Privacy policy

Notice published on aldeak.fr (data protection)

In accordance with applicable law, information collected through our forms is communicated exclusively to Aldeak and is not shared with third parties. Users are informed that they have the right to access, modify, rectify and delete their personal data (articles 34 et seq. of French Law no. 78-17 of 6 January 1978 on data processing, files and liberties).

Additional information (GDPR)

The live aldeak.fr website did not have a dedicated privacy page; the sections below supplement the notice above in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data controller

• Company name: Aldeak (SARL)
• Share capital: €5,000
• Registered office: 3 avenue du Maréchal Foch, 33500 Libourne, France
• Email:
• Phone:

Aldeak has not appointed a Data Protection Officer (DPO). For any questions about your personal data, contact us at the address above (subject line: "Personal data").

2. Data we collect

Depending on the forms and journeys you use, we may collect:

• Identity and contact: first name, last name, email address, phone number
• Project: type of works, town, postcode, floor area, budget, timeline, project stage
• Profile: homeowner or business, property type
• Referral: referrer and referred contact details, link between them
• Tradesperson application: company, trades, service area, description, website
• Technical: visit source (URL parameters, referring page), request timestamp
• Consent: agreement to data processing

We only collect data necessary to handle your request.

Mandatory or optional fields:

• Mandatory to process your request: contact details, project information depending on the form used, and GDPR consent.
• Optional: free-text message, visit source, non-required journey fields (e.g. additional description).

Without mandatory data and your consent, we cannot review your request or contact you.

3. Purposes and legal bases

Purpose	Legal basis
Qualifying and estimating your project (Marc bot, forms)	Pre-contractual steps at your request (Art. 6(1)(b) GDPR) and, where applicable, your consent
Commercial follow-up by an Aldeak advisor	Consent (Art. 6(1)(a) GDPR) and/or legitimate interest in responding to an inbound request
Managing the referral programme	Pre-contractual steps and consent
Reviewing applications to the tradesperson partner network	Consent and legitimate interest in building a partner network
Site security, fraud prevention and internal technical statistics	Legitimate interest (Art. 6(1)(f) GDPR)

4. Scoring and automated processing

The online questionnaire "Get a works estimate" (Marc bot) assigns a priority score (Lead A, B, C or nurture) based on your answers (area, budget, type of works, timeline, etc.). This score is used only to organise how requests are handled by our sales team. It does not produce a fully automated decision with legal effects for you: every file is reviewed by a human before follow-up.

5. Recipients and processors

Your data is intended for authorised Aldeak staff. It may be processed by the following processors, within the scope of their missions:

• Cloudflare, Inc. — site hosting, content delivery network (CDN), form processing (Workers) and transactional email
• API Adresse (data.gouv.fr) and API Géo (geo.api.gouv.fr) — town autocomplete in the questionnaire (only your search query is transmitted)

These providers are bound by contractual confidentiality and security obligations. We do not sell your data or share it with third parties for advertising purposes.

6. Transfers outside the European Union

Hosting and certain technical services may involve processing in the United States by Cloudflare. These transfers are governed by GDPR mechanisms (European Commission standard contractual clauses or adequacy decisions, depending on the services concerned).

7. Retention periods

• Quote requests / leads: 24 months from last contact, unless a legal obligation requires otherwise or you request deletion
• Referrals: duration of the programme then archived for 3 years as evidence
• Tradesperson applications: 24 months if unsuccessful, or for the duration of the contractual relationship where applicable
• Technical logs: limited to security needs (generally 12 months maximum)

After these periods, data is deleted or anonymised.

8. Your rights

Under the GDPR, you have the following rights:

• Right of access and to a copy of your data
• Right to rectification of inaccurate or incomplete data
• Right to erasure ("right to be forgotten"), within legal limits
• Right to restriction of processing
• Right to object to processing based on legitimate interest
• Right to data portability for data you provided, where processing is automated and based on consent or a contract
• Right to withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise your rights: (please attach proof of identity if required). We respond within one month, extendable by two months for complex requests.

9. Complaint to the CNIL

If you believe, after contacting us, that your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.

10. Cookies and trackers

At the date of this policy, the site does not use advertising cookies or audience measurement trackers (such as Google Analytics, Meta Pixel, etc.).

Only strictly necessary cookies and technologies may be placed:

• Security and performance cookies related to Cloudflare hosting (e.g. bot protection, load balancing)
• Session local storage on certain internal tools (scoping forms, not publicly accessible in production)

These cookies do not require prior consent as they are essential for operation and security. If audience measurement or marketing tools are added in future, a cookie management banner will be implemented and this policy updated.

11. Security

Aldeak implements appropriate technical and organisational measures to protect your data against destruction, loss, alteration, disclosure or unauthorised access (secure hosting, restricted access, HTTPS encryption).

12. Complaint

If you believe processing of your data is not compliant, you may lodge a complaint with the CNIL: www.cnil.fr.

13. Changes

This policy may be updated. The last updated date appears at the top of the page.

14. Related links

Legal notice — Contact