Privacy policy

Data controller

Medicasure SRL, a company incorporated under Belgian law, publisher of Medicasure Connect. Full details are set out in the legal notice. For any question about your data: dpo@medicasure.com.

Medicasure SRL has appointed a Data Protection Officer, reachable at dpo@medicasure.com. They are the single point of contact for Medicasure Connect as well as the company other services.

Partner application

The application form is the only form on this site that collects personal data. It addresses organisations, but necessarily identifies a natural person as the point of contact.

• Contact data: name, role, email address, phone number and correspondence languages of the referring person.
• Organisation data: legal name, display name, type, country, city, sector, website and description.
• Uploaded documents: proof of legal existence and logo, stored in a private storage space. They are never publicly accessible and can only be viewed by authorised Medicasure staff, through a temporary signed link.
• Legal basis: performance of pre-contractual measures taken at your request, with a view to a possible introduction within the ecosystem.
• Retention periods: an unsuccessful application is kept for three years after the last contact; an active partner, for the duration of the relationship and then five years under Belgian accounting obligations. Uploaded documents follow the same period as the application they belong to.

Partner area

Access to your file requires no password: we email you a single-use link, or a time-limited code. These tokens serve authentication only and expire on their own. No profiling is carried out from your sign-ins.

Publishing your organisation

Approving your file and publishing it are two distinct things. Nothing appears on the public part of the site without explicit consent, given separately and never pre-ticked. That consent can be withdrawn at any time, without calling your approval into question.

Sub-processors

Your data is neither sold nor passed to third parties for commercial purposes. It is processed by the technical providers strictly required to run the service:

• OVH SAS (France) : hosting of the site and database, within the European Union.
• Supabase : database and document storage.
• Resend : delivery of transactional emails (acknowledgements, sign-in links).

Your rights

You have the right to access, rectify, erase, object to, restrict and port your data. Some of it can be edited directly from your partner area. For any other request, write to dpo@medicasure.com; we reply within one month. You may also lodge a complaint with the Belgian Data Protection Authority.

Audience measurement

This site uses Plausible Analytics, a cookie-free audience measurement tool. Since 15 August 2026 it is only loaded once you agree: until you consent, no request is sent to Plausible and no measurement takes place.

Cookies

No tracking cookie is set on this site. Only a technical session cookie is used when you sign in to your partner area; it disappears when you sign out and serves no audience measurement purpose.

Consent to trackers

On your first visit, a banner asks whether you accept audience measurement. No optional purpose is pre-ticked, and refusing takes exactly the same single click as accepting. Here is what your choice entails:

• Real blocking: until you agree (and if you refuse), the scripts concerned are not loaded at all. It is not merely the banner that goes away.
• What is kept: your choice is stored in your browser’s local storage, as four pieces of information. Your decision for each purpose, the date of that choice, the version of this policy in force that day, and a random identifier specific to your browser.
• That local record serves no other purpose: it cannot recognise you from one page to the next, and contains neither your name, nor your email address, nor your IP address.
• Proof of consent: so that we can demonstrate your choice was properly obtained, as the regulation requires of us, we keep a record of that choice alone on our side, namely the purposes accepted or refused, the date, the version of this policy and your browser’s random identifier. That record contains neither your name, nor your email address, nor your IP address, and is readable by no one outside our authorised team. It is kept for three years, then deleted.
• Duration: your choice is valid for six months. After that, or if the purposes change, you will be asked again. You can also erase this record at any time by clearing your browser’s site data.
• Withdrawal: the “Cookie preferences” link at the bottom of every page reopens the banner and lets you reverse your decision as easily as you made it.
• Legal basis: your consent, for audience measurement. Cookies strictly necessary for the site to work are exempt and are therefore not submitted to you.

The “new opportunities” alert

If you turn on the email alert from the Opportunities page, here is what that entails:

• Data collected: your email address, and nothing else. No name, no speciality, no countries of interest. We will only ask for those the day the alert can use them to send you fewer messages, not more.
• Legal basis: your consent. It is only established when you click the confirmation link we send you; until then, your address receives nothing but that one email. You may withdraw this consent at any time.
• Duration: your address is kept for as long as the alert is of interest to you. A subscription that is never confirmed is deleted after six months.
• Unsubscribing: a link appears in every email and takes one click, with no account and no justification needed.
• This address is used for this alert only. It is neither sold, nor passed to a third party, nor used to contact you about anything else.