Privacy Policy

Plamby is committed to protecting the personal data of its users in accordance with the General Data Protection Regulation (GDPR) and applicable French data protection laws.

1. Data Controller

The operator of the Plamby platform acts as the data controller for personal data collected through the website. For any data-related question: support@plamby.fr.

2. Data Collected

Depending on your profile and actions, Plamby may process: identity and account data (name, photo, email, encrypted password), contact data (phone, address), booking data (category, description, photos, date, messages), professional data (qualifications, SIRET, payment info), verification data (ID documents), payment data (Stripe identifiers, transaction history, wallet), support data (tickets, attachments, reviews), and technical data (logs, IP address, session info).

3. Purposes

Your data is used to: create and manage your account, process bookings and payments, verify provider identity, ensure customer support, prevent fraud, comply with legal obligations.

4. Legal Bases

Processing is based on contract execution, consent (cookies, marketing), legal obligations (accounting, identity verification), and legitimate interest (security, fraud prevention).

5. Recipients

Your data is accessible to Plamby teams and our technical sub-processors: Google Firebase (hosting, database), Stripe (payments), Resend (transactional emails), WhatsApp by Meta Platforms Ireland (if you write to us on WhatsApp or turn on WhatsApp alerts: your number and the messages about Plamby; reply STOP to end alerts). No data is sold to commercial third parties.

Orus, a professional insurance broker, only if you ticked the matching box as a service provider: title, last name, first name, email, phone, trade and, if provided, SIRET number and business address, so that an adviser can contact you about professional liability or ten-year building insurance. Orus then processes this data under its own responsibility, according to its privacy policy. This transfer is based on your consent, which you can withdraw at any time by writing to support@plamby.fr.

Shine, a payment institution offering an online business account, only if you ticked "have a Shine adviser call me back" in your service provider space: last name, first name, email, phone and, if provided, your company name, so that an adviser can contact you about opening an account. Shine then processes this data under its own responsibility, according to its privacy policy. This transfer is based on your consent, which you can withdraw at any time by writing to support@plamby.fr.

6. Retention

Account data is kept during the use of the service, then archived for 3 years after account deletion (except legal obligations: 10 years for invoicing).

7. Cookies

Plamby uses functional cookies (session, authentication) and analytics cookies (Google Analytics, Meta Pixel). You can control cookies from your browser.

8. Your Rights

Under GDPR, you have the right to access, rectification, erasure, portability, objection, and restriction. To exercise your rights: support@plamby.fr. You can also request data deletion.

9. Complaint

You have the right to file a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.

10. Data Protection Officer

Plamby Privacy Service · 110 boulevard de Clichy, 75018 Paris, France. Email: support@plamby.fr