Privacy

What this store never holds

ARGILETTE.shop sells subscriptions to NaviMED and CARNET, which are clinical systems. This store holds no patient data of any kind — no names, no diagnoses, no records, not in the database and not in the logs. It knows that a clinic pays for a given plan, for a given number of seats, until a given date. Nothing more.

That boundary is enforced by how the system is built rather than by policy: the storefront database has no field capable of holding clinical information. A full compromise of this store would expose billing data, which is bad and recoverable — not medical records.

We also never receive your card number, expiry or security code. Those are entered on the payment provider's own page and never reach ARGILETTE systems, logs or backups.

What we do collect

Account and contact: your name, email address, country and language preference.

Commercial: what you bought, when, in what currency, your order and invoice history, your subscription status and entitlements, and billing address where the payment provider passes it to us.

Technical: IP-derived country (used to choose your language and payment method), and standard security logs used to detect attacks and abuse.

For services, the intake information you send us to scope the work. Please do not include personal data about third parties, or any clinical information, in that intake.

Why we are allowed to hold it

To perform our contract with you: everything needed to take payment, deliver what you bought, and support it.

To meet legal obligations: tax, accounting and record-keeping requirements.

For our legitimate interests: preventing fraud and abuse, securing the service, and understanding aggregate demand. We balance these against your rights and use the least data that works.

With your consent, where we ask for it — for example marketing email. You can withdraw consent at any time, and doing so never affects the service you have paid for.

Who we share it with

Payment: Paddle (merchant of record for international payments) and CinetPay (mobile money).

Infrastructure: Replit for the application, Neon for the database, Cloudflare for edge delivery and protection, and our own Keycloak instance for sign-in.

Email: our mail infrastructure, for receipts, licence keys and service notices.

Each of these is a processor acting on our instructions under a data processing agreement. We do not sell your data, and we do not share it for anyone else's advertising.

Where it goes

We operate across Europe, West and Central Africa, and North America, and your data may be processed in any of them. Transfers out of the EEA rely on Standard Contractual Clauses (SCCs).

How long we keep it

Order and invoice records for as long as tax and accounting law requires, which is typically 7 years.

Account data for as long as your account is open, and for a short period afterwards to handle disputes and chargebacks.

Security logs for a limited window, then deleted. Logs are scrubbed of personal data as a matter of design.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it.

Write to info@argilette.com. We will respond within one month. There is no charge.

Depending on where you live, these rights come from the GDPR, the Nigeria Data Protection Act, national data protection law in Togo and the wider UEMOA region, or state privacy laws in the United States. You also have the right to complain to your national supervisory authority.

If something goes wrong

If a breach affects your personal data and presents a risk to you, we will notify the relevant supervisory authority within 72 hours of becoming aware, and tell you directly where the risk is high.

This document is published in English and French. Where the two differ, the English version governs.