Dernière mise à jour : 31/07/2026
La présente Politique de Confidentialité explique comment Wandercraft S.A.S. et ses filiales, affiliés, et toute entité gérée ou contrôlée par elle (« Wandercraft », « nous » ou « notre ») collectent, utilisent, divulguent, stockent et traitent de toute autre manière les informations personnelles dans le cadre de votre utilisation des sites web, réseaux sociaux, plateformes et applications de Wandercraft (les « Plateformes »). La présente Politique de Confidentialité doit être lue conjointement avec nos Conditions d’Utilisation. En cas de conflit portant sur le traitement des données personnelles, la présente Politique de Confidentialité prévaut.
Elle ne régit pas les pratiques de tiers indépendants, notamment Apple, Google, les opérateurs de téléphonie mobile, les professionnels de santé agissant indépendamment de Wandercraft, ou d’autres entités vers lesquelles vous naviguez depuis nos services, sauf dans la mesure où Wandercraft contrôle directement le traitement concerné.
La présente Politique de Confidentialité a pour objectif d’informer clairement les utilisateurs sur le traitement de leurs données personnelles et sur leurs droits, conformément aux lois et réglementations applicables en matière de protection des données, notamment, le cas échéant, le RGPD, le CCPA/CPRA et HIPAA.
Lorsque Wandercraft agit en qualité d’entité couverte (« covered entity ») au sens d’HIPAA, l’avis de confidentialité HIPAA figurant à l’Annexe 1 régit l’utilisation et la divulgation des informations de santé protégées (PHI) par Wandercraft.
Wandercraft a son siège social au 23 avenue d’Italie, 75013 Paris, France, et est le responsable du traitement de vos données personnelles. Pour toute question relative à la confidentialité ou pour exercer les droits applicables, vous pouvez nous contacter à l’adresse privacy@wandercraft.health.
Nous collectons les informations personnelles, lorsque cela est nécessaire, par les canaux suivants :
Les informations personnelles, ou données personnelles, désignent toute information ou donnée qui vous identifie, directement ou indirectement, ou qui peut être utilisée pour vous identifier.
Nous sommes susceptibles de collecter les catégories d’informations personnelles suivantes, selon la Plateforme que vous utilisez.
Nom et prénom, adresse e-mail, adresse postale, numéro de téléphone, pays de résidence, date de naissance, langue parlée.
Si vous utilisez la connexion Apple ou la connexion Google, nous sommes susceptibles de recevoir de ces fournisseurs des informations limitées liées à l’authentification, telles qu’une adresse e-mail, un nom ou un identifiant d’authentification, selon les paramètres du fournisseur et vos choix.
La qualité en laquelle vous contactez Wandercraft (par exemple utilisateur potentiel, proche ou membre de la famille d’un utilisateur potentiel, professionnel).
Adresse IP, identifiant de l’appareil, informations relatives au système d’exploitation mobile, version de l’application, informations de plantage et journaux d’application.
Type de navigateur, système d’exploitation, fournisseur d’accès à Internet, langue de l’appareil.
Données de navigation, paramètres personnels.
Informations relatives à votre utilisation de l’exosquelette Eve, notamment le nombre de pas, le temps debout, le temps de marche, les statistiques hebdomadaires et mensuelles, le suivi des progrès et les objectifs que vous ajoutez.
Lorsque vous interagissez avec Wandercraft via Facebook, Instagram, LinkedIn, Twitter ou d’autres réseaux sociaux, nous recevons les informations que vous acceptez de partager avec nous. Les politiques de confidentialité de ces tiers s’appliquent.
Informations susceptibles d’être considérées comme des catégories particulières de données personnelles ou comme des informations de santé protégées au regard de certaines lois d’État ou locales. Ces données sont traitées en conséquence.
Par exemple, les indicateurs de santé et les informations de bien-être que vous choisissez de saisir ou d’enregistrer via nos Plateformes, notamment l’humeur, la douleur, la digestion, le sommeil et les notes de bien-être facultatives en texte libre.
