Privacy policy

Data controller

The data collected on LabLink is processed by LabLink SAS — , — contact@lablink-connect.fr.

Data collected and purposes

LabLink is a professional platform reserved for dental surgeons. We collect:

• Professional account data (last name, first name, email, phone, practice name and address, RPPS number): to create and manage your account, verify your status as a healthcare professional, and carry out the business relationship. Legal basis: performance of the contract.
• Order and quote data (services, impression files, prescriptions, exchanged messages, prices, history): to manufacture and deliver your prostheses and to issue quotes and invoices. Legal basis: performance of the contract and legal obligations (accounting, medical device traceability).
• Unfinished cart (prostheses added to the cart without being paid for): to keep your cart from one visit to the next, and so that our team can get back to you by email or phone about this pending order. Legal basis: legitimate interest; you can object to these follow-ups at any time (by emptying your cart or by a simple email).
• Payment data : card payments are processed by our secure payment provider (Stripe). LabLink never stores your card number. We keep only the amount, date, and status of the payment. Legal basis: performance of the contract and accounting obligations.
• Contact messages (name, email, phone, message): to respond to your requests. Legal basis: legitimate interest.
• Newsletter subscription email : to send you our news. Legal basis: consent (withdrawable at any time).

No identifiable patient data

The platform is designed to process no data that could identify a patient. The patient reference for orders and quotes is an anonymised code chosen by the practitioner, who undertakes never to include a name or any identifying detail. The practitioner remains responsible for the processing of health data carried out within their practice.

Recipients

Your data is intended exclusively for the LabLink SAS team. It is neither sold nor rented. It may pass through our technical subcontractors (hosting, email delivery, the Stripe payment provider), bound by confidentiality commitments compliant with the GDPR.

Retention periods

• Client account: duration of the business relationship + 3 years
• Orders, quotes, and associated documents: 10 years (accounting obligations and medical device traceability)
• Contact messages: 3 years
• Newsletter: until you unsubscribe

Cookies

LabLink only uses cookies strictly necessary for the site to work: a session cookie to keep you signed in to the client area. No advertising, analytics, or social-network cookies are set. These essential cookies do not require prior consent.

Security

Passwords are stored in hashed form (never in plain text), order files are accessible only to the practitioner concerned and to our team after authentication, and exchanges with the site are encrypted (HTTPS) in production.

Your rights

In accordance with the GDPR and the French Data Protection Act, you have rights of access, rectification, erasure, restriction, objection, and portability over your data. To exercise them, write to us at contact@lablink-connect.fr. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).