Privacy policy
1. Who we are
Certified Health Apps (directory.certifiedhealthapps.com and www.certifiedhealthapps.com) is operated by Healthskouts NV, Koolmijnlaan 199, 3582 Beringen, Belgium, company number 0440.191.146 ("we", "us"). We are the controller of the personal data described in this policy. Contact: koen@healthskouts.com.
2. What we collect and why
- Browsing the directory. The directory works without an account and without tracking or advertising cookies. Our hosting provider (Netlify) processes technical data such as IP address and browser type in server logs to deliver and secure the site. Legal basis: our legitimate interest in operating a secure website.
- Newsletter. When you sign up on our website, including when you request a free guide, we store your email address, your role if you choose to give it (and your name, if you gave it on our former homepage) to send you the monthly update about Certified Health Apps, new guides and offers. Legal basis: your consent, which you can withdraw at any time via the unsubscribe link or by emailing us.
- Pro subscription. Payments are handled by Stripe through its Managed Payments service, in which Stripe acts as merchant of record and reseller. Stripe collects your name, email, billing address and payment details and shares with us your name, email, country and subscription status, so we can deliver the Pro evidence file and handle support. We never see your full card details. Legal basis: performance of the contract with you, and our legal obligations for accounting.
- Guides and books. Purchases are handled by Stripe. Stripe shares with us your name, email, country and what you bought, so we can deliver your download and handle support. Legal basis: performance of the contract with you, and our legal obligations for accounting.
- Submissions. When you submit or correct a tool via the form on our website, we store your name, email, role and the information you send, to review the submission and contact you about it. The form is processed by Netlify and forwarded to us by email. Legal basis: your consent and our legitimate interest in keeping the directory accurate. We keep submissions for up to two years.
- Contact. If you email us, we use your message and contact details to reply. Legal basis: our legitimate interest in answering your question.
3. Who processes data for us
We use these service providers, each bound by their own data protection terms: Netlify (hosting of the website and the newsletter form, United States), Strikingly (our former homepage and newsletter list, until it is closed), Stripe (payments for subscriptions, guides and books, Ireland and United States), euroDNS (domain name and email, Luxembourg). Where data is transferred outside the European Economic Area, this happens on the basis of the European Commission's standard contractual clauses or an adequacy decision.
4. How long we keep data
- Newsletter data: until you unsubscribe.
- Customer and invoice data: as long as you are a subscriber, and afterwards for the period required by Belgian accounting law (currently seven years).
- Emails: up to two years after our last contact, unless needed longer for a dispute.
5. Your rights
You can ask us for access to, correction or deletion of your personal data, ask us to restrict or stop processing it, and ask for a copy in a portable format. Where we rely on consent, you can withdraw it at any time. Email koen@healthskouts.com; we answer within one month. You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), www.dataprotectionauthority.be.
6. Data about companies and products
The directory lists digital health products and the companies that make them, based on public sources such as the FDA databases. It does not contain personal data about patients or users of those products.
7. Changes
We may update this policy. The date at the top shows the latest version. If a change matters for subscribers, we will tell them by email.