This policy describes how My Concierge collects, uses and protects the personal data of users of its platform, in accordance with the General Data Protection Regulation (GDPR).
1. Data controller
The data controller is My Concierge. For any question regarding your data, you can contact us at the address shown in the legal notice.
2. Data collected
We collect only the data strictly necessary to provide the service:
- Identity and contact data: name, email address, phone number.
- Booking data: services booked, dates, service location, notes.
- Payment data: processed by our provider Stripe; we never store full bank card details.
- Technical data: connection logs and session identifiers required for authentication.
3. Purposes and legal bases
Your data is processed for the following purposes:
- Performance of the contract: managing bookings, payments and the client relationship.
- Legal obligations: retaining billing records for accounting and tax purposes.
- Legitimate interest: platform security and fraud prevention.
- Consent: optional communications, where you have consented.
4. Data recipients
Your data may be shared with:
- The provider in charge of your booking, solely for the delivery of the service.
- Our technical subprocessors (payment, email, hosting), strictly governed.
- The competent authorities where required by law.
We never sell your personal data to third parties.
5. Retention period
Your account data is kept for as long as your account is active. After your account is closed, your identity data is anonymised.
Billing data is retained for the statutory period required by accounting and tax obligations, even after your account is anonymised.
6. Your rights
In accordance with the GDPR, you have the following rights:
- Right of access and portability of your data.
- Right to rectify inaccurate data.
- Right to erasure ("right to be forgotten"), within the limits of statutory retention obligations.
- Right to object to and restrict processing.
- Right to withdraw your consent at any time.
You can exercise your access and deletion rights directly from your client area, under "Privacy & data".
7. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration or disclosure.
8. Complaint
You have the right to lodge a complaint with the competent supervisory authority (in France, the CNIL) if you believe the processing of your data does not comply with the regulations.