Pour plus d’informations sur les cookies, veuillez consulter la page Cookies de Wandercraft.
Eve by Wandercraft et Follow Eve utilisent des cookies de session uniquement pour conserver en mémoire vos identifiants de connexion :
Sauf mention distincte, Wandercraft ne collecte pas, via ses applications :
Pour les personnes situées dans l’Espace économique européen et dans les autres juridictions exigeant une base légale pour le traitement, nous utilisons les informations personnelles aux finalités suivantes et sur les bases légales suivantes :
Lorsque nous nous fondons sur le consentement, vous pouvez le retirer à tout moment. Ce retrait n’affecte pas les traitements déjà licitement effectués avant celui-ci. Le retrait du consentement peut également affecter notre capacité à fournir certaines fonctionnalités.
Nous sommes susceptibles de divulguer des informations personnelles aux catégories de destinataires suivantes, sous réserve d’obligations contractuelles et de confidentialité appropriées :
Les fournisseurs de cloud (par exemple AWS pour les données de l’application Eve by Wandercraft) et d’infrastructure
Les prestataires de services et sous-traitants. Ils nous aident à héberger, sécuriser, prendre en charge, maintenir, analyser ou améliorer nos plateformes et applications.
Les systèmes et le personnel internes. Le personnel autorisé de Wandercraft et les environnements d’analyse internes peuvent accéder aux informations selon le principe du besoin d’en connaître.
Les médecins autorisés. Par exemple, nous sommes susceptibles de divulguer aux médecins des données d’utilisation limitées telles que le nombre de pas, le temps de marche et le temps debout, lorsque vous approuvez cet accès via la procédure d’accès Eve Follow : un médecin soumet l’adresse e-mail d’un utilisateur d’Eve, puis cet utilisateur reçoit une demande de confirmation afin d’approuver l’accès du médecin. Les médecins ou les organisations de santé qui reçoivent des informations d’utilisateurs d’Eve sont également soumis à leurs propres obligations professionnelles, de confidentialité et de protection des données.
Legal and compliance recipients. E.g., regulators, courts, law enforcement, auditors, insurers, or advisors where required by law, legal process, safety obligations, or the protection of rights and interests.
Corporate transaction parties. We may disclose information in connection with a merger, acquisition, reorganization, financing, asset sale, or similar transaction, subject to applicable confidentiality and legal requirements.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not permit advertising partners to collect data for their own purposes.
We may de-identify, pseudonymize, or aggregate information for internal analytics, product improvement, usage insights, device support and maintenance, quality management, and strategic analysis. When we do so, we take steps designed to reduce the likelihood that the information can be linked back to an individual.
Where data is de-identified, aggregated, or otherwise rendered non-identifiable in accordance with applicable law, we may use it for lawful business purposes without further notice to you, subject to applicable legal restrictions.
We retain personal information for as long as reasonably necessary to provide our platforms and applications, maintain your accounts, support the Eve exoskeleton service environment, comply with legal and regulatory obligations, resolve disputes, enforce agreements, and protect security and integrity.
In practice, retention periods depend on the category of information and the purpose for which it was collected. Account information is retained for the duration of your account. Usage data, logs, and analytics may be retained for support, maintenance, security, and product improvement. Wellness data and notes may be retained until you delete them, close your account, or request deletion, unless retention is required by law or needed for legitimate operational, safety, or claims-related reasons. When we no longer need personal information, we will delete, anonymize, or securely isolate it as appropriate.
We use administrative, technical, and organizational safeguards designed to protect personal information. These measures include access controls, authentication safeguards, role-based limitations, monitoring, and secure hosting practices.
Wandercraft uses healthcare-oriented infrastructure controls, including HIPAA-compliant cloud configurations and healthcare-compliant hosting environments, including HDS (Health Data Hosting or “Hébergeur de données de santé”) where applicable.
