Privacy policy

Data controller

Your data is processed under the responsibility of BTPNE, which runs the ExpertCafard brand from its registered office at 8 Bis rue de la Côte d'Or, 94500 Champigny-sur-Marne, France. Any question about it? Write to contact@expertcafard.com.

Call-back, quote and contact requests

The site's forms collect whatever you choose to enter: your name, phone number, e-mail, postcode or address, the pest you have seen, the kind of place (home or business premises), its floor area, how urgent it is, your company name if you are a business, and your message.

We use this to answer you, call you back and send you an offer, and for nothing else. The legal basis is the pre-contractual steps you ask us to take (Article 6(1)(b) GDPR).

Online booking and payment

When you book, we record your contact details, the address where we will work, the service, floor area, number of visits and the day and slot you picked. This is needed to perform the contract (Article 6(1)(b) GDPR) and to keep our accounts, which is a legal obligation (Article 6(1)(c)).

To avoid address mistakes, what you type is checked against the Base Adresse Nationale, a French government service. Our server sends it the address wording only.

Payment goes through Stripe (Stripe Payments Europe, Ltd., Ireland), our payment provider. You enter your card directly in Stripe's secure interface: the number never passes through our systems and we do not keep it. Stripe only tells us whether the payment succeeded and sends you your receipt.

Service e-mails and review invitations

Messages linked to your request or booking — acknowledgement, appointment confirmation, photo report of the visit — are sent through Brevo (Sendinblue SAS, France), which acts on our behalf as a processor.

After the visit, we may invite you by e-mail to share your experience on Google. This relies on our legitimate interest in hearing from customers; just tell us and you will not receive it again. A review you post on Google is then subject to Google's own privacy rules.

We send no marketing newsletter and never sell your data.

Filtering automated submissions

To keep bots out, our forms use Altcha: your browser solves a small computation before sending. It sets no cookie, does not identify you from one site to the next and calls no outside tracking service. It relies on our legitimate interest in protecting the site.

Visit statistics and trackers

No advertising cookies are used on the site. If Google Analytics 4 audience measurement (Google Ireland Ltd.) is active, it only loads once you have accepted it in the consent banner; only then are the _ga and _ga_* cookies set. The legal basis is your consent (Article 6(1)(a) GDPR).

Your answer to the banner, yes or no, is remembered in your browser's local storage under the name "xc_analytics_consent". To change your mind, delete that entry in your browser settings: the banner will show again on your next visit.

Only the administration area, open to our team alone, uses a purely technical cookie.

Who can access your data

Internally, only the people who need it — phone reception and technicians — see your data. The following also act on our behalf:

• Stripe, to collect payments;
• Brevo, to deliver service e-mails;
• Google, for visit statistics, only if you accepted them;
• our web host, to run the site and keep technical security logs.

Data sent outside the European Union

Stripe and Google may route some data through the United States. These transfers rely on the EU–US Data Privacy Framework where the receiving company has joined it, and otherwise on the standard contractual clauses adopted by the European Commission.

How long we keep it

• Call-back, quote or contact request that led nowhere: 3 years after our last exchange.
• Customer file (bookings, visit reports): for the whole business relationship, then 5 years, the limitation period for civil claims.
• Invoices and accounting records: 10 years, as the French Commercial Code requires.
• Card details: not kept on our side; Stripe keeps them under its own obligations.
• Your choice in the consent banner: in your browser, until you delete it.
• Visit statistics: 14 months at most in Google Analytics.

Your rights

At any time you can see your data, have it corrected or erased, restrict its use, object to its processing or receive it in a reusable format. You can also withdraw consent you have given and say what should happen to your data after your death.

Send your request to contact@expertcafard.com or by post to BTPNE, 8 Bis rue de la Côte d'Or, 94500 Champigny-sur-Marne, France. We reply within one month. If there is reasonable doubt about your identity, we may ask for proof.

Complaining to the CNIL

If you feel your data is not being handled properly, you have the right to lodge a complaint with the French data protection authority, the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr/fr/plaintes.

Security measures

Every page is served over HTTPS. Access to data is limited to the people who use it, and payments are handled by a PCI DSS-certified provider.

Changes to this policy

We will update this text if our services or providers change. The date of the latest version is shown at the top of the page.