Privacy policy

This privacy policy explains how Humavio collects, uses and protects your personal data when you visit humavio.com (the “Site”), create an account or buy one of our tools. We are committed to handling your data lawfully, fairly and transparently, in line with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) and applicable data protection law.

01

Who we are

The data controller responsible for your personal data is:

• AP Solutions Consulting LLP, operating as Humavio
• Registered office: 32 Kinburn Street, London, England SE16 6DW, United Kingdom
• Registration number: OC447906
• Email: info@humavio.com

If you have any question about this policy or about how we use your data, please contact us at the email above.

02

Scope of this policy

This policy covers the personal data we handle as a controller: data about visitors, account holders and customers of the Site. When you use one of our tools in your own practice, you decide what information you record about your own Clients and you are the controller of that information; this policy does not cover it. Where our tools keep your professional notes on your own device, that information stays with you and we do not collect it.

03

What data we collect

We collect only the data we need to run the Site and deliver the tools you buy:

• Account and identity data: your first name, last name and email address.
• Order and billing data: the tools you purchase, your order history, the amount, the currency and the language of your purchase.
• Payment data: payments are processed by our payment provider, Stripe. We do not see or store your full card number. We receive only confirmation of payment and limited details such as the card brand and the last digits.
• Communications data: messages you send us, newsletter and waitlist sign-ups, product reviews and support requests.
• Technical and usage data: IP address, browser type, device information, pages viewed and similar information collected through cookies and your interactions with the Site.

We do not seek to collect special category data (such as health data) about you through the Site. Please do not send us such data unless it is necessary.

04

How we collect it

We collect personal data: directly from you, when you create an account, place an order, sign up to our newsletter or waitlist, leave a review or contact us; automatically, through cookies and similar technologies when you use the Site (see our Cookie policy); and from our service providers, such as confirmation of payment from Stripe.

05

How we use your data and our lawful bases

We use your personal data for the purposes below, each relying on a lawful basis under the UK GDPR and the EU GDPR:

Where we rely on a legitimate interest, we have checked that it is not overridden by your rights. You can ask us for more detail about this assessment.

06

Marketing communications

We send marketing emails only if you have asked to receive them. Every marketing email contains an unsubscribe link, and you can opt out at any time by clicking it or by writing to info@humavio.com. Withdrawing your consent does not affect emails we must send you about your orders or your account, and it does not affect anything we did before you withdrew it.

Cart recovery: if you start a checkout, enter your email address and leave the Site before completing your purchase, we may send you a short reminder email about the tools left in your cart, so you can pick up where you left off. We do this on the basis of our legitimate interest in following up a purchase you started, and you can object at any time by using the unsubscribe link in that email or by writing to info@humavio.com. Your address is also added to our mailing list so we can keep you posted about our tools; you can unsubscribe at any time using the link in every email.

Quiz: if you take our quiz « Quel animal es-tu en séance ? » and leave your details, we keep your first name, your last name, your email address and your answers to the quiz, to send you your portrait by email and then three letters, two days apart, that extend the story and include an offer on our Atlases. We do this on the basis of our legitimate interest in answering your request and presenting our tools to practitioners, and you can object at any time by using the unsubscribe link in every email or by writing to info@humavio.com. Your address is also added to our mailing list so we can keep you posted about our tools; you can unsubscribe at any time using the link in every email.

07

Who we share your data with

We never sell your personal data. We share it only with trusted service providers who help us run the Site, and only as far as needed:

• Stripe for secure payment processing.
• ActiveCampaign for sending our newsletter and managing email contacts.
• Meta Platforms Ireland Limited for advertising measurement (Meta Pixel and Conversions API).
• Infomaniak Network SA for hosting the Site and storing its data.
• Professional advisers such as accountants and lawyers, where necessary.
• Public authorities and regulators when we are required to by law, and a buyer or successor if we reorganise or sell our business.

Each provider acts under a contract that requires them to protect your data and use it only for the services they provide to us.

08

International transfers

Some of our providers are based outside the United Kingdom and the European Economic Area, for example in the United States or Switzerland. When we transfer data internationally, we rely on an adequacy decision where one exists (for example for Switzerland), or on appropriate safeguards such as the UK International Data Transfer Agreement and the European Commission Standard Contractual Clauses, so that your data keeps an equivalent level of protection. You can ask us for a copy of the safeguards we use.

