Privacy policy

1. Who processes your data

Professionnalisable is a digital platform published and operated by Exceptions SAS. Exceptions SAS is responsible for the processing described in this policy.

Registered office: Kinshasa-Gombe, République Démocratique du Congo. RCCM: CD/KNG/RCCM/25-B-05290. ID. NAT.: 01-S9502-N61071U. NIF: A2613005Q.

For any question about your personal data: donnees@professionnalisable.com.

2. What is public, and what is not

This is the most important distinction in this document.

The information you place in your professional website — business name, description of your activity, services, prices, opening hours, photographs, phone or WhatsApp number, address — becomes PUBLIC as soon as the site is published. It is accessible to anyone who knows your address, and may be indexed by search engines, copied or retained by third parties over whom we have no control. That is the very purpose of a professional website, and you decide what appears on it.

Your ACCOUNT data — your login email address, your password, your invoices, your exchanges with support, your documents — is never published. It serves to run the service and to reach you.

The same piece of information may fall into both categories. The WhatsApp number you provide at sign-up stays private; the same number placed in your website's Contact section is public. Removing it from your site makes it private again going forward, but does not erase what third parties may already have kept.

3. Your account data

When the account is created, we collect your name, your email address and a password. The password is stored in one-way encrypted form: we can neither read it nor send it to you.

You may also provide, without obligation: your profession, your WhatsApp number, your country and your city. The number is stored in international format so that it can be reached from any country. Your interface language is kept so we write to you in the right one.

We also keep the account role, its state — active or suspended — and the date of your last activity.

This data serves to identify you, secure your access, send you service-related messages and reach you if a difficulty arises.

4. Sign-ins and technical data

While you are signed in, a session is recorded. It contains a session identifier, your IP address and your browser description, together with the date of last activity.

These elements serve to keep you signed in, protect your account and understand a technical incident or an unusual access attempt. They are not used for any commercial analysis.

5. Your website content, images and files

The texts, images, logos and other elements you upload are kept in order to compose and serve your website. Images are automatically resized and converted so they display correctly and quickly.

Worth knowing: a website's images are stored so that they can be served directly by the web server. They therefore remain reachable at their own address, including when the site is no longer published. Do not place in the editor any document you would not want to be reachable.

The log of changes to your site — template change, profession change, archiving, suspension — is kept so that you can understand its history and so that we can help you recover content.

6. The messages your visitors send you

Your website's contact form sends us NOTHING and stores no message.

When a visitor fills it in, their browser composes a message and opens WhatsApp — if you provided a number — or their email software. The message then goes straight to you through that channel. We have neither a copy of it nor any knowledge of it.

Two consequences. First, we cannot recover a lost message for you. Second, the data the visitor enters passes through the service they use — WhatsApp, operated by Meta, or their email provider — under that service's own terms. Once the message reaches you, you alone are responsible for it towards the person who wrote to you.

7. Audience measurement

We measure traffic on professionnalisable.com to understand which pages are consulted and improve the service. This measurement is entirely our own: no third-party analytics tool, no advertising pixel, no sharing with any advertiser.

A cookie named “pb_vid” is set on professionnalisable.com. It contains a random identifier, unrelated to your identity, and lasts 395 days.

We record: pages viewed, page type, date, country, browser language, device type, browser and operating system, entry page, referring website and any campaign parameters. If you are signed in, the visit is linked to your account.

Your IP address is NOT kept. Only a one-way encrypted fingerprint of it is retained, which allows two visitors to be distinguished without keeping the address itself.

NO MEASUREMENT IS CARRIED OUT ON OUR CLIENTS' PROFESSIONAL DOMAINS. When a website is served under its owner's domain, we set no cookie there and count no visitor. The domain owner remains free to install their own measurement tools there, under their own responsibility and their own information obligations.

8. Payments and invoicing

Payments are collected by mobile money through a payment gateway, Exceptions Pay, operated within the same group. Your payment details are entered at that gateway: WE NEITHER SEE NOR STORE any card number, mobile wallet identifier or code.

We keep the accounting record of the payment: reference, amount, currency, status, date received, country, and the technical elements returned by the gateway.

Issued invoices are kept, with the detail of what was invoiced and the period covered. They are the record of the commercial relationship and are required by our accounting obligations.

9. Domains and professional mailboxes

When you order a professional domain, we keep the requested name, its progress, the technical checks carried out and the expiry dates. The name is registered in your name with a domain registrar, which on that occasion receives the information that domain name regulations require it to collect.

For professional mailboxes, we keep the address, the quota, the state and the dates. NO MAILBOX PASSWORD IS STORED, in any form, and we have no access to the content of your messages.

10. Support

When you open a ticket, we keep its subject, its category, the messages exchanged and the attachments you send. Attachments are stored in a private area, not reachable from the web, and can only be consulted by the support team.

These exchanges are kept because they form the history of your relationship with the service, and sometimes the record of a commitment made to you.

