Privacy Policy

Fancare Plus ("we", "us", "our") is a healthcare consulting company based in Antwerpen, Belgium. We provide employee wellness assessment platforms, burnout prevention programmes, and HR health consulting services.

Data Controller: Fanny Abimbola Owolabi · Fancare Plus · Antwerpen, Belgium
Email: Info.fancareplus@gmail.com
Phone: +32 46 8008 376

Company/HR Administrators:

• Company name, industry, size, country
• Contact person name, email, phone, job title
• Account credentials (email and hashed password via Firebase Authentication)
• Subscription plan and billing details (processed by Stripe — we do not store card data)

Employees (assessment participants):

• Name and work email (provided by their employer)
• Assessment responses (anonymised before company reports)
• GDPR consent record and timestamp

Website visitors:

• Contact form submissions (name, email, message)
• Cookie preferences
• Essential technical cookies (session management)

• Providing and improving our wellness assessment platform
• Generating anonymised wellness reports for employers
• Processing payments via Stripe
• Communicating about your account or services
• Sending wellness programme updates (with consent)
• Complying with legal obligations

• Contract performance — processing necessary to provide our services
• Legitimate interests — platform security, fraud prevention, service improvement
• Consent — marketing communications and non-essential cookies
• Legal obligation — compliance with applicable laws

• Company accounts: retained for the duration of the subscription + 2 years
• Employee assessment data: retained for 12 months after collection, then anonymised
• Contact enquiries: retained for 2 years
• Payment records: retained for 7 years (legal requirement)
• Cookie preferences: retained for 12 months

We use the following third-party services, each with their own privacy policies:

• Firebase (Google) — database, authentication, file storage · Privacy Policy
• Stripe — payment processing · Privacy Policy
• Netlify — website hosting · Privacy Policy
• Calendly — appointment booking (optional) · Privacy Policy
• Resend — transactional email delivery

Data may be transferred to and processed in the United States. All transfers are covered by Standard Contractual Clauses or equivalent safeguards.

You have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Restriction — limit how we process your data
• Object — object to processing based on legitimate interests
• Withdraw consent — at any time, without affecting prior processing

To exercise any right, email: Info.fancareplus@gmail.com with the subject "Data Request". We respond within 30 days.

We implement the following security measures:

• HTTPS encryption for all data in transit
• Firebase Authentication for secure account management
• Passwords hashed by Firebase (bcrypt) — never stored in plain text
• Firestore security rules restricting access by authentication status
• Payment data processed exclusively by Stripe (PCI DSS Level 1 compliant)
• Assessment responses anonymised before inclusion in company reports

We use essential cookies for platform operation and optional analytics cookies with your consent. See our Cookie Policy for full details.

Our services are designed for business use and are not directed at individuals under 18. We do not knowingly collect data from minors.

We may update this policy periodically. Material changes will be communicated via email to registered users. Continued use of the platform constitutes acceptance of the updated policy.

For privacy enquiries: Info.fancareplus@gmail.com

You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA): dataprotectionauthority.be