Privacy policy

Rikardia Network OÜ (hereinafter “Rikardia” or “we”) highly values the privacy of each of our clients (hereinafter “you”). In this privacy notice, we explain what data we collect about you, why we do so, and how your data is used.

Collection and Use of Personal Data

Personal data means any data that can directly or indirectly identify you as an individual and that Rikardia collects and processes to provide services and fulfill legal obligations.

Personal data can be collected in one of the following ways:

• When you provide us with your contact information (including name, email address) when subscribing to our services. For practitioners, additional company data or personal identification code, address, and bank account details for payment processing.
• When subscribing to our newsletter.

Collection of Other Data

We also collect non-personal data, i.e., data that cannot be directly associated with a specific individual (gender, age, language preference, location). This data is combined and used to improve our services. In this privacy policy, such combined data is considered anonymous data.

Sharing of Collected Personal Data with Third Parties

As a data processor, we have the right to share personal data with third parties, such as authorized data processors, IT service providers, accountants, consulting firms, etc. As a data processor, we are the responsible processor of personal data. We ensure the reliability of service providers, are responsible for their actions, and have signed data processing agreements with them.

We use Hotjar to better understand our users’ needs and optimize the service. Hotjar is a technology service that helps us better understand our users’ experiences. Hotjar uses cookies and other technologies to collect data on user behavior and their devices and stores the information in a pseudonymized user profile on our behalf. Hotjar is contractually prohibited from selling data collected on behalf of Rikardia.

We use Typeform to complete the test. The test responses in the Typeform environment are anonymized, and the responses are not archived in the Rikardia environment.

Use and Retention of Collected Personal Data

We may use all collected personal data to inform clients about news, promotions, and upcoming service changes. Clients who wish to unsubscribe from our newsletters or do not want to receive information about products of interest to them may opt-out of mailing lists at any time.

By agreeing to the terms of the privacy policy, the client gives Rikardia consent for the automated processing of their data. You can withdraw your consent at any time on our website by sending us a written request in a reproducible form. Such requests and consents do not have retroactive effect.

We retain personal data as long as it is necessary to fulfill the purpose for which it was collected, to exercise and protect our rights, or as required by law.

Connecting Google Calendar (practitioners)

Practitioners can choose to connect their Google Calendar to Rikardia. Connecting is optional and can be ended at any time. Clients never need to connect a Google account.

What data we use. When a practitioner connects, we ask Google for permission to:

• see when the practitioner’s calendar is busy or free. We only see the start and end of busy times, never event titles, attendees or other details;
• add bookings made through Rikardia to the practitioner’s calendar, and change or delete them when a booking is moved or cancelled. Rikardia only writes the booking events it created;
• see the email address of the connected Google account, so the practitioner can see which account is connected.

Why we use it. Busy times are used only to stop clients from booking times when the practitioner is busy elsewhere. A booking event (time, service, client name, and place or video link) is added so the practitioner’s calendar matches their bookings.

How we store it. The Google refresh token that keeps the connection working is stored encrypted (AES-256) in Rikardia’s database in the European Union (Ireland). Short-lived access tokens are not stored. Of busy times we store only the start and end. Only authorised Rikardia staff can access this data, and only when needed to run the service, for security, or when the law requires it.

What we do not do. We do not sell data received from Google, use it for advertising or to train artificial intelligence models, or share it with third parties, except authorised processors needed to provide the service (such as our hosting provider) or when required by law.

How to disconnect and delete the data. Practitioners can disconnect in Rikardia (My profile → Availability → Google Calendar → “Disconnect”) or in their Google Account settings (myaccount.google.com/permissions). Disconnecting in Rikardia revokes our access at Google and immediately deletes the connection and the stored busy times. Booking events already added stay in the practitioner’s calendar, and the practitioner can delete them. Questions: info@rikardia.com.

Rikardia’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Security of Personal Data

Rikardia takes all precautions (including administrative, technical, and physical measures) to protect clients’ personal data. Only authorized persons have access to personal data for making changes and processing them.

Security

All personal data you provide is considered confidential information. Using an encrypted data transmission channel in banks ensures that buyers’ personal data and banking information are protected.

Modification and Termination of Client Data Processing

The client has the right to access their client data via the email address info@rikardia.com. The client has the right to request the termination of their data processing and/or the deletion of collected data if such a right arises from the Personal Data Protection Act or other legal acts.

Terms and Changes to the Privacy Policy

By starting to use our website or completing the loyalty application, you confirm that you have read these principles and terms and agree with them. We reserve the right to change the general terms of this privacy policy if necessary, by notifying all loyal clients, but we will do our best to keep our privacy policy updated and available to you on our website.