No method of transmission or storage is completely secure. While we are committed and work to protect data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for notifying us at support@wandercraft.health promptly if you suspect unauthorized access to your account.
Because Wandercraft operates internationally and uses service providers that may operate in multiple jurisdictions, personal information may be processed in countries other than the country in which you reside. Where personal information subject to the GDPR is transferred outside the EEA, UK, or Switzerland, Wandercraft will use a legally recognized transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, together with supplementary measures where appropriate. You may contact us to request additional information about the safeguards relevant to your data.
Certain information processed through the Platforms may qualify as Protected Health Information (PHI) under HIPAA.
HIPAA applies to covered entities, including certain health plans, healthcare clearinghouses, and healthcare providers that conduct standard electronic transactions, as well as their business associates. To the extent Wandercraft acts as a covered entity or business associate with respect to specific information or activities, Wandercraft will use and disclose applicable PHI as permitted by You or required by HIPAA, including for treatment, payment, healthcare operations, support of the Platforms and exoskeleton service environment, compliance, and other legally permitted purposes.
Where the HIPAA Notice of Privacy Practices is applicable and conflicts with this Policy as to PHI, the HIPAA NPP will govern that PHI.
Nothing in this Privacy Policy limits any rights you may have under HIPAA where HIPAA applies, including applicable rights of access.
You have the right to request access to your personal information, obtain a copy of certain information, request correction of inaccurate data, request deletion, request restriction of processing, object to certain processing, withdraw consent where consent is the basis for processing, and request portability of data you provided to us where technically feasible.
You also have the right to lodge a complaint with your local supervisory authority, including the CNIL in France.
Wandercraft does not use personal information to make fully automated individual decisions that significantly affect you.
To the extent the CCPA/CPRA applies to our processing, California residents may have rights to know what categories of personal information we collect, use, disclose, and retain; request access to specific pieces of personal information in certain circumstances; request correction of inaccurate personal information; request deletion of personal information, subject to exceptions; opt out of the sale or sharing of personal information; and receive non-discriminatory treatment for exercising privacy rights.
Because Wandercraft does not sell personal information and does not share personal information for cross-context behavioral advertising, we do not provide a “Do Not Sell or Share My Personal Information” mechanism at this time. We also do not use personal information for advertising purposes.
If you access our products or services from a jurisdiction other than those previously mentioned, your use is governed by this Privacy Policy to the extent permitted by applicable local law. Where local law grants you rights regarding your personal data that are not addressed elsewhere in this Policy — including rights of access, correction, deletion, or objection — you may exercise those rights by contacting us at privacy@wandercraft.com. We will respond in accordance with applicable law.
To exercise privacy rights, please contact privacy@wandercraft.health. We may need to verify your identity before acting on a request. You may also authorize another person to submit certain requests on your behalf where permitted by law, subject to appropriate verification. If we cannot fulfill a request in full, we will explain the reasons, subject to legal limitations.
You may request deletion of your App account and associated personal information through any deletion tools we make available in the App or by contacting support@wandercraft.health if you cannot access those tools. Please note that deletion may be subject to legal, safety, operational, fraud prevention, claims-handling, or healthcare recordkeeping obligations.
The Platforms are intended only for adults aged eighteen (18) and older. They are not directed to children, specifically children under thirteen (13), or sixteen (16) if in the EU. We do not knowingly collect personal information from children under thirteen. If we learn that a child under thirteen in the US or sixteen in the EU has provided us with personal information, we will take steps to delete that information as required by law.
We may update this Privacy Policy from time to time to reflect changes in our website, platforms or applications, our data practices, legal requirements, or operational needs.
When we make material changes, we will update the “Last Updated” date and provide additional notice where required or appropriate, such as by email, website notice, or in-app notice. Your continued use of our Platforms after the effective date of an updated Privacy Policy is subject to the revised Policy.
