Privacy Policy
Last updated: April 2026
1. Data Controller
Potiche ASBL
Uccle, Brussels, Belgium
Email: info@potiche.be
2. Data Collected
We collect the following data when you use our website:
- Registration data: first name, last name, email address, password (encrypted)
- Profile data: phone number, avatar, preferred language
- Booking data: reserved courses, dates, amounts paid
- Payment data: processed exclusively by Stripe (we do not store your banking details)
- Contact data: messages sent through the contact form
- Connection data: IP address, browser type, pages visited (technical cookies)
3. Purpose of Processing
Your data is used to:
- Manage your account and course bookings
- Process your payments securely via Stripe
- Send you booking confirmations and course reminders
- Respond to your contact requests
- Improve our website and services
- Send our newsletter (only with your consent)
4. Legal Basis
The processing of your data is based on: performance of a contract (bookings), your consent (newsletter, non-essential cookies), our legitimate interests (service improvement), and legal obligations (invoicing, accounting).
5. Data Sharing
Your data may be shared with:
- Stripe: for payment processing (Stripe privacy policy)
- Supabase: for database hosting (EU servers)
- Cloudflare: for website hosting and security
We never sell your data to third parties. All our subprocessors comply with the GDPR.
6. Data Retention
Your account data is retained as long as your account is active. Upon account deletion, your personal data is removed within 30 days. Billing data is retained for 7 years in accordance with Belgian law.
7. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate data
- Right to erasure: request the deletion of your data
- Right to portability: receive your data in a structured format
- Right to object: object to the processing of your data
- Right to withdraw consent: withdraw your consent at any time
To exercise your rights, contact us at info@potiche.be. You can also delete your account from your profile settings.
8. Cookies
We only use essential technical cookies for the proper functioning of the website (authentication, language preferences). These cookies do not require your consent. We do not use advertising cookies or third-party trackers.
9. Security
We take the security of your data seriously. The site is protected by HTTPS (TLS), passwords are encrypted, authentication tokens are stored in HTTP-only cookies, and we follow security best practices (OWASP Top 10).
10. Contact & Complaints
For any questions regarding this policy, contact us at info@potiche.be.
If you believe your rights are not being respected, you can file a complaint with the Belgian Data Protection Authority (APD): www.autoriteprotectiondonnees.be