Privacy policy

In short

This site collects no health data, never asks you to describe your symptoms online, and sets no advertising cookies. Appointments are booked entirely on Doctolib, and the contact form is built so that no medical information reaches it.

What the site does not do

There is no advertising tracker, no social button that would follow you from site to site, and no profiling tool. Fonts are served from the site’s own server: your browser contacts no third party to display them, so your IP address is not passed on for that purpose.

The Google reviews shown on this site

The reviews shown here are collected directly from Google when the site is built, then served from osteo-paris9.com. There is no embedded review widget, no third-party script and no cookie set as a result.

One exception, and it deserves saying: each reviewer’s profile picture is still loaded from Google’s servers. Google’s terms require the author’s name and photo to be displayed as provided, and forbid keeping a copy. In practice, when a page carrying reviews loads, your browser requests those few images from Google, which discloses your IP address to them. The site instructs your browser to send no originating page with that request (referrerpolicy="no-referrer"), so Google does not learn which page you were reading. No cookie is set by these images.

This is the only request to a third-party server this site produces, and it only concerns the pages that display reviews: the home page, the About page and the Fees and booking page.

The contact form

It is there for questions that are not appointment requests: getting there, an invoice, an opening time. It collects your name, your email address, a subject chosen from a list, and your message.

No field invites you to describe symptoms, and the form explicitly asks you not to write any. That is deliberate. That is what allows this site to process no health data, and therefore to fall outside the French requirement for certified health data hosting.

The message is sent by email to the practice’s mailbox, hosted by OVH in France. Nothing is stored on the site’s server: no database, no file, no copy. The message leaves, and that is all. Your details are used only to reply to you and are passed to no one.

The location maps

The practice pages offer a Google Maps view. It does not load on its own: until you click the button that displays it, no request is sent to Google and your IP address is not passed to them. Nothing leaves before your click. If you choose to display it, Google’s own terms apply from that click onwards.

Analytics

If analytics are used, they are configured in the consent-exempt manner recommended by the French data protection authority: aggregated data, truncated IP address, no cross-site tracking, no retention beyond thirteen months. That is why no cookie banner is imposed on arrival.

Booking

Booking a slot happens on Doctolib, outside this site. As soon as you click a booking button you leave osteo-paris9.com and Doctolib’s rules apply, including its data protection policy. Doctolib is certified for hosting health data in France.

Consultation records

Information gathered during a consultation is covered by professional confidentiality. It is kept as part of professional practice, is never sold or passed to third parties for commercial purposes, and never travels through this site.

Your rights

You have the right to access, correct, erase, restrict and object to the processing of data concerning you. To exercise it, write to contact@osteo-paris9.com.

You may also lodge a complaint with the Commission nationale de l’informatique et des libertés, 3 place de Fontenoy, 75007 Paris, France.

Hosting

The site is hosted by OVH SAS in France. Server connection logs, which include IP addresses, are kept for service security and for the applicable legal period.