Maison Inner Source
Back to site
··
Legal notice Privacy

Data protection

Privacy policy

Last updated: 31 août 2026

01

Our principle

This site sets no cookies, uses no advertising trackers and installs no audience measurement tool. We do not know how many people visit this site, where they come from, or what they read here.

This choice has a commercial cost: we give up data most of our peers collect. We accept it, because a care practice that watches what you read does not deserve to be trusted with your body.

02

Data controller

Maison Inner Source
Route de Florissant 70
1206 Geneva, Switzerland
UID number: CHE-432.150.232
Contact: jchastang@energies-massages.com

This policy applies to the processing of personal data within the meaning of the Swiss Federal Act on Data Protection (nFADP) and, for people resident in the European Union, the General Data Protection Regulation (GDPR).

03

What we do not collect

We want to be explicit here, because it concerns intimate information.

Our pages describe contraindications: epilepsy, psychiatric history, pregnancy, ongoing treatment, circulatory conditions. Reading those pages leaves no trace we can exploit. We do not know who reads them, for how long, or which lines hold attention. No profile is built, and no health inference is drawn from your browsing.

You can read all our medical precautions without producing a single piece of data about yourself.

04

The dates form

The "Tell me about the next dates" form collects your email address and nothing else. No name, no phone number, no interests.

Purpose: to inform you when the next sessions open. No other use.
Legal basis: your consent, given by submitting the form.
Retention: until you unsubscribe, or at most three years after the last message sent.
Unsubscribing: a link in every message, or a simple email request.

Your data is never sold, rented, exchanged or shared for commercial purposes. Never, in any form.

05

Booking data

When you book, we collect what is needed to hold the session: identity, contact details, chosen format, and the health information you declare in relation to the published contraindications.

The latter constitutes sensitive data under art. 5 nFADP and art. 9 GDPR. It is handled separately: collected with your explicit consent, stored apart from contact details, accessible only to those facilitating the session, and deleted at the latest two years after your last visit.

It serves one purpose only: deciding whether the session can take place, and under what conditions.

06

Technical logs

Our host automatically keeps connection logs — IP address, date, page requested, browser type — to ensure the security and availability of the site. These logs are generated by the infrastructure; we do not access them in normal operation and use them for no statistical or commercial purpose.

07

Recipients and transfers

Netlify, Inc. (United States) hosts the site. This transfer relies on the adequacy framework recognised between Switzerland, the European Union and the United States, subject to the provider's effective certification.

Google Fonts<

Acuity Scheduling (Squarespace, United States) handles our bookings: identity, contact details, session history and declared health information. Stripe (United States) processes payments; no banking data reaches us. Zoom (United States) hosts online sessions.

No other recipients. No data is passed to advertisers, data brokers or social networks.

08

Your rights

You have at any time a right of access, rectification, erasure, restriction and objection, as well as a right to data portability. You may withdraw your consent at any time, without affecting the lawfulness of prior processing.

A simple request to jchastang@energies-massages.com is enough. We reply within thirty days, free of charge, without asking you to justify your request.

09

Security

The site is served exclusively over HTTPS. Access to booking data is restricted to those facilitating sessions and protected by authentication. Sensitive data is stored separately from contact details.

No system is infallible. In the event of a data breach likely to result in a high risk to your rights, we will inform you and the competent authority within the legal deadlines.

10

Children

We do not admit minors to sessions and do not knowingly collect data relating to people under 16. If you notice that such data has been sent to us, tell us and we will delete it.

11

Complaints

In Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.

If you reside in the European Union, you may contact the supervisory authority of your country of residence.

12

Changes

This policy may change, in particular when the dates form or the booking system goes live. The date of the last update appears at the top of this page. Substantial changes will be notified to people subscribed to our communications.