Scope
This notice explains how MyC uses personal information on its marketing website, including contact requests and demo bookings. The website does not provide user accounts or request health records. Please do not include patient information or other health data in a contact request.
Use of the MyC employee health platform is separate. Where MyC processes patient records on behalf of a healthcare provider or employer, that organization determines the purposes of processing and supplies the applicable privacy information.
Who is responsible
MyC is the controller for personal information collected through this website. MyC is registered in France under company number 890 755 275, at 113 avenue du Président Salvador Allende, 93100 Montreuil, France.
Privacy requests: privacy@myc.doctor.
Data Protection Officer: GRCI Law Limited, dpoaas@grcilaw.com. Please include “MyC” in the subject line.
Information collected through the website
Hosting and security. Cloudflare hosts the website. Requests to the host can include an IP address, browser or device information, requested URL, referring page, and timestamp. These records support delivery, troubleshooting, and protection of the website, based on our legitimate interest in operating a secure service.
Contact requests. The contact form is provided by HubSpot in its EU region. Information entered into the form, such as name, business email, company, and the request itself, is sent directly from the browser to HubSpot and recorded in MyC’s CRM. The fields displayed on the form show what is requested. We use this information to respond to inquiries and take steps requested before entering a contract, or based on our legitimate interest in handling other business inquiries. Emailing us is an alternative to using the embedded form.
Demo bookings. The demo page contains a HubSpot Meetings calendar. Booking details, including name, email, selected time, and other fields shown in the calendar, are processed by HubSpot and the connected calendar service to arrange the meeting and send its invitation. There is no preceding demo lead form. Processing is needed to respond to a request for a demonstration and take requested steps before a contract.
Audience measurement. With statistics consent, Google Analytics 4 measures website activity, such as page views, device and browser information, approximate location, and a pseudonymous client identifier. Google Tag Manager manages the analytics tag and loads the Cookiebot consent service. Analytics consent can be changed using Cookie settings in the footer.
Embedded services and consent records. Cookiebot records cookie choices. HubSpot embeds may use visitor identifiers and associate a form submission with a CRM record. The website waits for statistics and marketing consent before loading those embeds. Refusing optional cookies does not prevent browsing the website or contacting us by email. See the Cookie Policy for categories, lifetimes, and controls.
The marketing site is statically generated. It does not maintain its own application database or process form submissions on a MyC website server; forms and bookings are handled by the providers above.
Recipients and international transfers
Information is accessed by MyC staff who need it to respond to requests and by service providers supporting those activities: Cloudflare for hosting, HubSpot for contact requests and bookings, connected calendar services for invitations, Google for consented analytics, and Usercentrics/Cookiebot for consent management. Information may also be disclosed where required by law. MyC does not sell personal information.
Providers may process information outside the European Economic Area, including in the United States. EU hosting for a HubSpot account does not by itself exclude all international processing. Applicable transfer arrangements depend on the provider and service, including adequacy decisions or contractual safeguards where required. Information about the arrangements applicable to a request is available from privacy@myc.doctor.
Retention
Marketing contact information is retained for up to three years from the last contact, or until an applicable objection or unsubscribe request, subject to legal recordkeeping requirements. Information needed for an ongoing business relationship may be retained for that relationship and applicable limitation periods.
Hosting logs, booking records, analytics data, and consent records have separate retention settings and provider requirements. Cookie expiry is not the same as deletion of a CRM record or a booking. Details about retention of a particular record can be requested from our privacy team.
Rights and contact
Subject to the conditions in data protection law, rights include access, correction, deletion, restriction, portability, and objection to processing based on legitimate interests. Consent can be withdrawn at any time; withdrawal does not affect the lawfulness of earlier processing. Cookie choices can be changed in the footer, while deletion of a submitted contact or booking record can be requested by email.
Requests can be sent to privacy@myc.doctor. We normally respond within one month; if a lawful extension is needed, we will explain why.
A complaint may be submitted to the relevant supervisory authority, including the CNIL in France or the ICO in the United Kingdom.