11. Guidance sessions

If you request guidance, we keep your request, the topic, the description you give, the language you want, your preferred slots, the appointment set and how it proceeded.

For on-site guidance, the meeting address and the access details you provide are recorded and passed to the technician assigned to your session — to them alone, and for the duration of the assignment.

If you dispute a session, your dispute, its review and the decision taken are kept.

12. Applications and technicians

This section only concerns people who apply to work within the Professionnalisable scheme.

An application includes identity and contact information, a presentation, a location, the languages and professions mastered, and supporting documents: identity document, curriculum vitae, certificates, and an official photograph for the technician card.

These documents are stored in a private area, under a name that cannot be guessed, and their real type is verified. EVERY CONSULTATION OF A SENSITIVE DOCUMENT IS LOGGED: who opened it, when, from which address. That log can be neither modified nor erased.

The payout details provided in order to be paid follow the same regime: stored in structured form, revealed only when necessary, and every disclosure is logged. A change to those details only becomes usable after a safety delay, so that a compromised account cannot have a balance transferred out within the minute.

Decisions taken on an application, their grounds and the file's history are kept: a decision must remain explainable months later.

13. Notifications and emails

We send you messages relating to how the service works: sign-up confirmation, address verification, invoice issue and reminders, payment received, expiry of a service, suspension and reactivation of a site, ticket follow-up, guidance session steps.

These messages are transactional: they inform you of facts that concern you. WE SEND NO MARKETING MESSAGES and pass your address to no one.

Notifications are also displayed and kept in your account area.

14. Who accesses your data

Your data is neither sold, rented nor exchanged.

It is accessed only by:

• the Exceptions SAS team responsible for running the service and for support, within the limits of what their role requires
• the technician assigned to your guidance session, for what that session requires and for its duration
• our technical suppliers, strictly to the extent their service requires: the service host, the payment gateway, the email provider and the domain name registrar
• a lawfully empowered authority, upon a legally grounded request.

15. Transfers outside the Democratic Republic of the Congo

The infrastructure hosting the service is operated by OVHcloud. The server running Professionnalisable is located in the Strasbourg (SBG), France data centre.

Your data is therefore hosted outside the République Démocratique du Congo, which constitutes an international transfer. The hosting contract is held by Exceptions SAS, which remains responsible for the processing described here.

We choose suppliers offering appropriate technical and organisational guarantees, and limit the data transmitted to what their service requires.

16. Security

We apply in particular the following measures:

• passwords are one-way encrypted and never readable
• sensitive documents are stored outside the public web area, under names that cannot be guessed, and their real type is checked on receipt
• every consultation of a sensitive document is logged in a tamper-proof way
• exchanges with the service are encrypted in transit
• payment notifications are authenticated by signature
• sensitive actions are rate-limited to contain automated attempts.

No arrangement is infallible. You contribute to this security by choosing a password of your own and sharing it with no one — including a technician, who never has any reason to ask for it.

17. Retention periods

We would rather describe what we actually do than announce periods the service could not yet apply.

As things stand:

• your account and website data is kept for as long as your account exists
• invoices, payments and accounting entries are kept for the period required by our accounting and tax obligations, even after the relationship ends
• security logs and sensitive-document access logs are kept durably: their very purpose is to remain consultable long after the events
• support exchanges and dispute materials are kept for as long as needed to handle the situation and account for it
• audience measurements are kept to follow how the service evolves over time.

Automatic purge and self-service account deletion mechanisms are being prepared. Once in service, this section will state precise periods and a new version of this policy will be published.

18. Closing and deleting your account

You can request the closure of your account by writing to donnees@professionnalisable.com or by opening a ticket from your account area. There is not yet a self-service delete button; the request is handled by our team.

What then happens: your websites stop being published, your content and images are deleted, and the information identifying you is removed or anonymised.

What is necessarily kept: invoices and payments, for our accounting obligations; the elements needed for an ongoing dispute; security logs; and, where an operation linked you to another person — a guidance session, for example — the record of that operation, which also belongs to that person.

We will tell you what was deleted and what was kept.

19. Your rights

You may:

• access the data we hold about you and obtain a copy of it
• have it corrected if it is inaccurate or incomplete — most of it can be edited directly from your account area
• request the deletion of your account, under the conditions described above
• object to a processing operation on grounds relating to your situation, where that processing is not necessary to provide the service or to meet a legal obligation.

To exercise these rights, write to donnees@professionnalisable.com from your account's email address. We may ask you for a verification element if any doubt remains as to your identity: this is a protection against fraudulent requests.

We answer within a reasonable time. If we cannot grant your request, we will tell you why.

20. Changes to this policy

This policy is versioned and dated. The version in force is kept on record and can be provided to you on request.

Any substantive change will give rise to a new version. Changes that directly concern you will be flagged in your account area or by email.

21. Contact us

General enquiries

contact@professionnalisable.com

Data protection

donnees@professionnalisable.com

Reporting content

abus@professionnalisable.com

Support

From your account area, “Support” section.