Privacy Policy

1. Data Controller

Les Remarquables
144 rue Paul Bellamy, 44000 Nantes, France
Email: contact@my-lodge.com
Website: my-lodge.com

2. Data Collected

When using My Lodge, we collect the following data:

Identification data: name, first name, email address, username
Connection data: IP address, login timestamp, session identifiers
Usage data: application interactions, features used, technical logs
Billing data: information necessary for payment processing (handled by Stripe, PCI DSS Level 1 certified — My Lodge never stores your payment details)
Communication data: messages exchanged via the application's messaging system (encrypted at rest and in transit)

We never collect sensitive data (religion, political opinions, health data) beyond information you freely choose to share within your Lodge.

3. Purposes of Processing

Your data is processed for the following purposes:

• Service provision: account management, access to application features
• Billing and payment: subscription processing and invoice generation
• Communication: sending notifications, update information, and technical support
• Service improvement: anonymized audience analysis (Google Analytics), bug fixes
• Legal obligations: compliance with accounting, tax, and regulatory requirements

4. Legal Basis for Processing

Processing of your data is based on the following legal grounds:

• Contract performance: for providing the Services you have subscribed to
• Legitimate interest: for improving our services and platform security
• Consent: for analytical cookies and marketing communications
• Legal obligation: for compliance with accounting and tax obligations

5. Data Retention

We retain your personal data for the following durations:

• Active account data: for the duration of your subscription + 3 years after termination
• Billing data: 10 years (legal accounting obligation)
• Connection logs: maximum 12 months
• Analytical cookies: maximum 13 months (as recommended by the CNIL)

6. Your Rights

Under GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right of rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data ("right to be forgotten")
• Right to portability: receive your data in a structured, machine-readable format
• Right to object: object to processing of your data for legitimate reasons
• Right to restriction: request temporary suspension of processing

7. Cookies and Trackers

My Lodge uses the following types of cookies:

Technical cookies (essential):
These cookies are necessary for the website to function and cannot be disabled. They include session, authentication, and language preference cookies.

Analytical cookies (with your consent):
We use Google Analytics to measure audience and improve user experience. These cookies collect information anonymously and are only placed after your explicit consent via the cookie banner.

You can change your cookie preferences at any time by clearing your browser data or contacting our support team.

8. Data Security

We implement the following technical and organizational measures to protect your data:

• Encryption at rest (AES-256 via Google Firebase) and in transit (TLS 1.3)
• Firebase infrastructure (Google Cloud Europe) certified SOC 2, ISO 27001 and GDPR compliant
• Secure authentication via Google Auth (Firebase Authentication)
• Human vetting: each member is manually validated by an administrator
• Strict access control to data by our team
• Regular backups and business continuity plan