What information to provide and how to make it accessible.
Privacy policy
What data we collect to handle your enquiry, how we use it and what rights you have.
Updated 2 November 2026Who processes your data?
Florent Pieplu EI, trading as DPE d’OC (SIRET 903 527 182 00039), is the data controller for enquiries. DPE Occitanie and Amiante Occitanie are two brands of the same business. To ask a question or exercise your rights, contact: dpedoc11@gmail.com · 06 80 35 31 84.
Business address: 7 chemin du Frigoulas, 11160 Caunes-Minervois. See our legal notice.
Information we ask for
The form collects the contact details needed to call you back, the property address and features, information about your plans and any details you choose to share. An email address is optional. Fields marked as required are needed to process the enquiry. The form cannot be submitted without them.
Only send documents and information relevant to your enquiry. Please do not include sensitive personal data. Submitting the form does not subscribe you to a newsletter.
Purpose and lawful basis
Preparing a quote and arranging the service are based on taking steps at the visitor’s request before entering a contract, and on performing the contract once concluded. Accounting records are processed to comply with legal obligations. Protecting the form against abuse is based on our legitimate interest in securing the service.
Google audience and advertising measurement relies on your consent. Your cookie choices do not constitute acceptance of a quote or consent to receive marketing.
How data is sent and who receives it
When you submit the form, your enquiry passes through a Netlify server function and then an authenticated relay hosted by OVHcloud. The relay submits it to the OVH email queue for delivery to DPE d’OC at dpedoc11@gmail.com. A submission confirmation means the OVH queue accepted the message. Delivery to the inbox can still fail.
The website does not store enquiry contents in an application database, a prospect file or a Netlify Forms dashboard. DPE d’OC keeps received messages in its email service, subject to the access and retention rules set by the business. Florent Pieplu, Netlify, OVHcloud and Google as the email provider each act in their respective roles. Information needed to manage a dispute or insurance claim may be shared with the insurer. We do not sell data to third parties.
Netlify delivers the website and runs the form function. OVHcloud provides the sending relay and hosts private files for abuse protection and aggregate counts. Although the OVH hosting is in France, some processing, including by Netlify or Google, may take place outside France or the European Economic Area. The providers publish their processing terms and the safeguards that apply to transfers. For information about how your enquiry is processed, contact DPE d’OC using the details in this policy.
Netlify privacy policy · Netlify data processing agreement · OVHcloud data protection · Google privacy policy.
Data retention
If an enquiry does not lead to business, DPE d’OC’s retention policy is to keep it for three years from the enquirer’s last contact. Billing data is kept for ten years. Records of inspection work are retained to meet the obligations that apply to each service and to defend legal rights in case of dispute. Contact DPE d’OC to find out which period applies to your records or to exercise your rights. The website does not automatically clear the mailbox.
The Netlify function receives the connection’s network address and passes it to the OVH relay solely to protect the form. The relay uses a private secret to generate an HMAC fingerprint. These application files do not store the raw IP address. The limits are five attempts per fingerprint in ten minutes and ten attempts in total per hour. Expired records are removed when a later request arrives. The rate-limit files are private and stored outside the public web directory.
These application safeguards are separate from the access and infrastructure logs managed by Netlify, OVHcloud and the email provider. Those logs may contain IP addresses and technical information. The providers’ settings and terms govern access to those logs and how long they are kept. The website does not disable or clear them.
Statistics on privacy choices
A counter independent of Google records acceptances, refusals and custom choices. Events pass through the Netlify function to the OVH relay. Only totals by UTC date and category are stored, in a private file outside the public web directory. The counter retains no visitor ID, form contents, page address, IP address or user agent. It counts decisions rather than unique visitors, and network errors or protective limits may reduce the totals.
Retention is limited to the latest 90 UTC dates. Older dates are removed when the next event arrives. Updates are locked while being written, and a private copy of the previous state allows recovery after an incident. The providers’ technical logs are separate from this counter.
External services
The interactive map loads OpenStreetMap map images as soon as it is displayed, regardless of your cookie choices. Its provider receives your IP address and the technical connection information needed to supply the map images. This does not enable Google Analytics or Google Ads. We do not request your location.
When you enter a postcode, the public service at geo.api.gouv.fr suggests towns or villages. It receives the postcode and technical connection data. It does not receive the name or telephone number you entered.
WhatsApp and Google are available through external links. The site does not embed a WhatsApp chat or Google reviews widget. If you open those links, you use the providers’ services under their privacy policies.
How to exercise your rights
Depending on the lawful basis and applicable conditions, you can ask for access, rectification, erasure or restriction of processing. You can object to certain processing and request data portability. You can withdraw consent for processing that relies on it.
Send your request to dpedoc11@gmail.com · 06 80 35 31 84. We may need to verify your identity proportionately if there is doubt. You can also lodge a complaint with the CNIL.
Google measurement and consent
On the configured production domain, Google Tag Manager runs Google Analytics 4 to measure site usage and Google Ads to measure enquiries from advertising. Both rely on your consent. Google tags for this setup load only after you agree to both ‘Analytics’ and ‘Advertising measurement’. The two services share one container, so consenting to one alone does not start Google measurement. You can reject both and still request a quote. Google tracking is disabled on previews and unauthorised domains.
The measured events are page views, clicks to call, use WhatsApp or request a quote, and successful server acceptance of a form submission. A click does not establish that a call or conversation took place. Server acceptance does not guarantee email delivery. Events use public canonical page URLs without query parameters or fragments, and predefined button locations. This setup does not send your contact details or form text to Google. Google may process technical connection information and pseudonymous browser identifiers, which are not anonymous. This setup does not use personalised advertising or enhanced conversions.
Measurement and cookie retention periods
Your consent choice is saved for 180 days, after which you will be asked again. This period is separate from the lifetime of Google cookies and the retention of data in Analytics. Analytics cookies last 180 days and can be renewed on visits for which you have consented, so they can last longer than 180 days from your first visit.
In Analytics, event data is retained for 2 months and user data for 14 months, with the latter period resetting on each new activity. These periods do not apply to standard aggregate reports and do not describe cookie lifetimes.
Google and data transfers
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, provides the services in the EEA. Other Google entities and providers may be involved, including outside the EEA. Where the site is hosted does not determine where this data is processed. Google identifies adequacy decisions and standard contractual clauses among its transfer mechanisms. The documents below explain those mechanisms and Google’s commitments.
Google Privacy Policy · How Google uses data from partner sites · Google Data Processing Terms · Google’s data transfer safeguards.
The official sources,
explained.
Official sourcesService Public · Légifrance · CNIL
How to set retention periods and apply them to the relevant processing.