Privacy Policy

Last updated: 25 May 2026

Who we are

Ofllo is a technology platform operated by Innoviqor Consulting LP that connects patients with independent, EU-licensed medical professionals. Innoviqor Consulting LP is the data controller responsible for your personal data under the GDPR. Ofllo does not provide medical advice, diagnosis, or treatment.

What data we collect

  • Name and email address (on signup)
  • Health data entered voluntarily by the patient (vitals, logs, uploaded documents)
  • Appointment and consultation history
  • Payment information — processed by Stripe; Ofllo and Innoviqor Consulting LP do not store card details

Why we collect it

To provide the telehealth booking, consultation, and health monitoring service you have signed up for.

Legal basis under GDPR

  • Standard personal data: explicit consent (Article 6(1)(a))
  • Health data: explicit consent (Article 9(2)(a))

Note: health data is special category data under GDPR and is processed only with your explicit consent.

Data retention

Your data is retained for the lifetime of your active account and for 2 years after a verified deletion request is fulfilled.

Your rights

You have the right to: access your data, correct inaccurate data, request erasure, request portability, and withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

How to exercise your rights

Email: info@ofllo.com

We will respond within 30 days.

Cookies

We use essential cookies required for the platform to function. With your consent, we also use analytics cookies to understand how the platform is used. You can manage your cookie preferences at any time via the cookie banner.

Data storage and transfers

All personal data is stored within the European Union. Innoviqor Consulting LP ensures no data is transferred outside the EU without appropriate safeguards in place.

Contact and data controller

Data Controller: Innoviqor Consulting LP

Trading as: Ofllo

Email: info@ofllo.com

For any questions about this policy, your data, or to exercise your GDPR rights, please contact us at the email above and we will respond within 30 days.