L’authentique retour
du Bien-Être !

Privacy Policy – Atribu

Last updated: 29/11/2025

Company: Atributech

Registry: 990 815 839 R.C.S

Address: 10 rue de la Paix 75002 Paris

Email: anais@atribu.co

Atribu (“we”, “us”, “our”) is a platform connecting users with wellness practitioners, retreats, and holistic services. We are committed to protecting your personal data and respecting your privacy, in accordance with the EU General Data Protection Regulation (GDPR) and applicable national laws.

This Privacy Policy explains what personal data we collect, how we use it, your rights, and how to contact us.


1. Data Controller

The data controller responsible for your information is:

Atributech

10 rue de la Paix 75002 Paris

Email: anais@atribu.co

If you are based in the EU, you may also contact our EU representative (if required by scale of processing):


2. What Personal Data We Collect

We may collect and process the following categories of personal data when you use Atribu:

2.1. Account & Identification Data

  • Name and surname
  • Email address
  • Phone number (optional)
  • Password (encrypted)
  • Profile information (bio, photo, preferences)

2.2. Booking & Transaction Data

  • Services or retreats booked
  • Dates, times, and locations of appointments
  • Payment information (processed securely by third-party payment processors; we do not store full card details)
  • Billing address
  • Cancellation or refund records

2.3. Practitioner & Venue Data (if you register as a professional or venue owner)

  • Professional qualifications
  • Certifications or insurance documents (optional)
  • Service descriptions, pricing, availability
  • Venue details

2.4. Communication & Support

  • Messages exchanged with practitioners or with Atribu support
  • Emails sent to us
  • Reviews or ratings

2.5. Technical & Usage Data

  • IP address
  • Device identifiers
  • Browser type and operating system
  • Login timestamps
  • Pages viewed, clicks, and navigation
  • Cookies and similar tracking technologies (see Section 9)

3. Legal Bases for Processing

We process personal data under the following lawful bases:

3.1. Contractual Necessity

To:

  • Create and manage your account
  • Process bookings and payments
  • Provide customer support
  • Facilitate practitioner–client communication

3.2. Legitimate Interests

To:

  • Improve our platform and services
  • Prevent fraud or abuse
  • Secure our systems
  • Ensure a high-quality user experience

3.3. Consent

For:

  • Marketing emails or newsletters
  • Optional cookies
  • Publishing reviews with your display name You may withdraw your consent at any time.

3.4. Legal Obligation

To comply with tax, accounting, and consumer protection laws.


4. How We Use Your Personal Data

We use your information to:

  • Operate and maintain the Atribu platform
  • Process bookings and payments
  • Provide practitioners the necessary details to deliver services
  • Communicate updates, confirmations, or security alerts
  • Improve our platform functionalities
  • Personalize content and recommendations
  • Ensure compliance with legal and regulatory requirements

We never sell your personal data.


5. How We Share Your Data

We may share your data with:

5.1. Practitioners & Venue Owners

Only when you book a service, and only the data needed to perform the service (e.g., name, contact info, appointment details).

5.2. Service Providers (Processors)

Such as:

  • Payment processors
  • Hosting providers
  • Email delivery systems
  • Customer support tools
  • Analytics and security services

All processors operate under GDPR-compliant data processing agreements (DPAs).

5.3. Legal Authorities

If required by law, or to protect our rights or users.

5.4. Corporate Transactions

If Atribu is acquired, merged, or restructured, your information may transfer under privacy safeguards.

We do not sell or rent personal data.


6. International Transfers

Because Atribu operates globally, data may be transferred outside the EU/EEA.

When we do so, we use lawful safeguards such as:

  • Adequacy decisions (e.g., transfers to the UK)
  • Standard Contractual Clauses (SCCs)
  • Data Processing Agreements

You may request a copy of these safeguards via privacy@atribu.co.


7. Data Retention

We keep personal data only for as long as necessary for the purposes collected:

  • User account data: until account deletion
  • Booking records: 6–10 years (legal requirement)
  • Communications: up to 3 years
  • Analytics data: 12–36 months
  • Consent records: 5 years

You may request deletion at any time (see Section 8).


8. Your Rights Under GDPR

You have the following rights regarding your personal data:

✔ 

Right of access

 — obtain a copy of your personal data

✔ 

Right to rectification

 — correct inaccurate or incomplete data

✔ 

Right to erasure (“right to be forgotten”)

✔ 

Right to restrict processing

✔ 

Right to data portability

✔ 

Right to object

 to processing based on legitimate interests or direct marketing

✔ 

Right to withdraw consent

 at any time

✔ 

Right not to be subject to automated decision-making

✔ 

Right to lodge a complaint

 with a Data Protection Authority (CNIL in France, or your local authority)

To exercise any of these rights, contact:

privacy@atribu.co


9. Cookies & Tracking Technologies

Atribu uses cookies to:

  • Enable essential platform functions (login, bookings)
  • Improve performance
  • Analyze traffic and usage
  • Personalize recommendations
  • Deliver marketing (optional)

Users in the EU will see a cookie consent banner with the ability to accept or reject non-essential cookies.

A detailed Cookie Policy can be generated separately.


10. Security Measures

We take appropriate technical and organizational measures to protect your data, including:

  • Encrypted HTTPS traffic
  • Secure hosting with access controls
  • Encrypted passwords
  • Regular audits
  • Role-based access
  • Monitoring and threat detection systems

No system can be 100% secure, but we continuously evolve our protections.


11. Children’s Privacy

Atribu is not intended for children under 16 years old.

We do not knowingly collect personal data from minors.

If we discover such data, we will delete it immediately.


12. Changes to This Policy

We may update this Privacy Policy from time to time.

We will notify users via email or platform notifications when material changes occur.


13. Contact Us

For any questions or to exercise your rights:

📧 anais@atribu.co

🏢 Atributech

10 rue de la Paix 75002 Paris, France