Privacy policy

Article 1: Preamble

This privacy policy applies to the website www.tortuelodge.com, published by TORTUE LODGE.

Its purpose is to inform users of the site about:

the personal data collected and how it is processed;
their rights over this data;
the identity of the controller;
the recipients of this data;
the use of cookies on the site.

It supplements the legal notice (mentions légales), available at www.tortuelodge.com/mentions-legales/.

Article 2: Controller

The data controller (responsable du traitement) is TORTUE LODGE, an SARL with share capital of 5,000 euros, SIRET 977 561 869 00016, whose registered office is at 10 route de Nibelle, 45530 Sury-aux-Bois.

For any question about your personal data, or to exercise your rights, you can contact us:

by email: yulangerre@gmail.com;
by post: TORTUE LODGE, 10 route de Nibelle, 45530 Sury-aux-Bois;
via the contact form on the site.

Article 3: Data collected, purposes and legal bases

1. Contact or appointment request

When you fill in the contact form, we collect: your surname, first name, email address, phone number, the model you are interested in, the situation of your land and your message.

Purpose: to respond to your request and, where applicable, arrange an appointment.

2. Tiny house configurator

When you use the configurator and send your project, we collect: your contact details (surname, first name, email address, phone, postcode, town) and the answers you chose (type of project, model, fittings and options, land, timescale, intended budget).

Purpose: to study your project and get back in touch with you to discuss it or draw up a quote.

3. Associated technical information

With each request, we record the page from which it was sent, the source of your visit if it is indicated in the link address (“utm” parameters), as well as the date and the version of the consent text you accepted.

Purposes: to prove your consent, and to know how our visitors heard about us.

To protect the forms against abusive submissions, your IP address is used temporarily to limit the number of submissions. It is not stored with your request.

Legal basis

This processing is based on your consent, given by ticking the box provided for this purpose before sending the form. No box is ticked by default. You can withdraw your consent at any time (see Article 7).

We only collect the data needed to handle your request. Mandatory fields are marked in the forms.

Article 4: Retention period

Data relating to your requests is kept for 2 years from our last exchange, then deleted. If you become a client, the data needed to perform the contract and to meet our accounting and legal obligations is kept for the periods laid down by law.

The host’s technical logs (see Article 5) are kept for a limited period, for security purposes and to keep the site running properly.

Article 5: Recipients and hosting of the data

Your data is intended solely for the people at TORTUE LODGE responsible for handling your request. It is not sold, rented or transferred to third parties.

The site and its data are hosted by:

Railway Corporation
548 Market St PMB 68956, San Francisco, CA 94104, United States
railway.com

The data is stored in a data centre located in the European Union (Amsterdam, Netherlands). Railway acts as a processor (sous-traitant) and only accesses the data in order to provide the hosting service. As Railway is an American company, access from the United States cannot be ruled out. This transfer is governed by a data processing agreement based on the European Commission’s standard contractual clauses and on the EU–US data protection framework (Data Privacy Framework).

Article 6: Security

We implement appropriate technical and organisational measures to protect your data:

encrypted connection (HTTPS) across the whole site;
database accessible only from the host’s private network;
access to the administration area limited to authorised persons, with named accounts;
encrypted backups.

In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify the CNIL and, if necessary, the persons concerned, under the conditions laid down by the General Data Protection Regulation (GDPR).

Article 7: Your rights

In accordance with the GDPR (European Regulation 2016/679) and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:

right of access: to know what data we hold about you and obtain a copy of it;
right to rectification: to have inaccurate data corrected;
right to erasure: to request the deletion of your data;
right to withdraw your consent at any time, without affecting the processing carried out before the withdrawal;
right to restriction of processing and right to object;
right to data portability: to receive your data in a structured, commonly used format;
right to set instructions on what happens to your data after your death (Law No. 2016-1321 of 7 October 2016).

To exercise these rights, contact us using the means indicated in Article 2. We will reply within one month at most. This period may be extended by two months for complex requests, in which case you will be informed. We may ask you to prove your identity if there is reasonable doubt.

If you believe that your rights are not being respected, you can lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés, the French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

Article 8: Cookies

The site does not use any advertising or audience measurement cookies. No tracker is placed on your device when you browse the site.

Only the administration area, reserved for the TORTUE LODGE team, uses a cookie that is strictly necessary for authorised users to log in.

If we introduce an audience measurement tool, it will only be activated with your prior consent, collected through a dedicated banner, and this policy will be updated accordingly.

Article 9: Minors

The site is intended for adults. In accordance with Article 8 of the GDPR and the French Data Protection Act, a minor under 15 cannot consent alone to the processing of their data: the agreement of their legal representative is required.

Article 10: Changes to the privacy policy

We may amend this policy to adapt it to changes in the site or in regulations. The version in force is always the one published on this page. In the event of a significant change, a notice will be displayed on the site.

Last updated: 21 September 2026.