HYPHAE
Book a demo
Legal
Privacy Policy
Last updated: 9 November 2026
This policy explains how HYPHAE handles the personal data collected through this website, when you browse it, book a demo or contact us. It does not cover the health data processed in the HYPHAE platform on behalf of hospitals and clinics: each centre is the data controller for its patients, and that processing is governed by our data processing agreement with the centre.
1. Data controller
[HYPHAE legal entity name], [address], France. For any data protection question, write to [privacy email]. Data protection officer: [name, or “to be appointed”].
2. Data we collect and why
Demo and contact requests: your name, professional email, organisation, role, the reason for your request and, if you add them, your message and preferred times. We use them to answer you and organise the demo.
Newsletter (when available): your email address, to send you the newsletter.
Browsing: technical data such as your IP address, browser and the pages you visit, to keep the site secure and working. Audience measurement is only used if you agree to it.
We do not collect health data through this website. Please do not send us any health information about yourself or others through our forms.
3. Legal basis
Answering your request and organising a demo: our legitimate interest in replying to professionals who contact us, or steps taken at your request before a contract.
Newsletter and optional cookies: your consent, which you can withdraw at any time.
Security and technical logs: our legitimate interest in protecting the website. We also process data when the law requires it.
4. How long we keep it
Demo and contact requests: up to three years after our last exchange with you, unless we sign a contract with your organisation.
Newsletter: until you unsubscribe. Cookie choice: six months, after which we ask you again. Technical logs: no longer than needed for security.
5. Who receives it
Only the HYPHAE team members who need it, and service providers acting on our instructions, such as our website host and our email and form tools [list providers]. We never sell your data.
6. Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, and to withdraw your consent at any time. You can also give instructions on what happens to your data after your death.
To use these rights, write to [privacy email]. If you think your rights have not been respected, you can file a complaint with the CNIL (cnil.fr).
7. Cookies
Our use of cookies is explained in our Cookie Policy. You can change your choices at any time from the “Cookie settings” link in the footer.
8. Transfers outside Europe
We aim to keep your data in the European Economic Area. If a provider processes it elsewhere, we rely on safeguards recognised by the GDPR, such as an adequacy decision or the European Commission’s standard contractual clauses.
9. Security
Data is encrypted in transit, access is limited to the people who need it, and our providers are bound by confidentiality and security obligations.
10. Changes to this policy
We may update this policy. The date at the top shows the latest version.