Privacy policy

In short

This site sets no cookies and does no advertising tracking. It measures its traffic anonymously and collects no health data. It has no user accounts; only the “Message us” window collects the messages you choose to send us. Your appointments and medical data are managed outside this website, in dedicated environments.

Data controller

Hosam SAYED, sole trader (EI), practising under the name Hosam ASSAL, osteopath (D.O., France), 32 avenue de Friedland, 75008 Paris.
Contact: cabinet.assal@gmail.com

Data collected by the website

There is no personal account. Messages sent through the “Message us” window are covered in the next section. To understand which pages are useful, the site measures its traffic anonymously: pages viewed, reading time, scroll depth, language, device type, referring website and clicks on contact options (appointment booking, phone, email, WhatsApp). This measurement sets no cookies and does not record your IP address. The data is kept for thirteen months on the site's own server and is not shared with anyone. If your browser sends a “Do Not Track” or “Global Privacy Control” signal, nothing is measured.

This measurement is based on the clinic's legitimate interest in understanding how its website is used, in order to improve it.

Our hosting provider keeps technical connection logs, including your IP address, for security reasons and in accordance with its legal obligations. These logs are not used by the clinic.

Messages sent through the “Message us” window

The “Message us” window, at the bottom of every page, lets you send us a message and read our reply in the same place. Your messages, and your phone number if you choose to leave it, are stored on the website’s server and passed on to the practice through the Telegram messaging service, whose company is based outside the European Union: that is where we read and answer them. The site also records the page you write from and its language.

This data is used only to reply to you, at your request. It is deleted, from the website and from the practice’s messaging service alike, seven days after the last message of the conversation. It is never used for any other purpose or shared with anyone.

As with WhatsApp, please keep to practical information, such as when you are available, without describing your medical situation in writing.

Cookies

This site sets no cookies at all: no audience measurement, advertising or social media cookies. No consent banner is therefore needed.

If you use the “Message us” window, your browser keeps, for as long as the tab is open, a key that links your messages to your conversation; it is erased when you close the tab and serves no other purpose.

The fonts are hosted on this website: displaying them does not involve any external service.

Third-party services

Doctolib

The appointment booking buttons link to Doctolib, which manages bookings and the associated data under its own privacy policy. Doctolib is an accredited health data host. By clicking on these links, you leave this website and become subject to Doctolib’s terms.

WhatsApp

A link lets you message us on WhatsApp, a service operated by Meta. Messages there are end-to-end encrypted, but we ask you to limit your messages to practical information, such as when you are available, without describing your medical situation in writing. Anything to do with your health is discussed in consultation.

Email

The contact address is hosted by Google. Please do not send detailed medical information to it.

Data collected during consultations

The information you share with us during a consultation (medical history, reasons for your visit, test results) is collected solely to provide your care. It is covered by professional confidentiality, stored securely, and never transferred, sold or used for commercial purposes.

It is kept for the legal retention period that applies to health records, which is twenty years from the last consultation.

This data is only shared with another health professional with your consent, in your interest and for the continuity of your care.

Your rights

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés), you have the following rights over your data:

• Right of access and to obtain a copy
• Right to rectification of inaccurate information
• Right to erasure, within the limits of legal retention obligations
• Right to restriction of processing
• Right to object on legitimate grounds
• Right to data portability
• Right to set instructions on what happens to your data after your death

To exercise these rights, write to cabinet.assal@gmail.com. You will receive a reply within one month. You may be asked for proof of identity.

If the disagreement persists, you can lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL, the French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at www.cnil.fr.

Security

The website is served over HTTPS. Consultation data is stored in conditions that preserve its confidentiality and integrity, and access to it is strictly restricted to the practitioner.

Changes

This policy may change, in particular if the services used or the regulations change. The date of the last update is shown below.

Last updated: 20 October 2026