Privacy policy.

Medimapper is a product of Stepstools BV, Goudbergstraat 29, 8560 Wevelgem, Belgium, company number BE0749.823.163. Stepstools BV is the data controller for the personal data described in this policy.

For any question about your data, email info@medimapper.world or call +32 485 97 68 96. You can also write to us at the address above.

When you use the contact form or request a guided evaluation, we receive the details you enter:

• your first and last name, work email address, organisation, job title and organisation type
• the reason for your request and your message
• for a guided evaluation: country of registration, company number, any authorisation or licence number, source and target markets, the products you want to evaluate and the decision you are preparing
• for a pricing enquiry: the regions and countries you selected

Each submission also carries the page you sent it from, the page that referred you, any campaign parameters in the link you followed (such as utm_source or gclid), your IP address and your browser's user agent.

If you email or call us, we receive your contact details and whatever you choose to tell us. If your organisation subscribes, we also process the names and work email addresses of its users, billing details, and records of how the platform and API are used.

When you open a page, Plausible Analytics receives the page address, the referring page, your browser and device type, and an approximate location taken from your IP address. It does not set a cookie, and it does not store the IP address.

• To answer your request and prepare an evaluation or quote. Legal basis: your consent, given with the checkbox on the form, and steps you ask us to take before entering into a contract.
• To provide, support and invoice a subscription. Legal basis: performance of the contract and our legal obligations, for example under accounting and tax law.
• To follow up on your request or subscription with relevant information about Medimapper. Legal basis: our legitimate interest in business contact. You can ask us to stop at any time.
• To protect the forms and the service against abuse. We use your IP address to limit repeated submissions. Legal basis: our legitimate interest in security.
• To understand which channels bring us requests. We use the referring page and campaign parameters for this. Legal basis: our legitimate interest.
• To see which pages on this website are used. Plausible Analytics counts page views without cookies. Legal basis: our legitimate interest in understanding use of the site.

We do not send newsletters, we do not sell personal data and we do not use it for automated decisions about you.

We do not use advertising or social media trackers, and this website does not set cookies. Fonts and images load from our own domain.

We do count visits. The counting script loads from plausible.io, run by Plausible Insights OÜ in Estonia. It does not use cookies or store anything on your device. Visitor data stays in the European Union.

If we add a tool that needs cookies or similar technology, we will update this policy first and ask for your consent where the law requires it.

We share personal data only with service providers that process it on our instructions and under a data processing agreement:

• Scaleway SAS (France), which hosts the website and the form service and delivers form submissions to us by email
• Plausible Insights OÜ (Estonia), which counts visits to this website. That data stays in the European Union
• our email provider, which stores the messages we send and receive
• our accountant, for invoicing and bookkeeping

We may also disclose data when the law or a court requires it. If Stepstools BV transfers all or part of its business, the data may pass to the new owner, who must respect this policy.

Our hosting runs in Paris, France. If a provider processes data outside the European Economic Area, we only use it when the transfer is covered by an adequacy decision of the European Commission or by the Commission's standard contractual clauses.

• Requests that do not lead to a contract: up to two years after our last contact.
• Customer and user data: for the duration of the contract and up to five years after it ends.
• Invoices and accounting records: as long as Belgian law requires, currently ten years.
• Technical logs: for a limited period, only as long as needed for security and troubleshooting.
• Website visit statistics: while we use Plausible Analytics to measure the site.

Under the General Data Protection Regulation (GDPR) you have the right to:

• see the personal data we hold about you and receive a copy
• have incorrect data corrected or incomplete data completed
• have your data deleted or its use restricted
• object to processing based on our legitimate interest, including follow-up contact
• receive your data in a structured, machine-readable format
• withdraw your consent at any time, without affecting earlier processing

Email info@medimapper.world to use any of these rights. We answer within one month.

You can also file a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, +32 2 274 48 00, www.dataprotectionauthority.be.

Connections to the website and the form service are encrypted. The form service only accepts submissions from this website, and access to submissions and customer data is limited to the people who need it.

The Medimapper dataset describes medicinal products and the companies that market them. Please do not include health data or information about patients in the forms or in files you send us.

The date at the top shows when this policy last changed. This version applies from 3 November 2026.