Privacy Policy
Last updated 11 July 2026
This policy explains how [Bloomsline legal entity] ("Bloomsline", "we") processes personal data when you use the Bloomsline platform. We are the data controller for the data described here, except where we act as a processor on behalf of a practitioner (see Data Protection).
Who we are
[Bloomsline legal entity], [registered address] ([SIREN / company number]). For any privacy question, contact privacy@bloomsline.care.
Data we collect
We collect only what the service needs:
- Account data: name, email, and authentication details of practitioners.
- Practice data: a practitioner’s public profile (bio, specialties, availability).
- Patient data entered by practitioners: identity and clinical records (health data — special-category).
- Technical data: device/log information needed for security and reliability.
Why we process it (legal bases)
- To provide the service (performance of a contract).
- To keep it secure and prevent abuse (legitimate interest).
- Health data is processed for the provision of care, under Article 9(2)(h) GDPR and the applicable French health-data rules.
- For any optional processing (e.g. marketing), only with your consent.
Where your data is hosted
Personal and health data are hosted on HDS-certified (Hébergeur de Données de Santé) infrastructure located in the European Union. See our Security and Data Protection pages.
Sharing and subprocessors
We do not sell personal data. We use vetted subprocessors (hosting, email, analytics) under data-processing agreements. A current list is available on request and maintained on the Data Protection page.
Retention
We keep personal data only as long as needed for the purposes above or as required by law (health records are subject to statutory retention periods). Accounts and their data can be deleted on request, subject to those legal obligations.
Your rights
Under the GDPR you may request:
- access to your data
- correction of inaccurate data
- erasure (where no legal obligation to retain applies)
- restriction or objection to certain processing
- portability of data you provided
Contact
To exercise your rights or raise a concern, contact privacy@bloomsline.care. You also have the right to lodge a complaint with the CNIL (the French data-protection authority).