Privacy Policy
May 2026
1. Data controller
Homeoceutics (Sole proprietorship (EI))
7, rue des roses, 85100 Les Sables-d'Olonne, France
Email: contact@homeoceutics.com
Phone: +33 6 76 81 02 58
2. Data Protection Officer
No Data Protection Officer (DPO) has been appointed. Privacy requests: contact@homeoceutics.com.
3. Categories of data and purposes
- Account (email, display name, language, password hash, billing address): contract performance — Art. 6(1)(b) GDPR.
- Subscription & orders (plan status, Stripe identifiers, CGU version 2026-05, withdrawal consent timestamp): contract performance — Art. 6(1)(b).
- Transactional email (sending via our mail infrastructure to support@homeoceutics.com): contract performance — Art. 6(1)(b).
- Security & logs (IP, technical logs, CSRF/session cookies): legitimate interest in site security — Art. 6(1)(f).
- Catalog search statistics (locale, result count, date only — search text is never stored): legitimate interest in aggregate service measurement — Art. 6(1)(f); see Section 8.
- Analytics cookies (Google Analytics 4, if you accept): consent — Art. 6(1)(a); see our Cookie Policy.
4. Recipients
- Stripe (payments) — stripe.com/privacy
- OVH (hosting) — 2 rue Kellermann, 59100 Roubaix, France
- Email delivery for transactional messages (support@homeoceutics.com)
5. Transfers outside the European Union
Stripe may process data in the United States. Transfers rely on appropriate safeguards such as the EU–US Data Privacy Framework (where applicable to the provider) and/or the European Commission’s Standard Contractual Clauses. You may request a copy of relevant safeguards from Stripe or contact us for assistance.
6. Retention periods
- Active account: for the duration of your registration.
- Inactive account: deletion or anonymisation after 3 years of inactivity following notice where possible.
- Technical logs: 1 year.
- Billing & tax records: 3 years (legal obligation).
7. Your rights
You have the right of access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent (for consent-based processing). You may export certain data from your dashboard. To exercise your rights, contact contact@homeoceutics.com. You may lodge a complaint with the CNIL (France): www.cnil.fr.
8. Potential health-related data
Catalog search terms may reveal health-related information. We therefore do not store the wording of your searches or link search events to your user account. Only anonymous aggregate counts (locale, number of results, timestamp) are retained for internal statistics.
9. Checkout consent records
When you purchase digital content, we record that you accepted Terms version 2026-05 and waived withdrawal for immediate performance, with a timestamp, as required by French consumer law.
10. Changes
We may update this policy. Material changes will be communicated by email or on-site notice where appropriate.