Website publisher
omycare.fr is published by OMYCARE, a French single-member limited liability company (SARL) with share capital of €1,000, registered at 107 rue Raymond Benoist, 60600 Agnetz, France.
SIREN: 981 209 950 · SIRET: 981 209 950 00014 · Beauvais Trade and Companies Register: 981 209 950 · VAT number: FR59 981209950.
Publication director: Guillaume Garcia. Contact: guillaume.garcia@omycare.fr · +33 (0)6 21 83 48 49.
Hosting
Hosting is provided through ChatGPT Sites by OpenAI Ireland Ltd., registered in Ireland under number 737350, with its registered office at 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. Support: https://help.openai.com/.
Domain and DNS management are separate from hosting. Information about service providers and data transfers is set out below.
Content, brands and commercial information
Content, trademarks, logos, photographs and testimonials remain subject to their respective owners’ rights. Their display does not authorise reuse beyond applicable permissions and statutory exceptions.
Services are defined in a proposal tailored to the agreed requirements and scope. An initial discussion without commitment is not the in-depth Zendesk audit, which is a paid service subject to a quotation. Linked external services apply their own terms.
Data controller
OMYCARE, at the address above, is the controller for the processing described in this policy. For questions or requests concerning your data, contact guillaume.garcia@omycare.fr.
Data and purposes
Forms collect your first name, last name, work email, company, topic or area of expertise, message, language and originating page path. Required fields are indicated; without them, your request cannot be processed through the form. Please do not provide sensitive data, passwords or payment information.
We use this information to answer your enquiry, understand your needs, arrange a discussion and prepare a proposal. The legal basis is taking steps at your request before entering into a contract where you would personally be a party, or our legitimate interest in handling business correspondence where you represent an organisation.
Relevant commercial follow-up and website security rely on our legitimate interests. You can object to commercial follow-up by contacting us. Submitting a form does not subscribe you to a newsletter. No CRM or advertising enrichment is connected to this process.
No audience measurement or advertising tool is enabled in this version. Advertising parameters and cookies are not attached to enquiries; no advertising conversion event is sent.
Delivery and recipients
Your enquiry is sent over HTTPS to the website server, then through Scaleway Transactional Email configured in the Paris region (fr-par) to contact@omycare.fr on Google Workspace. This address is an alias of Guillaume Garcia’s business account. Your email is used as the Reply-To address. Messages contain no open-tracking pixel or click tracking.
Within OMYCARE, only Guillaume Garcia accesses website leads. The teams in Madagascar do not have access. Technical providers process the data required for their services: OpenAI Ireland Ltd. for Sites and its infrastructure subprocessors, including Cloudflare; Scaleway for email delivery; and Google Workspace for receiving and retaining correspondence.
The enquiry content is not retained in the website’s application database. This does not exclude processing for delivery or retention in email and provider systems under their contracts.
Security and technical logs
The website uses server-side validation, abuse prevention, rate limiting and deduplication. Application control data includes attempt identifiers, pseudonymised fingerprints, timestamps, statuses and technical delivery references. IP addresses are used to limit abuse through a fingerprint; they are not included in emails or stored in plain text in these application tables.
Application diagnostics exclude form content, the prospect’s name and email, cookies and secrets. Hosting logs are separate: they may contain IP addresses and technical request information for operation, security and troubleshooting. We do not claim that the entire infrastructure is free of IP logs.
Calendly and WhatsApp
Calendly allows you to book a meeting with Guillaume Garcia through his business account, synchronised with Google Calendar. WhatsApp opens a conversation with OmyCare’s WhatsApp Business account. Both are external links, without automatically loaded widgets in our pages.
Information submitted through these channels is used to arrange or continue your discussion. See their policies: https://calendly.com/legal/privacy-notice and https://www.whatsapp.com/legal/privacy-policy-eea.
