Privacy policy.

What we collect

noresia collects strictly what a medical appointment needs, and nothing more.

• Your name, email address and phone number, for your account and your bookings
• Your date of birth, when you claim a record a clinic opened, as a check
• Your past and upcoming appointments, gathered in your health space
• The facility's and its team's information, for clinics

Why we collect it

This data serves to organise your appointments: booking a time, letting the clinic confirm and receive you, notifying you by email, and letting you find your history again.

noresia sells no data, shows no advertising, and shares nothing with third parties for commercial purposes.

Who accesses it

Only the clinic where you have an appointment accesses your care information. Each clinic is technically partitioned: one clinic cannot read another's data.

The noresia team reaches a clinic's data only with that clinic's explicit authorisation and for a limited time. Every access is journaled and stays auditable.

For how long

Your data stays recorded for as long as your record is active. If your record is deleted, we erase it from our systems. One exception: the law obliges clinics to keep medical records for a legal period, even after your account is deleted.

Your rights

Under law 18-07 on the protection of natural persons in the processing of personal data, and in line with the GDPR, you may at any time:

• Access the data noresia holds about you
• Have it corrected if it is inaccurate
• Ask for it to be deleted where the law allows
• Withdraw your consent at any time: the use you had accepted stops from then on

Exercising a right

Write to us at contact@noresia.com setting out your request, then the email address of your account or the phone number attached to your record. A real person handles it, with an identity check proportionate to how sensitive it is.

The detail of our protection architecture, encryption, partitioning and journaling, is on a page of its own.

Trust and security