Privacy policy

This page explains what happens to the information you send through this site. It is written in plain English: if anything remains unclear, write to us and we will answer.

Who processes your data

Data controller

Maison Hiret, [legal form], SIREN [SIREN]

Address

[Full address of the registered office]

Contact

contact@maisonhiret.com

Given the nature and volume of the processing, appointing a data protection officer is not compulsory. Your requests are handled directly at the address above.

What data is collected

The contact form is the only thing you fill in on this site. It gathers:

• your name, as you type it;
• your email address;
• your phone number, if you choose to give it (the field is optional);
• the content of your message;
• the page it was sent from, so we know where the enquiry came from;
• the date and time it was sent.

No account is created, no password is asked for, no bank details are collected. The only optional field is your phone number, which lets us call you back rather than write. Nothing is asked for beyond what is needed to reply to you.

If you write to us directly by email, the data processed is simply whatever your message contains.

Submission fingerprint

To prevent automated submissions, the site keeps a truncated fingerprint of your IP address for one hour. This mechanism does not record the address itself, only this fingerprint. The fingerprint is only used to count how many messages a visitor sends, and it is linked neither to your message nor to your name.

Not to be confused with the server logs described below, which are produced by the host’s server and do contain the IP address. The two are separate processing operations: one protects the form, the other is simply part of how any site available online works.

Legal basis

Legitimate interest: protecting the form against automated submissions.

Retention

One hour, then automatic erasure.

Server logs

Like any site available online, this one generates technical logs at its host: IP address, date and time of the visit, page requested, type of browser. These logs are produced automatically by the server. They serve only security and fault diagnosis, and they are neither read for commercial purposes nor cross-checked against the messages received.

Legal basis

Legitimate interest: keeping the site secure and working properly.

Retention period

[Period applied by your host, often 6 to 12 months. Ask them, do not invent it.]

Why, and on what legal basis

Purpose

To answer your enquiry, prepare a quotation where relevant, and follow our exchanges through to their end.

Legal basis

Your consent, given by ticking the box on the form. The box is never pre-ticked. You can withdraw your consent at any time (see the “Your rights” section).

Your data is used for no other purpose. It is not sold, rented or passed on. It is not used for marketing, and sending a message will not sign you up to any newsletter.

Do you have to provide it?

No. Filling in the form is voluntary. The fields marked with a star are nonetheless needed for a reply to reach you: without an email address, your enquiry would go unanswered. Nothing else follows from leaving them blank.

Automated decisions

Your data is not subject to any automated decision or to profiling. Every message is read by a person.

Who has access to it

Your messages are read by Maison Hiret. They are disclosed to a third party only where handling your enquiry requires it (a technical contributor working on your project, for example), and then only to the extent strictly necessary, and under a duty of confidentiality. They are never sold or rented out. Two technical providers are also involved along the way:

Site host

Hostinger International Ltd (Cyprus, European Union), on a server located in the European Union.
The form is handled by the site’s own server: no third-party form service is involved, and your message is not kept on that server, neither in a database nor in a file.

Mailbox

Google, which hosts the mailbox your messages arrive in (Google Workspace).

Because your messages are delivered to that mailbox, they may be processed outside the European Union. That transfer is covered by the adequacy decision adopted by the European Commission on 10 July 2023 under the EU–US Data Privacy Framework, to which Google LLC adheres, together with the European Commission’s standard contractual clauses.

How long it is kept

Enquiry that led to no work

12 months from the last exchange, then deletion.

Enquiry that led to a job

For as long as the contract lasts, after which the accounting records are kept for the legal period of 10 years.

Your rights

The General Data Protection Regulation gives you the following rights over your information:

• Access: obtain a copy of the data held about you.
• Rectification: have it corrected if it is inaccurate.
• Erasure: ask for it to be deleted.
• Restriction: ask for it to be frozen temporarily.
• Objection: object to it being processed.
• Portability: receive it in a reusable format.
• Withdrawal of consent: at any time, without having to give a reason, and without calling into question what was done before the withdrawal.

To exercise one of these rights, write to contact@maisonhiret.com. You will receive a reply within one month of your request being received. Where the request is complex, that period may be extended by two months, and you will be informed of this within the first month. That is what article 12.3 of the Regulation provides. Proof of identity may be requested if there is reasonable doubt about who you are, and it will be destroyed as soon as the check is done.

Cookies and analytics

This site sets no cookies. It uses no advertising tracker, no social network button, and no typeface loaded from a third-party server. That is why you are shown no consent banner: there is nothing to consent to.

Security

The site is served over HTTPS: the information you type is encrypted in transit. The messages received are kept in a mailbox protected by a unique password and two-factor authentication.

Complaints

If a reply does not satisfy you, you can lodge a complaint with the Commission nationale de l’informatique et des libertés (the CNIL): cnil.fr/fr/plaintes, or by post to 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

Changes

This policy may be amended to take account of legal or technical developments. The date of the last update appears at the top of the page. If a substantial change affects processing already under way, the people concerned will be told by email.