Privacy policy
Your data, and your companion's, is in safe paws. In line with the GDPR (EU regulation 2016/679) and French data protection law.
1. Data controller
Les Pattes d'Hestia, a sole trader based in Dignac (16). Full identity and address in the legal notice. Contact :
2. What we collect and why
- Booking / quote requests: name, email, phone, town, language, details about your pets (species, breed, age, size, health, medication, vaccinations, ID, behaviour), dates and message. Purpose: replying to you, arranging the meet-and-greet and drawing up the care contract. Legal basis: pre-contractual steps and performance of a contract (GDPR art. 6.1.b).
- Clients: care contract, invoicing, emergency contact. Legal basis: contract and legal obligations (art. 6.1.b and 6.1.c).
- Published photos and videos: only with your consent (art. 6.1.a), see below.
No automated decisions, no profiling, no data sales, no advertising. Fields marked with an asterisk are needed to handle your request.
3. How long we keep it
Requests that don't lead to a booking: up to 3 years after the last contact. Clients: for the length of the relationship plus 5 years (limitation period). Invoices: 10 years (accounting rules). Photo consent: until withdrawn.
4. Who receives it
Only Les Pattes d'Hestia, and the technical providers acting on its behalf:
- Cloudflare, Inc. (website hosting, USA);
- Google (Google Sheets, Google Apps Script and Gmail): receiving and storing requests sent through the online form, in a private spreadsheet that only Romane can access;
- Web3Forms (email delivery service), only as a backup if the previous service is unavailable [location to check] ;
- the email provider used by Les Pattes d'Hestia [to be specified].
These transfers outside the EU are covered by GDPR safeguards (the EU-US Data Privacy Framework adequacy decision for certified companies, or the European Commission's standard contractual clauses) [to check for each provider].
5. Photos of your pet
Under French law, an animal has no image rights of its own. But a photo can reveal your face, your house, your address or your location, and those are personal data. So during the stay, photos and videos are sent to you alone, privately. We only post photos or videos of your pet on our website or social media (TikTok etc.) with your explicit consent (an optional tick box on the form, and a YES/NO choice in the contract), only after the stay has ended (so nobody can guess your home is empty), with no faces, no home or place that could locate you, and no geotags. You can withdraw consent at any time with a simple email, and we'll take the post down as quickly as we can. Saying no has no effect on the care we provide.
6. Your rights
You have the rights of access, correction, erasure, restriction, objection and portability, the right to withdraw consent at any time, and the right to set instructions for your data after your death. Write to us at the address above and we'll reply within a month. You can also complain to the CNIL, France's data protection authority (www.cnil.fr, 3 place de Fontenoy, 75007 Paris).
7. Security
The site is served over HTTPS only, access to data is limited to Romane, and paper documents (contracts, pet sheets) are kept securely.
8. Cookies
This site uses no advertising or analytics cookies. Fonts are hosted on the site itself (no Google Fonts requests). Your language choice may be remembered in your browser (local storage, strictly necessary, no tracking). The estimator's distance tool only contacts the public geo.api.gouv.fr API and the OSRM routing service if you click “Calculate”, and sends only the town you entered. That's why there's no cookie banner.
Last updated: [launch date]
