Privacy policy

Last updated: [date]

Data controller

Personal data collected on the doctorsport website is processed by [company legal name], [registered address], acting as data controller. For any question about your data, contact [privacy email].

Data we collect

We only collect the data needed to run the service:

  • Account data: first and last name, email address, password (stored encrypted).
  • Profile data: date of birth, the sports you practise, your practice level and habits, profile photo, city.
  • For practitioners: profession, specialty, diplomas, practice address, prices and the content of your public profile.
  • Messages exchanged through the platform's chat.
  • Usage and connection data: sign-in dates, IP address, browser type.

Purposes and legal bases

We process this data to:

  • Create and manage your account and, for practitioners, your public profile (performance of the contract).
  • Connect athletes and practitioners, including through the messaging feature (performance of the contract).
  • Manage practitioner subscriptions and payments (performance of the contract and legal obligations).
  • Send service emails such as confirmations and notifications (performance of the contract or legitimate interest).
  • Ensure the security of the service and prevent fraud (legitimate interest).

Retention

Account and profile data is kept for as long as your account is active. When you delete your account, it and the data attached to it – profile, sports, conversations and their attachments – are erased immediately, not queued for later deletion.

A registration whose email address is never confirmed is deleted after 30 days, as the account cannot be used.

Beyond that, we keep: profile view statistics for 25 months; the call log (who called whom, when and the outcome – never the content of a call) for 12 months; read notifications for 12 months; and sign-in sessions for 30 days after your last activity.

Invoicing data is kept for 10 years as required by French commercial law.

Recipients

Your data is accessible to the doctorsport team on a need-to-know basis, and to the providers that help us operate the platform (hosting, email delivery, payments), acting as processors under our instructions. Data is hosted in [hosting location].

Profile information that you choose to publish as a practitioner is visible to visitors of the website. Your data is never sold.

Bot protection (Cloudflare Turnstile)

Our registration forms are protected by Cloudflare Turnstile, a service that tells human visitors apart from automated bots to prevent fraudulent sign-ups and abuse. When you complete a registration form, Turnstile collects technical signals from your device and browser – including your IP address, a TLS/browser fingerprint, the user-agent string and the site identifier – and analyses them to confirm you are human. It does not require you to solve a puzzle in most cases and does not use these signals to build an advertising profile or track you across other websites.

We rely on our legitimate interest in securing the service and preventing fraud (Article 6(1)(f) GDPR). Cloudflare acts as our processor when performing this check on our behalf, and as an independent controller when it uses the signals to improve its own bot-detection technology. For more information, see Cloudflare's Turnstile Privacy Policy at https://www.cloudflare.com/turnstile-privacy-policy/.

Your rights

Under the GDPR and the French Data Protection Act, you have the right to:

  • access your data and obtain a copy of it;
  • rectify inaccurate or incomplete data;
  • have your data erased;
  • restrict or object to its processing;
  • receive your data in a portable format;
  • set directives on what happens to your data after your death.

Cookies

The website only uses cookies that are strictly necessary for it to work (session, language and consent). [If audience-measurement or third-party cookies are added, describe them here and collect consent.]

Contact

To exercise your rights or for any question about this policy, write to [privacy email]. You can also lodge a complaint with the CNIL (www.cnil.fr).