If you have questions about this Privacy Policy or would like to exercise privacy rights, please contact: privacy@wandercraft.health
IMPORTANT: THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN OBTAIN ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
The terms of this notice of privacy practices apply to WANDERCRAFT (WANDERCRAFT) and each of its subsidiaries, affiliates, and all entities managed or controlled by WANDERCRAFT, including the corporate office and its employees. All of the entities will share personal health information of patients as necessary to carry out treatment, payment, and healthcare operations as permitted by law. Use or disclosure pursuant to this notice may include electronic transmittal or disclosure of your personal health information.
We are required by law to maintain the privacy of our patients’ personal health information and to provide patients with notice of our legal duties and privacy practices concerning personal health information. We are required to abide by the terms of this notice for as long as it remains in effect. We reserve the right to change the terms of this notice of privacy practices as necessary and to make a new notice effective for all personal health information maintained by WANDERCRAFT. Should we make a change, you may obtain a revised copy from the location providing treatment. We are also required to inform you that there may be a provision of State law that relates to the privacy of your health information that may be more stringent than a standard or requirement under the Federal Health Insurance Portability and Accountability Act. A copy of any revised notice of privacy practices or information pertaining to a specific State law may be obtained by mailing your request to the Privacy Officer at WANDERCRAFT.
Uses and Disclosures for Treatment: We may make uses and disclosures of your personal health information as necessary for your treatment. Physical therapists and other professionals involved in your care will use information in your medical record and information that you provide about your symptoms and reactions to your course of treatment, which may include procedures, medications, tests, medical history etc.
Uses and Disclosures for Payment: We may use and disclose your personal health information as necessary for payment purposes. During the normal course of business operations, we may forward information regarding your medical procedures and treatment to your insurance company to arrange payment for the services provided to you. We may use your information to prepare a bill to send to you or the person responsible for your payment.
Uses and Disclosures for Health Care Operations: We may disclose your personal health information as necessary and as permitted by law for our health care operations, which may include clinical improvement, professional peer review, business management, accreditation, licensing, etc.
Business Associates: Certain aspects and components of our services are performed through contracts with outside persons or organizations, such as auditing accreditation outcomes, data collection, legal services, etc. At times it may be necessary for us to provide your personal health information to one or more of these outside persons or organizations who assist us with our healthcare operations. In all cases, we require these business associates to appropriately safeguard the privacy of your information.
Appointments and Services: We may contact you to provide appointment reminders or information about your treatment or other health-related benefits and services that may interest you. You have the right to request, and we will accommodate reasonable requests by you, to receive communications regarding your personal health information from us by alternative means or at alternative locations. For instance, if you wish appointment reminders not to be left on voicemail or sent to a particular address, we will accommodate reasonable requests. You have the right to request that we not send you any future marketing materials, and we will use our best efforts to honor such requests. You may make requests by sending your name and address to Privacy Officer at 345 Park Avenue S New York, NY 10010 or privacy@wandercraft.health.
Research: in limited circumstances we may use and disclose your personal health information for research purposes. In all cases where your specific authorization is not obtained your privacy will be protected by strict confidentiality requirements applied by an Institutional Review Board, which oversees the research, or by representations of the researchers that limit their use the disclosure of patient information.
Other Uses and Disclosures: we are permitted and/or required by law to make certain other uses and disclosures of your personal health information without your consent or authorization for the following:
Individuals Involved in Your Care: Unless you object, we may, from time to time, disclose your personal health information to the designated family, friends, and others who are involved in your care or in payment of your care to facilitate the person's involvement in caring for you or paying for your care. If you are unavailable, incapacitated, or facing an emergency medical situation and we determine that a limited disclosure may be in your best interest, we may share limited personal health information with involved individuals without your approval. We also may disclose limited personal health information to a public or private entity that is authorized to assist in disaster relief efforts in order for that entity to locate a family member or other persons who may be involved in some aspect of caring for you.
