1. Data controller
The controller of data collected through this website is HomePulse ("we", "us"). Full identification details are available in our legal notice.
For any question about your data: hello@homepulse-medtech.com.
2. Data we collect
We only collect data strictly necessary to process your request. We do not purchase data from third parties.
- Form data (contact and investor qualification forms): title, first name, last name, email address, phone number, organisation or profession, qualification answers and free-text message.
- Appointment data: name, email and selected time slot when you book a conversation through our scheduling tool.
- Account data (internal team area): email, name, role and authentication data.
- Minimal technical data needed to operate and secure the website (IP address, browser type and request timestamps).
This website is not intended to collect patient health data. Please never submit identifiable medical information through public forms.
3. Purposes and legal bases
- Responding to contact or qualification requests — legal basis: your consent, collected through the form checkbox, and our legitimate interest in processing incoming requests.
- Arranging an appointment — legal basis: your consent.
- Sending a confirmation email after a form submission — legal basis: taking steps prior to entering into a relationship.
- Keeping the website secure and operational — legal basis: legitimate interest.
We do not use your data for targeted advertising and do not sell it.
4. Retention periods
- Contact and qualification requests: 3 years from the last interaction.
- Appointment data: 1 year after the appointment date.
- Internal accounts: for the duration of the collaboration, then deletion within 3 months.
- Technical logs: no more than 12 months.
5. Recipients and processors
Your data is accessible only to authorised HomePulse personnel. We use the following processors, bound by confidentiality commitments:
- Lovable Cloud — website hosting, database and authentication (hosting in the European Union).
- Resend — transactional email delivery (confirmations and internal notifications).
- Calendly — appointment scheduling and management.
Where a transfer outside the European Union is necessary, it is governed by the European Commission's standard contractual clauses.
6. Cookies and trackers
This website does not use advertising cookies or profiling trackers. Only strictly necessary technical cookies are used (internal area authentication session and display preferences). Details are available in our cookie policy.
7. Security
Data is stored on secure infrastructure with encrypted communications (HTTPS), encryption at rest, database access controls and authentication-restricted access to the internal area.
8. Your rights
Under the GDPR and applicable data protection law, you have the following rights:
- Access to your data
- Correction of inaccurate data
- Erasure (the right to be forgotten)
- Restriction of processing
- Objection, including to direct marketing
- Data portability
- Withdrawal of consent at any time
To exercise these rights, email hello@homepulse-medtech.com. We will respond within one month. You may lodge a complaint with the CNIL (www.cnil.fr).
9. Changes
This policy may be updated to reflect changes to the website or regulations. The last update date appears at the top of this page.