Privacy Policy

Last updated: 13 August 2026.

Cabinet démo docelya takes the protection of your privacy seriously. This policy explains what personal data we process, why, on what legal basis, with whom it is shared and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and Belgian law.

1. Data controller

The data controller is Cabinet démo docelya, located at Avenue de la Démonstration 1, 1000 Bruxelles, Belgique.

  • Phone: 02 000 00 00
  • Email: demo@docelya.com

2. Data we process

  • Identity: first and last name, date of birth.
  • Contact details: phone number, email address (optional).
  • National Register Number (new patients): to create and reliably identify your file, and for the link with health insurance/eHealth.
  • Health data: reason for the visit, practitioner seen, appointment history and notes relevant to your care (special category, Art. 9 GDPR).
  • Booking data: channel used (website, WhatsApp, phone, front desk), date and time.
  • Communications: messages exchanged with our WhatsApp bot; for calls to our phone assistant, the call duration and, where applicable, a transcript of the reason.
  • Technical data: cookies strictly necessary for the site to work.

3. Purposes and legal bases

  • Manage your appointments (booking, reminder, change, cancellation): pre-contractual and contractual measures (Art. 6.1.b GDPR).
  • Provide your care and keep your file: health data processed for preventive medicine, diagnosis and care, by professionals bound by medical confidentiality (Art. 9.2.h GDPR and the Patients' Rights Act).
  • Send you reminders by SMS or WhatsApp: based on your consent (Art. 6.1.a), which you can withdraw at any time.
  • Comply with our legal obligations (record-keeping, accounting, legal requests): Art. 6.1.c GDPR.
  • The National Register Number is used within the framework authorised by the Belgian Act of 8 August 1983 on the national register of natural persons.

4. Recipients and sub-processors

Your data is never sold. It is accessible to the centre's team for your care and to technical providers (processors), bound by contract and confidentiality:

  • Website and API hosting (Vercel);
  • Database hosting (Supabase, EU region);
  • Voice assistant server (Fly.io, EU region);
  • Calendar synchronisation (Google Calendar), when the practitioner uses it;
  • SMS and voice assistant calls (Twilio);
  • WhatsApp booking bot (Meta Platforms);
  • Voice assistant: speech recognition and synthesis (Google) and conversational model (Anthropic).

Some providers may process data outside the European Union (notably in the United States). Such transfers are then covered by appropriate safeguards (Standard Contractual Clauses and/or the Data Privacy Framework).

5. Retention period

Your patient file is kept in accordance with Belgian law applicable to care providers: in principle at least 30 years after your last contact. Other data is kept for as long as necessary, then archived or deleted.

6. Your rights

Under the GDPR, you have the following rights:

  • access to your data and a copy;
  • rectification of inaccurate data;
  • erasure, within the limits of legal obligations to keep the medical file;
  • restriction of or objection to processing;
  • portability of the data you provided to us;
  • withdrawal of your consent at any time (reminders), without retroactive effect.

To exercise these rights, contact us at demo@docelya.com or 02 000 00 00. Proof of identity may be requested. You may also lodge a complaint with the Data Protection Authority (APD/GBA): Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be.

7. Security

We implement appropriate technical and organisational measures (restricted access, encryption of secrets, secure hosting). Sensitive data is only accessible to authorised persons.

8. Cookies and trackers

This website counts page views, the gestures used to reach us (a number dialled, directions requested, a booking form opened) and how fast pages load for you, so that slow ones can be fixed. Nothing more: there is no advertising pixel and no social media button that follows you, and nothing that is measured is used to recognise you from one site to another or to send you advertising.

Two of these measurements, page views and loading speed, are handled by Vercel, the site's host. They set no cookie, store nothing in your browser and keep neither your IP address nor any lasting identifier: visits made on the same day are grouped by a technical fingerprint that is erased the next day. Your browser contacts no address other than the site's own to do this.

The count of useful gestures never leaves our own servers and is entrusted to no one. It too stores nothing in your browser. It keeps daily totals only: how many pages were viewed, how many times the number was dialled, how many sets of directions were requested. Not your IP address, not the page you looked at, not the time, not the slightest trace that would tell you apart from another visitor. By the end of the day, all that remains is a handful of numbers.

Only public pages are counted. Left out are the addresses you receive in an appointment reminder, the waiting room kiosk and screen, and the area reserved for staff: their addresses sometimes carry a code or a phone number, and those go nowhere.

So you will not see a banner asking you to accept cookies: we set none that would require it.

Here is the complete list of what the site stores in your browser.

  • Your language. A cookie named NEXT_LOCALE, set ONLY when you pick a language from the menu, so the site greets you in it on your next visit. It holds two letters, such as fr or nl, and nothing else. Duration: one year.
  • Staff sessions. The back office, reserved for the centre's team, uses sign-in and security cookies. They do not concern patients and disappear when the user signs out.

These cookies are called essential: the first because you asked for it by choosing your language, the second because no private area can work without one. The law does not require your consent for them. You may still delete them at any time from your browser settings; the site will keep working, simply in French.

The site's fonts are hosted on our own servers: your browser contacts no outside service to display them.

One exception, which we would rather tell you about: the map on the Contact page. Its background tiles come from an outside provider, which then receives your device's IP address, as happens with any image loaded from another site. No cookie is set in the process, and the map only loads if you open that page. Our address and directions are also written out in text there, should you prefer not to display the map.

9. Changes

This policy may be updated. The last-updated date appears at the top of the page. We will inform you of any significant change.

Phone · 02 000 00 00