Marketing: we must obtain your written authorization to use and disclose your personal health information for most marketing purposes.
Sale of Personal Health Information: we must obtain your written authorization for any disclosure of your personal health information that constitutes a sale of personal health information.
Other Uses: other uses and disclosures of your personal health information, not described above, will be made only with your written authorization. You may revoke your authorization at any time in writing except to the extent that we have taken action in reliance on the authorization.
Access To Your Personal Health Information: you have the right to copy and/or inspect much of the personal health information we retain on your behalf. All access requests must be made in writing and signed by you or your legal representative. You may obtain a “Patient Access To Health Information Form” from the front office person.
Amendments To Your Personal Health Information: you have the right to request in writing that the personal health information that we maintain about you be amended or corrected. We are not obliged to make all requested amendments but will give each request careful consideration. All amendment requests must be in writing, signed by you or your legal representative, and must state the reasons for the amendment/correction request. If an amendment or correction request is made, we may notify others who work with us if we believe such notification is necessary. You may obtain an “Amendment Request Form” from the front office person or individual responsible for medical records.
Restrictions On Use And Disclosure Of Your Personal Health Information: you have the right to request restrictions on uses and disclosures of your personal health information for treatment payment or healthcare operations. We are not required to agree to your restriction request but will attempt to accommodate reasonable requests when appropriate. However, we must agree not to disclose your personal health information to your health plan if the disclosure is for payment or healthcare operations and relates to a healthcare item or service that you paid for in full out of pocket. We retain the right to terminate an agreed-to restriction if we believe such termination is appropriate. In the event of termination by us we will notify you. You also have the right to terminate any agreed to restriction in writing or orally by sending such termination notice to the individual responsible for medical records.
Receive Confidential Communications From Us By Alternative Means Or At Alternative Locations: you have the right to request that we communicate with you in a certain way or at a certain location. Your request must be in writing and specify how and where you would like to be contacted. We will accommodate all reasonable requests.
Paper Copy: You have the right to obtain a paper copy of this notice from us.
Breaches of Unsecured Personal Health Information: You have the right to be notified if you are affected by a breach of unsecured personal health information.
Workers’ Compensation: For patients whose medical treatment is covered under a state workers’ compensation program, please note the following: disclosure of your protected health information for purposes of providing treatment and obtaining payment under the state workers' compensation is governed by the state workers' compensation regulations and procedures. Therefore, we are not obligated to secure a written authorization as otherwise required by HIPAA to disclose your PHI for workers' compensation purposes, nor may you restrict our use or disclosure of your PHI for workers' compensation purposes. Written consent to use or disclose your PHI may be required pursuant to our internal policies and state workers’ compensation program rules in order to process your claims. Failure to provide any required written consent may result in your financial liability for medical services and supplies.
Complaints: If you believe your privacy rights have been violated, you can file a complaint in writing with the Privacy Officer, WANDERCRAFT, 345 Park Avenue S New York, NY 10010. You may also file a complaint with the Secretary of the US Department of Health and Human Services in Washington D.C. in writing within 180 days of a violation of your rights. There will be no retaliation for filing a complaint.
FOR FURTHER INFORMATION: if you have questions or need further assistance regarding this notice, you may contact the Privacy Officer at privacy@wandercraft.health.
☐ * I agree that Wandercraft may collect, use, and process the health data mentioned in this form (diagnosis, date of the accident or diagnosis, height, weight, information relating to my rehabilitation, and, where applicable, the name of my physician or physical therapist), including disclosure to Wandercraft employees, for the purpose of providing the Eve by Wandercraft app services (helping users view information and manage personal records related to the use of their exoskeleton). This consent/authorization remains valid for the duration of my use of the Eve by Wandercraft app, or until revoked, whichever occurs first. I may withdraw or revoke it at any time by writing to privacy@wandercraft.health, without affecting the lawfulness of processing carried out before such withdrawal.
