France Deco SAS (“we”) respects and protects the personal data of all its clients and website visitors. This policy is established under the EU General Data Protection Regulation (RGPD/GDPR) and the French Data Protection Act. It explains how we collect, use, store and protect your personal data. Last updated: 2026-09-15.

1. Data controller

The data controller is France Deco SAS, registered address: 12 Rue de la Republique, 75011 Paris, France, SIRET: 81234567800012, email: contact@francedeco.fr.

2. Information we collect

Appointment information: name, phone, email, property city and postal code, property type, area, desired start date and works description;
Account information: username, password stored encrypted, name and contact details;
Project information: your orders, quotes, contracts, site address, progress photos, message history, handover reviews and maintenance records;
Technical information: login IP, browser identifier and operation logs (for account security and audit traceability).

3. Purposes and legal basis

Performing the renovation service contract and pre-contractual steps (quotes, appointments, works, handover, warranty);
Complying with French legal obligations on tax, invoicing and financial record retention;
Service follow-up and communication based on your explicit consent;
Safeguarding system and account security and preventing fraud (audit logs).

4. Sharing and disclosure

We share project information only with the company’s managers, assigned works teams and partner suppliers, strictly as needed for the works and service. We do not sell your personal data and do not transfer it outside the European Union; no information is disclosed to unrelated third parties except as required by law.

5. Data retention periods

Quotes, contracts and financial records: 10 years under French tax/commercial requirements;
Works documents and warranty records: retained for 2 years after the warranty period ends;
Unconverted appointment requests: deleted or anonymised after 3 years;
Audit logs: 12 months.

6. Your rights

Under the RGPD you have the right of access, rectification, erasure (right to be forgotten), restriction of processing, data portability and objection, and the right to withdraw consent at any time. To exercise these rights, email contact@francedeco.fr; we will reply within 1 month. You may also lodge a complaint with the CNIL.

7. Security measures

Login passwords are stored using one-way bcrypt hashing; the entire site uses parameterised database queries to prevent injection; uploaded files are restricted by a type whitelist and renamed; sensitive financial data is strictly isolated by role and visible only to authorised managers; a full audit log is maintained.

8. Cookies and sessions

This site only uses technical cookies strictly necessary for the login session (HttpOnly), with no advertising tracking cookies, so no extra consent pop-up is required. The session ends when you log out.

By continuing to register an account or submitting an appointment request, you confirm that you have read and accept this policy.

Privacy policy and personal data protection