Last updated: 27 July 2026.
This policy explains how Prodigia Massage collects, uses, stores and protects personal data provided while browsing the website, communicating with Prodigia or organising an experience.
1. Data controller
The data controller is Prodigia Massage, a sole trader established in France.
- Email: bonjour@prodigiamassage.com
No data protection officer has been appointed. Any question concerning personal data may be sent to the address above.
2. Categories of data processed
- identity and contact details;
- information relating to the request, preferred location, duration, availability and type of experience;
- content of communications sent through the form, email, telephone or WhatsApp;
- billing and administrative information where a service is booked;
- technical data strictly necessary for the security and operation of the website.
Do not provide health data or sensitive information in the free-text field.
3. Purposes, legal bases and retention periods
Data is processed to answer requests, prepare bookings, perform services, issue invoices, comply with legal obligations, manage complaints and secure the website. Depending on the purpose, the legal basis is pre-contractual measures, performance of a contract, legal obligation or legitimate interest.
- Contact requests: up to three years after the last contact where no contract is concluded.
- Contractual records: the duration of the contract and up to five years for evidential purposes.
- Invoices and accounting records: ten years.
- Security logs: only for the period necessary for technical security.
4. Mandatory or optional information
Fields marked as mandatory are required to review and answer your request. Without them, Prodigia may be unable to respond or organise the requested service.
5. Recipients
Data may be accessed only by Prodigia and by technical providers strictly necessary for hosting, email, communication, payment, invoicing or accounting. Prodigia does not sell or rent personal data.
6. Transfers outside the European Economic Area
Some digital providers, including messaging or WhatsApp services, may process data outside the European Economic Area. Where applicable, such transfers rely on safeguards implemented by the relevant provider.
7. Form and WhatsApp
The website form uses an external form-transmission service to send requests to Prodigia. If you choose WhatsApp, your data is also processed under WhatsApp / Meta’s terms and privacy policy.
8. Cookies and trackers
At launch, the website does not use advertising cookies or audience-measurement cookies requiring consent. Strictly necessary technical elements may be used for operation and security.
9. Your rights
Subject to the conditions set out in the GDPR, you may request access, rectification, erasure, restriction, objection and, where applicable, portability of your data. Requests may be sent to bonjour@prodigiamassage.com.
10. Complaint to the CNIL
You may lodge a complaint with the French data protection authority, the CNIL, if you believe that your rights have not been respected.
11. Automated decision-making
Prodigia does not make decisions producing legal or similarly significant effects solely on the basis of automated processing.
12. Security
Prodigia implements reasonable safeguards, including restricted access, strong passwords, HTTPS, updates, backups and data minimisation.
13. Governing version
This English version is provided for convenience. In the event of any discrepancy, the French version shall prevail.