Privacy policy
Last updated: 30/09/2026
This page explains which personal data is collected through energie-essentielle.com and during sessions, why, how long it is kept, and what your rights are.
1. Data controller
Stéphanie Vuong, shiatsu and wellness massage practitioner trading as « L'Énergie Essentielle », is the controller of the data collected through the website energie-essentielle.com and during sessions.
- Practice address: Chaussée de Louvain 471, 1030 Schaerbeek (Brussels), Belgium
The activity is carried out within the Smart cooperative. Quotes and invoices are issued by Productions Associées ASBL (company number 0896.755.397, rue Coenraets 72, 1060 Brussels), which processes your billing data for its own accounting obligations.
This policy complies with the General Data Protection Regulation (GDPR, EU 2016/679) and the Belgian Act of 30 July 2018.
2. Data collected
Only the data needed to organise your sessions and answer your requests is collected.
| When | Data |
|---|---|
| Booking through the online calendar (Cal.com) | Name, email, phone number, chosen treatment and time slot, optional message |
| Contact by WhatsApp or email | Name, phone number or email address, content of your messages |
| Business quote form | Name, company, email, phone number, reason for contact, requested service, number of hours, frequency, message |
| Review form | First name, name or nickname, email, rating, testimonial |
| Session | Information about your physical condition that you choose to share (tension, pain, pregnancy, contraindications) |
| Billing | Name, address, company and VAT number where applicable, amount |
| Browsing the website | IP address, browser, pages visited (the host's technical logs) |
Information about your health is sensitive data under Article 9 of the GDPR. It is only collected with your explicit consent, solely to adapt the session safely, and is never passed on to third parties, including your employer during workplace sessions.
3. Purposes and legal bases
Each processing activity relies on a legal basis provided by the GDPR.
| Purpose | Legal basis |
|---|---|
| Managing your appointments and contacting you about them | Performance of a contract (Art. 6.1.b) |
| Adapting the session to your physical condition | Explicit consent (Art. 9.2.a) |
| Answering information and quote requests from businesses | Pre-contractual steps (Art. 6.1.b) |
| Issuing invoices and keeping accounts | Legal obligation (Art. 6.1.c) |
| Publishing your review on the website | Consent (Art. 6.1.a) |
| Keeping the website secure and working properly | Legitimate interest (Art. 6.1.f) |
No newsletter is sent, your data is never sold, and no automated decisions are made about you.
4. Cookies and third-party services
The website only uses technical cookies needed for it to work. It sets no analytics or advertising cookies.
Some third-party services may nevertheless receive browsing data:
- Cal.com: clicking a booking link takes you to the Cal.com website, which has its own privacy and cookie policy.
- Google Maps and WhatsApp: links to these services only send data once you click on them.
You can block or delete cookies in your browser settings.
5. Recipients
Only Stéphanie Vuong has access to your data. It also passes through the providers below, solely for the service they provide.
| Provider | Role | Location |
|---|---|---|
| OVH SAS | Hosting of the website and forms | France (EU) |
| Cal.com, Inc. | Online booking calendar | United States |
| Meta (WhatsApp) | Messaging | EU and United States |
| Microsoft (Outlook) | EU and United States | |
| Smart / Productions Associées ASBL | Quotes and invoicing | Belgium |
For workplace sessions, the employer only receives the information needed for organisation (schedule, invoicing), never the content of the sessions. Your data may also be disclosed to the authorities where required by law.
6. Transfers outside the European Union
Cal.com, Meta and Microsoft may process your data in the United States. These transfers are covered by the European Commission's adequacy decision on the EU–US Data Privacy Framework for certified companies, or otherwise by the Commission's standard contractual clauses.
Information about these safeguards is available on request (see the Contact section).
7. Retention periods
Your data is deleted as soon as it is no longer needed, according to the following periods.
| Data | Period |
|---|---|
| Appointments and exchanges (Cal.com, WhatsApp, email) | 2 years after the last session |
| Health information shared for the session | 2 years after the last session, then destroyed |
| Quote requests that did not lead to a booking | 1 year after the last exchange |
| Invoices and accounting records | 10 years (Belgian legal requirement), kept by Productions Associées ASBL |
| Published reviews | As long as the review is online; removed on simple request |
| Website technical logs | 12 months maximum |
8. Security
Your data is protected by an encrypted connection (HTTPS), access restricted to Stéphanie Vuong, accounts secured with strong passwords, and regular website updates.
In the event of a data breach posing a risk, the Data Protection Authority is notified within 72 hours and, if the risk is high, you are informed as well.
9. Your rights
You can exercise the following rights free of charge (see the Contact section):
- Access: find out which data is held about you and receive a copy.
- Rectification: have inaccurate or incomplete data corrected.
- Erasure: request deletion of your data, unless there is a legal obligation to keep it.
- Restriction: have processing temporarily suspended.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: withdraw your consent at any time, without affecting past processing.
You will receive a reply within one month, which may be extended by two months for complex requests. Proof of identity may be requested.
If you believe your rights have not been respected, you can lodge a complaint with the Belgian Data Protection Authority, rue de la Presse 35, 1000 Brussels — www.dataprotectionauthority.be.
10. Minors, changes and contact
Minors
A session for a minor is booked by a parent or legal guardian, who provides the necessary information and gives consent. The review form is not intended for children under 13.
Changes
This policy may be updated; the date at the top of the page shows the latest version.
Contact
For any question or to exercise your rights, write to Stéphanie Vuong — L'Énergie Essentielle, Chaussée de Louvain 471, 1030 Schaerbeek, or use the contact options listed on the Book a session page.
