This policy explains what personal data Zenoa (zenoa.tech) collects, why, who it is shared with, how long it is kept, and your rights under the UK GDPR, the Data Protection Act 2018 and the EU GDPR.
Zenoa is operated jointly by two companies, joint controllers within the meaning of Article 26 of the UK GDPR and of the EU GDPR (allocation of their roles in 1.1; see also the Legal notice):
Single point of contact for any question or request about your data, whichever company is concerned: info@zenoa.tech. Data Protection Officer: none appointed at this stage. Being established in the United Kingdom and, through Foresttrack Consulting SAS, in the European Union, Zenoa needs no Article 27 representative in either territory.
Pimms Consulting Ltd and Foresttrack Consulting SAS jointly operate the platform and are joint controllers within the meaning of Article 26 of the GDPR and of the UK GDPR. A written arrangement between the two companies allocates their roles: Pimms Consulting Ltd, the Site's publisher, carries the technical infrastructure and the processors; Foresttrack Consulting SAS, the publisher's legal representative in the European Union, remains the point of contact for practitioners and clients established in France and the EU and notifies data breaches to the CNIL; Pimms Consulting Ltd is the point of contact for practitioners and clients in the United Kingdom and notifies the ICO. The single point of contact for exercising your rights is info@zenoa.tech; you may nevertheless exercise your rights against either of the two companies.
The practitioner you book is a separate controller for the data they receive to deliver your session (name, phone, email, practical access details).
| Data | Purpose | Legal basis |
|---|---|---|
| Name, phone, email; practical access details chosen from closed options (floor, intercom, first visit, contact preference); no free text, no health data | Pass your request to the practitioner, confirm or decline the booking, send you the tracking link and confirmation / cancellation emails | Contract (art. 6(1)(b)) |
| Stripe payment identifiers (session, payment and refund ids), amount, currency | Collect payment on the practitioner's behalf, handle cancellations and refunds | Contract; legal obligation (accounting) |
| Accepted terms version and timestamp | Prove which terms applied to your booking | Legal obligation / legitimate interest (evidence) |
| Review (rating, comment, first name) after a paid and completed session | Display the review publicly on the practitioner's profile | Consent (art. 6(1)(a)) |
| Review reports: reporting account, review concerned, reason chosen from closed options, date; automatic hold of a review that seems to contain health information | Hide a reported or held review and let Zenoa publish, restore or delete it | Legitimate interest (protecting members and practitioners from unlawful reviews) |
Zenoa never sees or stores your card number: payment details are entered on Stripe's secure page. Zenoa collects no health data: the booking form has no free-text field, the only options offered are closed practical details, and the practitioner asks you on site. Zenoa therefore processes no special category data (Article 9 of the UK GDPR and of the GDPR does not apply).
To book on the site or in the app, you create a client profile protected by a password you choose (hashed by Supabase, never visible to Zenoa); a one-time code sent to you by email checks your address and also lets you sign in without the password. The profile is also used to follow your spirit animal and for the loyalty programme described in clause 10 of the Client Terms (5% off your 5th session, 10% off your 10th session, then 10% off every 10 sessions, financed by Zenoa out of its commission).
| Data | Purpose | Legal basis |
|---|---|---|
| First name, last name and email address, verified by the sign-in code; phone and address if you add them to your profile; chosen language | Create and secure your account, pre-fill your bookings, link it to your bookings made with the same email address | Contract (art. 6(1)(b)) |
| Session history: number of paid and attended sessions and of reviews left, computed from your bookings made with the same email address | Count your sessions, evolve your animal and trigger the loyalty discount | Contract (art. 6(1)(b)) |
| Chosen spirit animal, its form, colour and accessory; discounts unlocked and used | Show your spirit animal and apply the discount at booking | Contract (art. 6(1)(b)) |
You can delete your account at any time from the Profile page ("Delete my account" button, confirmed by a code sent by e-mail), unless a booking is still to come: the account, the spirit animal, the discounts, your practitioner follows and your notification devices are erased immediately; your past bookings are kept in anonymised form (name, e-mail and phone erased; dates, amounts, refunds and commission kept ten (10) years (France) or six (6) years (United Kingdom) under our legal accounting obligations (Article 6(1)(c) UK GDPR / GDPR)). Technical backup copies are erased within thirty (30) days at most. Unless you delete it, the account is kept for three (3) years after your last session, then deleted. The same account can also become a practitioner account ("Become a practitioner"); practitioner data is then described in 2.2.
