDPR and is processed only with your explicit consent.
Data retention
Your data is retained for the lifetime of your active account and for 2 years after a verified deletion request is fulfilled.
Your rights
You have the right to: access your data, correct inaccurate data, request erasure, request portability, and withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
How to exercise your rights
Email: info@ofllo.com
We will respond within 30 days.
Cookies
We use essential cookies required for the platform to function. With your consent, we also use analytics cookies to understand how the platform is used. You can manage your cookie preferences at any time via the cookie banner.
Data storage and transfers
All personal data is stored within the European Union. Innoviqor Consulting LP ensures no data is transferred outside the EU without appropriate safeguards in place.
Contact and data controller
Data Controller: Innoviqor Consulting LP
Trading as: Ofllo
Email: info@ofllo.com
For any questions about this policy, your data, or to exercise your GDPR rights, please contact us at the email above and we will respond within 30 days.