International processing and transfers
Scaleway Privacy Team confirms that the TEM stack, including support operated exclusively from France, logs and backups, remains within France/the European Union, with no dedicated TEM subprocessor. This does not mean that the entire process takes place within the European Union. ChatGPT Sites does not guarantee European data residency. Hosting, Google Workspace and external services may involve processing outside the European Economic Area.
Relevant transfers are governed by the mechanisms in the providers’ applicable agreements, including European Commission standard contractual clauses or an adequacy decision where its conditions are met. The OpenAI DPA applicable to the business workspace and Google’s Cloud Data Processing Addendum describe this framework. You may request further details and access to relevant safeguards at guillaume.garcia@omycare.fr.
Retention
We limit retention to the purpose pursued. The periods below distinguish correspondence, security data and provider systems; they are not a single retention period for all data.
- Prospect enquiries without a contractual relationship: for necessary handling and relevant follow-up, up to three years from collection or the last contact initiated by the prospect. An OMYCARE reminder alone does not restart that period. Correspondence that is no longer useful is deleted earlier.
- Customer relationships: necessary data is used during the relationship, followed by restricted archiving of records that must be retained. Relevant contracts and commercial correspondence follow the applicable period, generally five years; accounting records are retained for ten years from the end of the relevant financial year. Evidence needed for a dispute is isolated for its duration and applicable legal periods. This does not justify retaining all emails indiscriminately.
- Objections to commercial follow-up: only information needed to respect your choice is retained, for at least three years, and is not used to market to you.
- Cookie preferences: valid for six months. An expired choice does not authorise any tool; the local entry may remain in your browser until replaced or deleted.
- Abuse prevention and deduplication: ten-minute rate-limit windows; expired counters become eligible for cleanup after the following window. Submission identifiers and fingerprints become eligible for deletion after 24 hours, and application diagnostics after seven days. Cleanup is triggered by service activity: these thresholds do not guarantee physical deletion at an exact time when there is no activity.
- Scaleway TEM: following successful delivery, the message body is deleted almost immediately; residual backup or replica copies are purged within seven days. Full or custom headers are not retained: only the MAIL FROM / RCPT TO envelope is stored. This envelope, delivery metadata (addresses, attempts, timestamps and response codes) and SMTP/API logs are retained for the contractual period, while the domain or account remains active.
- Scaleway TEM: the standard queue is limited to 36 hours of unsuccessful delivery attempts. Content is deleted immediately following a permanent rejection by the recipient mail server, after 72 hours when classified as spam, or after 15 days in the event of a block. Blocklists are retained for 15 days after resolution. Backups are retained for seven days.
- Scaleway TEM: deleting the domain triggers deletion of associated data from active systems, with residual backups purged within seven days and webhook events within 15 days. Individual content-erasure requests may be sent to privacy@scaleway.com and are reviewed case by case; they do not cover activity logs retained as evidence of service provision. OMYCARE remains your contact for exercising your rights.
- Other providers’ logs and backups, including OpenAI and Google: retention follows their contracts, service provision, security, incident-resolution needs and applicable obligations. OMYCARE application-table periods do not apply to these systems. OpenAI Support has not supplied additional specific technical retention periods; we do not infer any precise period.
At the end of the applicable period, data is deleted or kept separately with restricted access where required by an obligation or the defence of legal rights. Deletion within provider services and backups follows their contractual procedures and is not represented as instantaneous.
Your rights
Subject to applicable law, you have rights of access, rectification, erasure, restriction and portability. You may object to legitimate-interest processing on grounds relating to your situation, and to direct marketing without giving reasons. You may withdraw consent without affecting earlier lawful processing, and give instructions concerning your data after death under French law.
Send requests to guillaume.garcia@omycare.fr or OMYCARE’s registered office. Proportionate identity verification may be requested where reasonable doubt exists. We normally respond within one month, with a possible two-month extension in the cases allowed by law, notified within the first month. You can complain to the French data protection authority, CNIL: https://www.cnil.fr/fr/plaintes.
This policy will be updated if processing changes. Any future activation of optional tools will be accompanied by appropriate information and, where required, renewed prior consent.