Some practitioners on Zenoa carry out a health-related activity: in the United Kingdom, regulated health professions such as osteopaths, chiropractors, physiotherapists, podiatrists and dietitians; in France, osteopaths and chiropractors (professions with a regulated title). Booking a session with one of them may reveal information related to your health, even though Zenoa never asks the reason for the session or any medical information. We process that information only to manage your booking (confirmation, reminder, cancellation, refund, the practitioner's commission statement), on the basis of your explicit consent (Article 9(2)(a) of the UK GDPR and of the GDPR), given through a tick box, unticked by default, at payment; without it, you cannot book with these practitioners, while every other practitioner remains bookable. The version of the text you accepted and the date are recorded with the booking. You can withdraw this consent at any time by cancelling the booking (clause 3 of the Terms) or deleting your account (2.1a); withdrawal does not affect processing already carried out. This information is shared only with the practitioner you book and with the providers needed for the booking (section 4); with the payment provider, in e-mails and in the practitioner's calendar feed, the session is referred to by a neutral label ("Zenoa booking"), without the discipline. It is kept as long as the booking (section 5). The practitioner is themselves responsible for the health data they collect on site.
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, password (hashed by Supabase), city | Create and secure your account | Contract |
| Public profile: name, specialties, bio and photo if you add one; your phone number and email are not shown on your public page | Present you to clients on the map and your page | Contract |
| Location: the address you enter and its coordinates; if you enable "hide exact location", only rounded coordinates and the neighbourhood are public; the exact address is disclosed to the client at confirmation only | Place you on the map, tell the client where to go | Contract |
| Published slots, prices, discounts, bookings received | Provide the booking service | Contract |
| Stripe Connect account id and activation status | Pay you out (Stripe itself collects your identity documents and bank details as an independent controller for its regulatory duties: stripe.com/gb/privacy) | Contract; legal obligation |
| Terms acceptance: document, version, timestamp, IP address | Prove your acceptance of the terms (the electronic equivalent of a signature) | Legal obligation / legitimate interest (evidence) |
| Verification documents: professional liability insurance certificate (with its end of validity), diploma, optional professional registration number, verification decisions and their reasons | Check your qualifications and insurance before showing the "Verified practitioner" badge | Contract (art. 6(1)(b)) |
| Invitation code used, introducer (referral) code, activation date | Control registrations, attribute introductions and draw up their monthly statement (see section 4) | Legitimate interest |
| Contact details left on a business introducer's page (zenoa.tech/a/…, before any sign-up): name, phone or e-mail, optional profession and city | Let the introducer who recommended Zenoa to you get back to you; only that introducer and Zenoa's administrators can see them | Legitimate interest (you asked to be called back) |
| Wellbeing professionals not yet signed up (prospecting): name or trading name, SIRET / company number, profession, address and year of creation taken from the public business register (INSEE Sirene in France, public entries only); business phone, e-mail and website read one by one on the professional's own website, with the page they come from; contact status (to contact, contacted, interested, signed up, declined) and the introducer's note on their calls (quick notes: no answer, message left, call back, prefers e-mail, meeting booked; one line of 140 characters at most, with no health or private-life details) | Offer Zenoa to the professionals of an area, through a Zenoa business introducer who only sees their own area; at the first contact, the introducer says where the contact comes from and offers not to contact them again | Legitimate interest (business-to-business prospecting); you can object at any time, to the introducer or at info@zenoa.tech: you are then put on the "do not contact" list shared by every introducer |
You can request the deletion of your account from your practitioner space (Settings, confirmed by a code sent by e-mail), unless a booked slot is still to come: your public profile (displayed name, presentation, photo, contact details, location) is erased immediately, your slots are removed and your followers deleted; your billing identity and commission statements are kept for 10 years (France) or 6 years (United Kingdom) under our legal accounting obligations (Article 6(1)(c) UK GDPR / GDPR), as well as the proof of your acceptance of the terms, kept six (6) years after the end of the contract in the United Kingdom (Limitation Act 1980) or five (5) years in France (Article 2224 of the Civil Code) to defend our rights; your e-mail address is detached from the account, so you can register again. Technical backup copies are erased within thirty (30) days at most.
