Health.be ("we," "our," "us") is committed to protecting the privacy and security of your health data. This Privacy Policy outlines how we collect, use, disclose, and safeguard health-related information in compliance with the General Data Protection Regulation (GDPR) (EU 2016/679) and applicable Belgian privacy laws, including the Belgian Data Protection Act.

We may collect the following types of health data from you:

• Personal identifiers (e.g., name, date of birth, contact details)
• Medical history and health conditions
• Lab results, biometrics, and physiological data
• Lifestyle and wellness information

We collect health data through direct input from users, third-party healthcare providers, wearables, and other health monitoring devices.

Your health data is collected and processed for the following purposes:

• Providing healthcare services and personalized recommendations
• Monitoring and improving health and wellness outcomes
• Compliance with legal and regulatory requirements
• Research and statistical analysis (only in de-identified or anonymized form)

We ensure that all processing activities are based on a legal basis under GDPR, such as your explicit consent (Article 9(2)(a)), compliance with legal obligations (Article 6(1)(c)), or legitimate interests (Article 6(1)(f)).

We do not sell or rent health data to third parties. However, we may share your health data under the following circumstances:

• With your explicit consent
• With healthcare providers and authorized personnel for medical purposes
• With legal or regulatory authorities when required by law
• With third-party service providers under strict confidentiality agreements for processing or technical support

When required for scientific research, subject to strict ethical and legal safeguards.

All third parties processing health data on our behalf are required to comply with GDPR and Belgian data protection regulations.

We implement industry-standard security measures to protect your health data, including:

• Encryption and secure storage
• Access controls and authentication protocols
• Regular security audits and risk assessments

Despite these efforts, no system can guarantee complete security. We encourage users to take precautions when sharing personal health information.

We retain health data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. After this period, data is securely deleted or anonymized.

Under GDPR, you have the right to request information on how long we retain your data and request erasure where applicable.

Under GDPR and Belgian data protection laws, you have the following rights regarding your health data:

• The right to access, update, or correct your personal data
• The right to request deletion or anonymization of your data (unless required by law to retain it)
• The right to withdraw consent for processing at any time
• The right to request a copy of your data in a portable format
• The right to restrict or object to processing
• The right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données)

To exercise these rights, please contact us at privacy@health.be.

We may update this Privacy Policy from time to time. Any changes will be communicated through our website or other appropriate channels. Continued use of our services constitutes acceptance of the revised policy.

For any questions or concerns regarding this Privacy Policy, please contact us at privacy@health.be

For complaints regarding data protection, you may also contact the Belgian Data Protection Authority at: Gegevensbeschermingsautoriteit / Autorité de protection des données Drukpersstraat 35, 1000 Brussels, Belgium Email: contact@apd-gba.be Website https://www.gegevensbeschermingsautoriteit.be