09

How long we keep your data

We keep your personal data only for as long as we need it for the purposes described above. Account and order data are kept for the life of your account and, after that, for the period required by accounting and tax law (generally up to six years). Marketing data are kept until you unsubscribe or ask us to delete them. When data are no longer needed, we delete or anonymise them.

10

Automated decisions and profiling

We do not make decisions about you that produce legal effects, or similarly significant effects, based only on automated processing. We do not carry out profiling of this kind.

11

Data security

We use appropriate technical and organizational measures to protect your data against loss, misuse and unauthorised access, including encrypted connections (HTTPS) and access controls. No method of transmission over the internet is completely secure, but we work to protect your data at all times. If a personal data breach is likely to affect your rights, we will notify the competent supervisory authority, and you, where the law requires it.

12

Your rights

Subject to the conditions set by data protection law, you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data;
• ask us to restrict how we use your data;
• object to certain uses of your data, including direct marketing;
• receive your data in a portable format and have it transferred to another provider;
• withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email info@humavio.com. We will respond within one month. Exercising your rights is free in most cases. We may need to confirm your identity before we act.

13

How to complain

If you are concerned about how we handle your data, please contact us first so we can help. You also have the right to complain to a data protection authority. In the United Kingdom this is the Information Commissioner’s Office (ICO), ico.org.uk. If you live in the European Union, you can contact your local supervisory authority (for example, in France, the CNIL).

14

Cookies

The Site uses cookies and similar technologies. You can read which cookies we use, why, and how to manage them in our Cookie policy.

15

Advertising and the Meta Pixel

We use the Meta Pixel and the Meta Conversions API, tools provided by Meta Platforms Ireland Limited, to measure how our advertising performs, understand which pages are useful, and show our ads to relevant audiences. We do not run advertising catalogues or personalized product retargeting.

When you use the Site, certain events, such as viewing a page, viewing a tool, starting checkout or completing a purchase, may be shared with Meta both from your browser (the pixel) and from our server (the Conversions API). Each event carries technical data such as your IP address, browser type, the page address and Meta cookies (_fbp and _fbc). For logged-in customers and at the point of purchase, we also send a hashed, irreversible version of identifiers such as your email address and name so Meta can match the event to an account. We never send these in clear text.

Because some of our tools relate to sensitive topics, we deliberately remove descriptive parameters, such as tool names, categories, page titles and page addresses, from what we send to Meta. Information about the specific tool you looked at is not transmitted.

In the European Union, the EEA and the United Kingdom, none of this runs until you accept marketing cookies in our banner, and you can change or withdraw your choice at any time using the “Manage consent” link on the Site. In regions whose law does not require prior consent, these tools may run by default, and you can still object at any time.

Our lawful basis is your consent (Article 6(1)(a) GDPR) where consent is required, and our legitimate interest in promoting our business (Article 6(1)(f) GDPR) where it is not. For this processing, Meta acts as a joint controller with us for the collection and transmission of the data, and as our processor thereafter. Meta may transfer the data outside the EEA and the UK, including to the United States, relying on the EU-US Data Privacy Framework and Standard Contractual Clauses.

How Meta handles this data is described in the Meta Privacy Policy. You can also review and adjust your ad preferences in your Meta account settings.

First-party measurement. Independently of the Meta tools above, the Site records how a visit begins: the landing page, the traffic source and any campaign parameters present in the address (such as UTM codes or a click identifier). This information is stored by our own site only, in first-party cookies in your browser and, if you place an order, in the order record. It is used to measure, on our own systems, which pages and campaigns lead to orders and to help detect fraud. It is not transmitted to Meta or to any other advertising platform unless you have accepted marketing cookies. Our lawful basis is our legitimate interest in measuring our own marketing (Article 6(1)(f) GDPR); you can object at any time by writing to info@humavio.com.

Page experiments. To improve our sales pages we sometimes show two versions of the same page to different visitors and compare which one leads to more orders. Your browser is given a first-party cookie named hv_ab_ followed by the test name, containing a single letter (the version you saw), so that you keep seeing the same version. It contains no identifier and is not shared with anyone. We count how many visitors saw each version in aggregate only. Our lawful basis is our legitimate interest in improving our own site (Article 6(1)(f) GDPR).

16

Links to other sites

The Site may contain links to websites we do not control. This policy does not apply to those sites. We are not responsible for their content or their privacy practices, so we encourage you to read their own privacy notices.

17

Children

The Site and our tools are intended for professionals and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

18

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. When we do, we will revise the “last updated” date at the top of this page. Significant changes will be communicated where appropriate.

19

Contact