If you turn alerts on, we store your browser's technical push subscription (endpoint and encryption keys), the city and optional discipline you chose, and the date of the last send. No name or email is attached, unless you turn alerts on from your booking page: the device is then linked to that booking's email address so it can receive the day-before reminder (see 2.3a). If you follow a practitioner, the list of practitioners you follow is stored too. You can revoke permission at any time in your browser settings; the subscription is then removed. Notifications you receive (the app's bell, 30 most recent at most) are kept on your device only, not on our servers. Notifications are carried by your browser's push service (Apple, Google or Mozilla depending on your device), which only receives an encrypted message. Legal basis: consent.
After a paid booking, Zenoa sends a reminder the day before the session (an email to the booking address and, if you turned alerts on from your booking page, a notification on that device). The reminder is a service message tied to your booking. Legal basis: contract.
If you said yes (the "Yes, send me these emails" button on your booking page, offered after payment, or the box ticked on an earlier booking), Zenoa also sends follow-up emails: after the session (an invitation to leave a review, your spirit animal's progress, a loyalty discount unlocked) and, at the earliest three weeks after your last session, a reminder when slots are available near you. At most one email a day. Legal basis: your consent, which you can withdraw at any time: every follow-up email carries a "Stop these emails" link and the one-click unsubscribe header of your mail client; your address is then added to an exclusion list (email_optouts) and no further follow-up email is sent. If you follow a practitioner from their page, a notification on your device tells you about their new slots; you can unfollow from the same page.
Data processed for these messages: the booking email and first name, the session date, the technical identifier of the device linked to the booking, the practitioners you follow, and a log of sends (event key and date) that prevents duplicates. Recipient: Resend (emails), see section 4.
When you choose to follow a practitioner or a clinic on Zenoa, we record your account, the practitioner or clinic you follow, how you arrived (a link or QR code shared by the practitioner, or a button on Zenoa), the date and version of the consent text you accepted, the date you unsubscribe if you do, and the date of the latest messages. Purpose: to let you know, no more than twice a week, about this practitioner's slots available within the next 24 to 48 hours, and to calculate Zenoa's commission on your bookings (no commission is charged to the practitioner on bookings by their own patients). Legal basis: your consent, which you can withdraw at any time from any message or from your profile; the commission calculation relies on the performance of our contract with the practitioner. The practitioner never sees the list of their followers: they only see how many there are and how many sessions were booked; your name is only shared with them when you book a session. Zenoa never receives patient lists from practitioners.
When you give a gift card, we record your account and email address, your first name, the recipient's first name and email address, the amount, the sending date you chose and the Stripe payment references. Purpose: to send the card to the recipient on the chosen date, confirm your purchase and manage the balance. The recipient's email address is only used to send them the card: it is never used for marketing. When the recipient activates the card, it is linked to their account, with the amounts used on their bookings. Legal basis: performance of the gift card sale contract (and, for the recipient, our legitimate interest in delivering the gift meant for them). You let the recipient know that you are giving them a Zenoa card.
The « Help » button of the app and the Help page let you, once signed in to your account, ask a question about how Zenoa works; a member who has a spirit animal can also simply chat with it. The answer is generated by artificial intelligence (Anthropic's Claude model), which is stated every time; it can be wrong and is neither medical nor legal advice. Data processed: the text of your questions and of the answers in the current conversation, the language of the page, your status (member or practitioner) and, for a member, the name of their spirit animal. This data is sent to Anthropic to produce the answer and is not stored by Zenoa: the conversation disappears when you leave the page. To limit use to 5 messages a day, Zenoa counts your messages of the day, linked to your account; this counter is deleted the next day. Do not write any health data or personal information in it. Legal basis: legitimate interests (helping you use the service). The « Write to the team » button opens your e-mail app: nothing is sent without your action.
