Understand what data is processed, why and by whom.

1. Scope and roles

For the website, prospecting, commercial relationship, billing and security of its own services, IKELO TECHNOLOGIES determines purposes and acts as data controller.

For client or patient data entered by a subscribing establishment, that establishment generally determines purposes and acts as controller. Ikelo acts as a technical service provider and processes data under its instructions and the applicable agreement.

2. Identity and contact

IKELO TECHNOLOGIES — Rue Alain Bambara, Marie Koré district, Marcory, Abidjan, Côte d’Ivoire. Rights and privacy contact: contact@ikelo.pro. Phone: +225 05 86 69 18 18.

3. Data categories

The data actually processed depends on the relationship and enabled features.

• Visitors and prospects: name, establishment, phone, email, request, language, referring page and campaign parameters transmitted in the URL.
• Technical data: IP address, date and time, browser, device, security logs, request identifier and diagnostic events.
• Professional accounts: identity, work contact details, role, permissions, authentication, sign-ins and audited actions.
• Appointment operations: clients or patients, contact details, services, times, professionals, spaces, statuses, operational history and communications.
• Contractual relationship: proposal, subscription, orders, invoices, payments, transaction references and support exchanges.

4. Purposes and legal grounds

Data is used to answer enquiries, prepare demos, provide and administer the service, coordinate appointments, deliver enabled communications, bill, prevent fraud, secure access, support users and meet legal obligations.

Depending on the processing, the basis is pre-contractual measures or contract performance, a legal obligation, legitimate interests in service operation and security, or consent for marketing and non-essential tracking.

5. Sensitive data and medical records

Ikelo is an appointment operations tool and is not presented as a medical record. An establishment must not enter health data, clinical notes or other sensitive data without demonstrated necessity, legal basis, proper notice and required formalities.

The establishment remains responsible for the relevance of the fields it uses and the permissions required for sensitive processing.

6. Recipients and providers

Access is limited to authorized people within the relevant establishment and, where necessary, authorized IKELO TECHNOLOGIES personnel. Depending on enabled features, specialist providers may be involved.

• OVHcloud for hosting and infrastructure.
• Google Workspace for business email.
• Infobip for enabled WhatsApp communications.
• SMS Envoi for enabled SMS.
• Ably for certain real-time communications.
• Paystack for payment initiation and status; Ikelo does not retain complete payment-card data.

7. Location and transfers

Some providers may process data outside Côte d’Ivoire. IKELO TECHNOLOGIES selects providers with appropriate safeguards and frames transfers through contractual and technical measures and, where legally required, formalities with the data protection authority.

8. Retention

Data is kept for as long as needed for its purpose, then deleted, anonymized or archived where an obligation applies.

• Demo and prospecting data: up to 24 months after the last meaningful exchange, unless an earlier objection or different obligation applies.
• Account, contract, orders and billing: during the relationship and then for applicable evidence and accounting periods.
• Establishment business data: under the agreement and the establishment’s instructions; return or deletion at service end, subject to applicable obligations.
• Technical and security logs: a period proportionate to diagnostics, abuse prevention and incident handling.
• Backups: progressive removal through the secure rotation cycle unless an incident or legal duty requires retention.

9. Your rights

Subject to Ivorian Law No. 2013-450, a person may request information, access, correction, objection, restriction or deletion. Consent may be withdrawn for the future and direct marketing may be challenged.

If the request concerns data managed by an establishment in Ikelo, contact that establishment first. Ikelo will provide technical assistance and may forward the request.

10. Security and incidents

Ikelo applies measures appropriate to risk: separate environments, role-based permissions, secret protection, encrypted transport, logging, backups and availability checks. No security is absolute; measures are reassessed and incidents handled according to severity.

11. Cookies, advertising and marketing

The public website currently loads no advertising pixel or third-party audience measurement tool. utm_*, gclid or fbclid parameters in a URL may be associated with a demo request when submitted.

Any future non-essential tracker will be documented and subject to the user’s prior choice where required. Commercial communications are identified and sent with the required consent or where permitted by law, with a simple opt-out.

12. Updates and complaints

This policy changes when processing, providers or regulations change. The displayed date identifies the published version. A complaint may be sent to IKELO TECHNOLOGIES or to ARTCI, Côte d’Ivoire’s data protection authority.