Privacy Policy

1. Data Controller

Atributech serves as the responsible data controller, based at 10 rue de la Paix 75002 Paris, reachable via [email protected].

2. Personal Data Collection Categories

Account & Identification Data

Name, surname, email, phone number, encrypted password, profile information.

Booking & Transaction Data

Services booked, appointment dates/times/locations, payment information processed by third-party providers, billing address, cancellation/refund records.

Professional Data

Qualifications, certifications, insurance documents, service descriptions, pricing, availability, venue details.

Communication & Support

Messages with practitioners, support emails, reviews, ratings.

Technical & Usage Data

IP address, device identifiers, browser type, operating system, login timestamps, page views, clicks, navigation patterns, cookies.

3. Legal Bases for Processing

• Contractual Necessity: Account creation, booking processing, payment handling, customer support, practitioner communication.
• Legitimate Interests: Platform improvement, fraud prevention, system security, user experience enhancement.
• Consent: Marketing communications, optional cookies, review publication.
• Legal Obligation: Tax, accounting, and consumer protection compliance.

4. Data Usage

The platform operates and maintains services, processes bookings and payments, provides practitioners with service delivery details, communicates updates and security alerts, improves functionalities, personalizes recommendations, and ensures regulatory compliance.

We never sell your personal data.

5. Data Sharing

• Practitioners & Venue Owners: Only necessary information when services are booked.
• Service Providers: Payment processors, hosting providers, email systems, support tools, analytics services — all operating under GDPR-compliant data processing agreements.
• Legal Authorities: When legally required or to protect rights.
• Corporate Transactions: Information transfers under privacy safeguards during acquisitions or restructuring.

Personal data is not sold or rented.

6. International Transfers

Data may transfer outside EU/EEA using adequacy decisions, Standard Contractual Clauses, or data processing agreements. Copies available via [email protected].

7. Data Retention

• User account data: Retained until deletion
• Booking records: 6–10 years (legal requirement)
• Communications: Up to 3 years
• Analytics: 12–36 months
• Consent records: 5 years

8. Your GDPR Rights

Users possess:

• Right of access to personal data
• Right to rectification of inaccurate information
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right against automated decision-making
• Right to lodge complaints with Data Protection Authorities

Contact: [email protected]

9. Cookies & Tracking Technologies

Cookies enable essential functions, improve performance, analyze traffic, personalize recommendations, and deliver marketing.

EU users receive cookie consent banners allowing acceptance or rejection of non-essential cookies.

10. Security Measures

Technical and organizational protections include:

• Encrypted HTTPS traffic
• Secure hosting with access controls
• Encrypted passwords
• Regular audits
• Role-based access
• Monitoring systems

No system can be 100% secure, but we continuously evolve our protections.

11. Children's Privacy

Atribu is not intended for users under 16 years old. Unknowingly collected minor data will be deleted immediately.

12. Policy Changes

Updates may occur with notification via email or platform announcements for material changes.

13. Contact Information

For questions regarding this Privacy Policy: