Privacy policy
Last updated: 4 October 2026
1. Who is responsible for your data?
The data controller is TOUTOU SRL (“La Maison Toutou”), Rue Pierre Timmermans 14, 1090 Jette, Belgium, company and VAT number BE 0426 464 755. For any question about your data: info@lamaisontoutou.be or 02 425 07 17.
We have not appointed a data protection officer (DPO); requests are handled at the address above.
2. What data do we collect?
- Identity and contact: last name, first name, phone number, email address, postcode and city.
- Account: your password, which we never store in plain text (it is stored in irreversibly encrypted form).
- Your pet: name, species, breed, size, sex, behaviour, notes useful for grooming and a photo if you add one.
- Appointments: dates, chosen services, groomer, status, notes.
- Payment: the deposit is paid via Stripe. We neither see nor keep your card number; we only keep transaction references and amounts.
- Invoicing: invoices and credit notes issued in your name.
- Loyalty programme: points earned, gift exchanges and history.
- Technical data: IP address and browser type when a booking request is made, useful for security and abuse prevention.
- Advertising measurement (only if you accept it): Meta browsing identifiers and, on a confirmed booking, your email and phone number sent to Meta in encrypted (hashed) form to measure the effectiveness of our advertising.
We do not collect sensitive data within the meaning of the GDPR. The service is intended for adults.
3. Why do we use it (purposes and legal bases)?
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Creating and managing your account, recording and managing your appointments, collecting the deposit, refunding where applicable | Performance of a contract (6.1.b) |
| Sending you verification codes and booking confirmation emails | Performance of a contract (6.1.b) |
| Issuing invoices and meeting our accounting and tax obligations | Legal obligation (6.1.c) |
| Running the loyalty programme (points, gifts) | Performance of a contract (6.1.b) and legitimate interest (6.1.f) |
| Keeping a history of the animal's care and behaviour (safety of the animal and of the groomers) | Legitimate interest (6.1.f) |
| Securing the application and preventing fraud and abuse | Legitimate interest (6.1.f) |
| Measuring the effectiveness of our advertising (Meta) | Consent (6.1.a), can be withdrawn at any time |
We do not send you newsletters or commercial prospecting without your prior consent, and we do not sell your data.
4. Who receives your data?
Your data is accessible to the salon's staff, to the extent necessary for their duties, and to our service providers:
- Stripe (online payment processing);
- OVH (email sending and traffic routing, France) and Cloudflare (secure traffic routing);
- Meta Platforms Ireland, only if you have accepted the advertising measurement cookies;
- our application design and maintenance provider, Aurea Creative Lab, bound by confidentiality;
- OVHcloud (sending the SMS that verifies your phone number, only when an account is created on an existing customer record) and the telecom operators that deliver the message;
- our backups, kept on our own equipment.
We may also disclose data to the authorities where the law requires it.
5. Transfers outside the European Union
Some providers (Stripe, Cloudflare, Meta) may process data in the United States. To our knowledge, these transfers rely on the safeguards provided for by the GDPR: standard contractual clauses of the European Commission and/or the EU–US data protection framework. You can ask us for more details at the contact address.
6. How long do we keep your data?
| Data | Retention period |
|---|---|
| Invoices, credit notes and accounting documents | 10 years (Belgian legal requirement for tax and accounting) |
| Customer account, pet record, appointment history | As long as your account is active, then 3 years after your last appointment or last login; then deletion or anonymisation |
| Unsuccessful booking requests | 1 year |
| Technical data (IP address, browser) | 12 months |
| Cookie choice | Until you clear it from your browser; can be changed at any time |
You can ask for your account to be deleted at any time; documents that the law requires us to keep (invoices) are kept for the legal period, limited to that use.
7. Your rights
You have the following rights, which you can exercise free of charge by email at info@lamaisontoutou.be:
- access to your data and a copy of it;
- correction of inaccurate data (you can also edit your profile in the application);
- erasure, within the limits of legal retention obligations;
- restriction of processing and objection to processing based on our legitimate interest;
- portability of the data you have provided to us;
- withdrawal of your consent at any time, without affecting what took place before the withdrawal.
You can also delete your online account yourself at any time from the app (Settings, “Delete my account”). Your access, notifications, preferences, reports and your details in past booking requests are then erased immediately. Your customer record, your pets, your appointment history, your loyalty points and your invoices remain kept at the salon (invoices for the legal period); you can ask by email for them to be erased, within the limits of legal obligations.
We reply within one month and may ask you to prove your identity.
If you believe your rights are not being respected, you can lodge a complaint with the Data Protection Authority (Rue de la Presse 35, 1000 Brussels — contact@apd-gba.be — dataprotectionauthority.be).
8. Security
Exchanges with the application are encrypted (HTTPS), passwords are stored in encrypted form, access to data is restricted to authorised staff and we make regular backups. No measure, however, offers absolute security.
10. Changes
We may update this policy; the version in force is the one published on this page, with its update date. In the event of a significant change, we will inform you in the application.