Privacy Policy

MerciMedic, a French company whose registered office is at 102 avenue des Champs-Élysées, 75008 Paris, France (SIRET 952 361 442 00017), is responsible for processing personal data collected via goldoco.com. Contact: contact@goldoco.com.

• Healthcare professional account (name, e-mail, phone, professional ID) — account creation, claiming and managing the profile, legal basis: performance of the contract.
• Public profile (name, specialty, city, practice, professional information) — public directory from public sources or provided by the healthcare professional, legal basis: legitimate interest.
• Patient testimonials (first name, initial, message, verification e-mail) — publication after moderation, legal basis: consent.
• Technical data (hashed IP address, logs, usage data) — security, fraud and spam prevention, service improvement, legal basis: legitimate interest.
• Support (exchanged messages) — assistance, legal basis: legitimate interest.

We do not collect card data: payment is entirely processed by Stripe.

• technical providers (hosting, database, e-mail sending);
• Stripe, our payment provider, for payment processing, subscription management, tax compliance and billing;
• professional advisors (legal, accounting);
• competent authorities where required by law.

Some providers may process data outside the European Economic Area. These transfers are governed by standard contractual clauses or an adequacy decision.

Switzerland, Israel and Canada (for commercial organisations) are covered by European Commission adequacy decisions. For other countries, transfers rely on European Commission standard contractual clauses or another recognised mechanism.

Account data is kept for the duration of the contractual relationship plus 3 years; billing data for 10 years (legal obligation); technical logs for 12 months. Beyond that, it is deleted or anonymized.

You have the right to access, rectify, erase, restrict, port and object to the processing of your data, as well as the right to withdraw your consent at any time. Write to contact@goldoco.com: we respond within a month. You may also lodge a complaint with the CNIL or with the data protection authority of your country of residence.

A doctor may request the removal of their profile from the claim page by choosing “request removal”.

We implement appropriate technical and organizational measures (encryption in transit, access controls, restriction of rights). The site only uses cookies strictly necessary for its operation (session, security); no advertising cookies are set.

• European Union and European Economic Area: GDPR; complaint to the CNIL or to the data protection authority of your country.
• Luxembourg: GDPR; complaint to the National Commission for Data Protection (CNPD).
• Switzerland: Federal Act on Data Protection (FADP); complaint to the Federal Data Protection and Information Commissioner.
• Israel: Personal Information Protection Law (5741-1981); complaint to the Israeli Data Protection Authority.
• Canada: Personal Information Protection and Electronic Documents Act (PIPEDA); complaint to the Office of the Privacy Commissioner of Canada.
• United States: applicable state laws, including in California (CCPA/CPRA).
• Albania: Law No. 9887 on the protection of personal data.

Wherever you live, you can exercise your rights by writing to contact@goldoco.com.