Like any website, our hosts keep technical logs (IP address, browser, pages requested) for security and operations. Legal basis: legitimate interest. Zenoa uses no analytics or advertising tools.
If you accept the location request when the map opens (asked once, to centre the map on where you are) or use "Near me", your browser gives your location to the page so it can centre the map and work out distances; it stays on your device and is neither sent to nor kept by Zenoa. You can refuse or withdraw this permission in your browser settings.
Zenoa sets no advertising or analytics cookies. The site only uses strictly necessary local storage, on your device: the login session (Supabase); your contact details (name, phone, address) to pre-fill your bookings; the list of bookings made on this device and their tracking link; your chosen language; the practitioners you follow, your alert preferences and the notifications you received; app display preferences (install banner, visit count, last map view); your entry choice (client or practitioner); the chosen slot, kept for one hour while you sign in; a pending referral code, kept for thirty (30) days at most or until you sign up (you can remove it from the sign-up form). You can erase them at any time by clearing the site's data in your browser. These do not require consent under PECR. Stripe sets its own cookies on its payment page (stripe.com/gb/privacy).
Your data is processed by the following providers, bound by contract:
| Provider | Role | Data | Location |
|---|---|---|---|
| Supabase Inc. | Database, authentication, booking emails, files (photos, demo videos) | All account and booking data | European Union, AWS region eu-central-1 (Frankfurt, Germany) |
| Vercel Inc. | Website and serverless hosting | Technical logs, data passing through the site | USA / global network |
| GitHub, Inc. | Encrypted nightly backup copy | All database data and stored files (photos, verification documents, invoices), unreadable without the encryption key | USA |
| Stripe Payments UK Ltd / Stripe Inc. | Payments, refunds, practitioner payouts | Payment data, practitioner identity (Stripe Connect) | UK / Ireland / USA |
| Resend Inc. | Transactional emails | Email address, email content | USA |
| Mapbox Inc. | Map tiles | IP address (tile loading) | USA |
| OpenStreetMap (Nominatim and tile server) | Address search and the practitioner area's map | The address searched, IP address (tile loading) | Europe |
| jsDelivr, unpkg | Delivery of the site's technical libraries (map, sign-in) | IP address (file loading) | Global network |
| Browser push services (Apple, Google, Mozilla) | Delivering notifications | Encrypted message, subscription identifier | USA / global network |
Transfers outside the UK / EU rely on the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or the Data Privacy Framework where the provider is certified; the mechanism used by each provider is listed in 4.1.
Practitioners receive their clients' booking data. The business introducer whose code a practitioner used at sign-up sees, for that practitioner, in their « My tracking » space: their name, city, sign-up and activation dates and, month by month, the number of paid sessions (brought by Zenoa or with their own members) and the amount of Zenoa's net commissions; never the clients' names or contact details, nor the treatment booked. For prospecting (section 2.2), each introducer only sees the professionals of their own area; a professional who declined to be contacted is no longer shown with their contact details. No data is sold or used for advertising.
Zenoa uses the following processors. Personal data is hosted in the European Union; some US providers are involved for payments, application hosting, email delivery, mapping and document review. The transfer mechanism of each provider is given below; certifications under the EU-U.S. Data Privacy Framework (DPF) and its UK Extension were checked on the official list (dataprivacyframework.gov) on 22 October 2026.
Zenoa sells no data and uses no analytics or advertising tools.
Within Zenoa, only the founders, acting as administrators, can access personal data, through named accounts: the Site's administration area, the database console (Supabase), the payments dashboard (Stripe) and the hosting dashboard (Vercel). They access it only when the service needs it: support to clients and practitioners, handling a complaint or dispute, preventing fraud and abuse, invoicing and accounting, checking practitioners' documents, answering a request to exercise your rights or a legal obligation. They use it for no other purpose (no marketing without your consent, no sale) and do not copy it outside these tools.
