Legal

Website Privacy and Cookie Notice

Version 1.0

This notice explains how the josie.care website handles personal data. The Josie mobile app is covered by a separate document, the Josie Privacy Policy.

1. Who we are

The website is operated by Health Surfers BV, enterprise number BE 1039.918.687, registered office Blauwhuisstraat 31, 8531 Hulste (Harelbeke), Belgium. For any privacy question, contact us at privacy@josie.care. We are the controller of the personal data described here.

2. What the website is for

josie.care is an informational and marketing website. It tells people about Josie and lets them get in touch or sign up for updates. It is not the app, and you do not enter health data on the website.

3. Data we process, and why

3.1 Technical and hosting data

When you visit, our hosting provider records standard technical information such as your IP address, browser and device type, the pages you view, and the date and time. We use this to deliver the site reliably and to keep it secure. Legal basis: our legitimate interests in operating and securing the website (Art. 6(1)(f) GDPR).

3.2 If you join the waiting list or contact us

You can join our waiting list by entering your email address in the sign-up field on the website. Your email address is submitted to a Google Form, which Google processes on our behalf as part of our Google Workspace. We use it to tell you when Josie launches and to send related updates, and we send email through our provider Resend. If you email us directly, we process your message to reply. Legal basis: your consent for the waiting list and updates (Art. 6(1)(a)); our legitimate interests for replying to an enquiry (Art. 6(1)(f)). You can ask to be removed from the waiting list at any time, and unsubscribe from updates using the link in any email.

3.3 Website analytics

We use PostHog, hosted in the EU (Frankfurt), in cookieless mode to understand how the website is used. It records the pages you view, the page you came from, your browser and device type, and your approximate location (country). To count visitors, PostHog computes a one-way hash of your IP address and browser details combined with a value that changes every day. Nothing is stored on your device, and we cannot identify you or recognise you from one day to the next. Legal basis: our legitimate interests in understanding and improving the website (Art. 6(1)(f)). You can object at any time by contacting privacy@josie.care.

4. Cookies

A cookie is a small file stored on your device. The website does not use analytics, advertising or tracking cookies. It sets only cookies that are strictly necessary to deliver the site securely, if any, and these do not require your consent, so the site does not show a cookie consent banner.

Our website analytics (section 3.3) work without cookies and without storing anything else on your device. When you join the waiting list, your email address is sent to Google in the background; you are not taken to a Google page, and the website does not cause Google to set cookies on your device.

5. Sharing and international transfers

We share website data only with the providers that run the site, its analytics and the waiting list for us: our hosting provider (Firebase Hosting, part of Google), our analytics provider (PostHog, with our data hosted in the EU), Google (for the waiting-list form, as part of Google Workspace), and our email provider (Resend). Firebase Hosting, Google and Resend are established in, or serve from, the United States, and PostHog is established in the United States. Those transfers are protected by the European Commission’s Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework. We do not sell your data or use it for advertising.

6. How long we keep it

  • Server and log data: kept for 30 days for security and diagnostics, then deleted.
  • Website analytics data: kept in line with our analytics provider’s retention period, currently 12 months.
  • Enquiries: kept for as long as needed to deal with your message and for 12 months afterwards, then deleted.
  • Waiting-list or newsletter sign-ups: kept until you unsubscribe or we no longer run the list.

7. Your rights

You have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive your data in a portable format (data portability), and to withdraw any consent you have given, at any time. To exercise these rights, contact privacy@josie.care. You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données, www.dataprotectionauthority.be) or the authority where you live.

8. Changes

We may update this notice from time to time. The version is shown above and at the foot of each page.

Health Surfers BV · Enterprise number BE 1039.918.687 · privacy@josie.care · Version 1.0