Administrators

Privacy and GDPR

Sessions Pro processes personal data (client accounts, sessions, notes, emails). This guide summarizes rights and tools for site owners (coach / administrator).

Detailed legal snippet: docs/RGPD-SNIPPET-POLITIQUE.md (adapt with your legal identity).

Data involved

Category	Examples
Account	Name, first name, email, phone, password (WP hash)
Sessions	Date, location, link, status, price, payment, notes, PDF
Coach notes	Private text about the client (not visible to client)
Emails	Send logs (type, recipient, timestamp)
Payment	Manual status in Free; Stripe processes cards in Premium (outside plugin DB)

Native WordPress tools

Sessions Pro registers compatible exporters and erasers:

Tools → Export Personal Data

Tools → Erase Personal Data

Standard WordPress workflow: email request, confirmation link, JSON/ZIP export or erasure.

Typical export content:

User profile (plugin meta)
Sessions linked to the client
Notes and phone

Erasure: anonymization / deletion of plugin meta and session dissociation (per Joolwebsp_Privacy_Handler implementation).

Responsibilities

Actor	Role
Coach / site publisher	Data controller vis-à-vis their clients
Host	Infrastructure processor
Stripe (Premium)	Payment processor
SMTP / mail	Email delivery processor

Mention Sessions Pro in your privacy policy (see snippet).

Retention period

Recommendation: retain while the coach–client relationship is active. At the end:

Delete or anonymize the client account via WP tools
Historical sessions may be kept anonymized per your legal obligation

Data subject rights

Clients can request:

Access (export)
Rectification (client area profile or via coach)
Erasure (subject to legal obligations)
Objection / restriction — handled case by case

Channel: coach contact or site form.

Security