Privacy Policy
September 2026
1. Data controller
Homeoceutics (Sole proprietorship (EI))
7, rue des roses, 85100 Les Sables-d'Olonne, France
Email: contact@homeoceutics.com
Phone: +33 6 76 81 02 58
2. Data Protection Officer
3. Categories of data and purposes
- Account (email, display name, language, password hash, billing address): contract performance — Art. 6(1)(b) GDPR.
- Subscription & orders (plan status, Stripe identifiers, CGU version 2026-05, withdrawal consent timestamp): contract performance — Art. 6(1)(b).
- Transactional email (sending via our mail infrastructure to support@homeoceutics.com): contract performance — Art. 6(1)(b).
- Security & logs (IP, technical logs, CSRF/session cookies): legitimate interest in site security — Art. 6(1)(f).
- Personal catalog organisation (encrypted label wording, label assignments and private ratings): providing the requested account features — Art. 6(1)(b). Ratings are visible only to their author. A practitioner may choose to share a label assignment with all patients currently or subsequently linked to their active practitioner account.
- Catalog search statistics (locale, result count, date only — search text is never stored): legitimate interest in aggregate service measurement — Art. 6(1)(f); see Section 8.
- Analytics cookies (Google Analytics 4, if you accept): consent — Art. 6(1)(a); see our Cookie Policy.
- Support chat (Crisp technical and session data, IP address, browser information, current page, messages and attachments you choose to send): responding to your support request and securing the service — Art. 6(1)(b) and (f). Only after the chat is opened, a signed-in user with a verified email address is identified to Crisp by that email address and, when provided, their display name. The Homeoceutics integration does not add any internal identifier, role, subscription, segment, health data or other business data to the information sent to Crisp.
4. Recipients
- Stripe (payments) — stripe.com/privacy
- OVH (hosting) — 2 rue Kellermann, 59100 Roubaix, France
- Email delivery for transactional messages (support@homeoceutics.com)
- Crisp IM SAS (support chat processor) — crisp.chat/en/privacy
- Your linked patients, only for catalog labels that you explicitly mark as shared while your practitioner access is active. Personal ratings are never shared.
5. Transfers outside the European Union
6. Retention periods
- Active account: for the duration of your registration.
- Inactive account: deletion or anonymisation after 3 years of inactivity following notice where possible.
- Technical logs: 1 year.
- Personal labels and ratings: until you delete them or your account is deleted. Removing a shared practitioner relationship immediately hides the corresponding labels without disclosing ratings.
- Crisp support data: conversations, attachments and associated contact information are kept for no more than 12 months after the last exchange, then deleted through our operational review, unless a legal obligation or dispute requires longer retention.
- Billing & tax records: 3 years (legal obligation).
7. Your rights
8. Potential health-related data
Catalog search terms and personal labels may reveal health-related information. We do not store the wording of searches in analytics or HTTP access logs. Personal label wording is encrypted at rest and its protected search tokens are not included in your export. Labels received from a practitioner are limited to active patient relationships and active practitioner access. Only anonymous aggregate search counts (locale, number of results, timestamp) are retained for internal statistics.
Support warning: Crisp is provided only for technical and account support. Do not send health information, patient information, symptoms, diagnoses, treatments, passwords, payment-card details or other sensitive data through the chat. The chat is not a medical or emergency service.