Administrators never see your full bank details: clients' card numbers and practitioners' bank details are entered and kept by Stripe; the Stripe dashboard only shows administrators the last four digits, the card type and the payment history.
| Data | Retention |
|---|---|
| Bookings (name, contact, practical access details) | Up to 3 years after the session or last interaction, then deleted; payment records are kept 6 years from the end of the relevant financial year in the United Kingdom (HMRC record-keeping rules) or 10 years in France (Article L. 123-22 of the Commercial Code) under our legal accounting obligations (Article 6(1)(c) UK GDPR / GDPR) |
| Practitioner account | Life of the account; deleted on request from the practitioner space, except the billing identity and commission statements kept 10 years (France) or 6 years (United Kingdom) under our legal accounting obligations (Article 6(1)(c) UK GDPR / GDPR) |
| Client account (profile, spirit animal, loyalty programme) | Until you delete the account yourself from the Profile page (past bookings kept anonymised), otherwise 3 years after your last session |
| Terms acceptance evidence (version, timestamp, IP) | Term of the contract + 6 years in the United Kingdom (limitation period for contract claims, Limitation Act 1980, section 5); term of the contract + 5 years in France (Article 2224 of the Civil Code) |
| Push subscriptions | Until permission is revoked or the subscription expires technically |
| Practitioner follows | While you follow the practitioner; after you unsubscribe, the date and source are kept for 3 years to justify the commission applied to your bookings, then deleted |
| Log of reminder and follow-up sends, follow-up email exclusion list | Log: 3 years, like the booking; exclusion list: until you opt in again |
| Gift cards (buyer, recipient, amounts, uses) | 6 years in the United Kingdom (HMRC record-keeping rules) or 10 years in France (payment records); the recipient's email address is erased 12 months after the card expires |
| Reviews | While the practitioner's profile is published |
| Verification documents (insurance, diploma) | Life of the account, then deleted with it; the files are hosted by Supabase in the European Union (Frankfurt) and visible to you and to Zenoa's administrators only |
| Contact details left on a business introducer's page | 12 months at most, then deleted; sooner on request to info@zenoa.tech |
| Prospecting of professionals | 3 years after the last contact, then deleted; after a refusal, only the SIRET / company number and the "do not contact" mark are kept so that we do not contact you again |
| « Help » button question counter (account, date, count) | Until the next day; questions and answers are not kept by Zenoa |
| Technical logs | 12 months maximum |
You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw consent at any time (without affecting earlier processing).
To exercise them: info@zenoa.tech. We respond within one month. We may ask for proof of identity where there is reasonable doubt.
You can complain to the ICO (ico.org.uk) or, in the EU, to the CNIL (cnil.fr) or your local authority.
Professional documents are checked by automated processing (information extraction and matching against public professional registers). A refusal only suspends your ability to receive bookings. You may contest any decision from the notification e-mail; a member of the Zenoa team then reviews your file and replies to you.
Database-level access rules (each practitioner can only reach their own data; the exact address is never public), encryption in transit (HTTPS), payments delegated to Stripe (PCI-DSS certified), no card data stored by Zenoa.
Data minimisation. Zenoa only collects the data the service needs: no free text and no health data at booking, no analytics or advertising tools, no bank details.
Administrative access. Access to the administration tools is limited to the founders (see 4.2), through personal accounts protected by strong authentication (a one-time sign-in code by email, two-factor authentication on the providers' consoles). Practitioners' documents are kept in a private store and only open through a temporary link.
If a personal data breach occurs (loss, leak, unauthorised access), Zenoa records it in an internal register and, where it is likely to result in a risk to your rights and freedoms, notifies the ICO or, in the EU, the CNIL within 72 hours of becoming aware of it (see 1.1). Where the risk is high, the people concerned are told directly and without undue delay what happened, its likely consequences and the measures taken.
Zenoa is intended for people aged 18 or over and does not knowingly collect data about minors. If we learn that an account belongs to a minor, we delete it.
This policy may be updated; the current version and date appear at the top of the page. Material changes are announced on the site or by email to practitioners.
Version française : Politique de confidentialité.