Privacy Policy
Data Controller
The data controller for personal data is:
ReflexoLib — [Company name to be completed]
Email: contact@reflexolib.com
DPO (Data Protection Officer): dpo@reflexolib.com
---
Data Collected
We collect the following data:
For Clients:
- First name, last name, email address, phone number
- Connection data (IP address, browser, date and time of connection)
- Appointment history and posted reviews
- Notification preferences
For Practitioners:
- First name, last name, email address, phone number
- SIRET number, ADELI number
- Office address, GPS coordinates
- Specialties, certifications, experience
- Photos (profile and office)
- Availability and rates
---
Purposes of Processing
Your personal data are collected for the following purposes:
- Creation and management of your user account
- Connecting Clients with Practitioners
- Management of appointments and payments
- Sending notifications and appointment reminders
- Sending the newsletter (with consent)
- Improving the Platform and usage statistics
- Compliance with legal and regulatory obligations
---
Legal Basis
The processing of your data is based on:
- Your consent (newsletter, non-essential cookies)
- Performance of the contract (account management, appointments)
- ReflexoLib’s legitimate interest (service improvement, statistics)
- Legal obligations (billing, fraud prevention)
---
Retention Period
Your personal data are retained for the period strictly necessary for the processing purpose:
- Account data: for the duration of your registration + 3 years after deletion
- Appointment data: 5 years (legal requirement)
- Billing data: 10 years (accounting requirement)
- Cookies: up to 13 months
- Browsing data: 25 months
---
Your Rights (GDPR)
In accordance with the GDPR and the French Data Protection Act, you have the following rights:
- Right of access: obtain confirmation that your data are being processed and receive a copy
- Right to rectification: correct inaccurate or incomplete data
- Right to erasure: request deletion of your data
- Right to data portability: receive your data in a structured, machine‑readable format
- Right to object: object to the processing of your data
- Right to restriction: request restriction of processing
- Right to withdraw consent: at any time, without affecting the lawfulness of prior processing
To exercise these rights, contact us at: dpo@reflexolib.com
You may also lodge a complaint with the CNIL (www.cnil.fr).
---
Cookies
The Platform uses cookies to:
- Essential cookies: site functionality (session, authentication) — no consent required
- Analytical cookies: anonymised audience measurement — subject to consent
You can manage your cookie preferences at any time via your browser settings. Disabling certain cookies may affect your experience on the Platform.
---
Data Transfers
Your personal data are hosted in France / the European Union. No data transfer outside the EU is performed without appropriate safeguards (standard contractual clauses, European Commission adequacy decision).
---
Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction:
- Encryption of data in transit (HTTPS/TLS)
- Password hashing (bcrypt)
- Role‑based access control
- Regular backups