Privacy policy

This policy explains the processing of personal data relating to sellers, partner professionals and visitors in accordance with the GDPR and French data-protection law.

1. Data controller

The controller is Ligokero, Alexis du Repaire EI, founder and operator, whose details appear in the legal notice. Contact: privacy@ligokero.com.

2. Data collected

• Identity and contact: name, email, telephone, city, postcode and, for partners, professional identity and address.
• Item: category, brand, model, condition, accessories, photographs and general area.
• File: reference, communications, proposals, appointments, progress and transaction declarations.
• Contract and billing: signed mandate or agreement, signature evidence, prices, items, commissions, invoices and supporting records.
• Technical data: IP address, security logs, anti-bot data and email deliverability data.
• Attribution and audience: landing page and campaign parameters; any future audience statistics will be collected only after consent.

3. Purposes and legal bases

• Handling the request, establishing the mandate, consulting partners, presenting proposals, arranging the appointment and following the sale: pre-contractual steps and performance of the contract (art. 6.1.b GDPR).
• Managing partners and performing their agreements: pre-contractual steps and performance of the contract.
• Issuing and retaining accounting records: legal obligation.
• Securing the service and preventing abuse: legitimate interest.
• Producing statistics, improving the service and developing market intelligence: legitimate interest. Shared indicators are aggregated or anonymised only and exclude names, contact details, identifiable photographs, precise addresses and file references. They are not shared where granularity is insufficient. You may object while the data remains personal; irreversibly anonymous statistics may be retained.
• Newsletter, optional cookies and future audience measurement: consent, withdrawable at any time.

Sharing strictly required to provide the service is not based on compulsory consent, but on requested pre-contractual steps and performance of the mandate. Ligokero cannot process a request without essential data.

4. Progressive disclosure to professionals

Before selection, consulted professionals receive the item sheet, photographs and a general area, without the seller's direct contact details. After selection and introduction, the selected professional receives only the contact details required to arrange and complete the appointment. After a sale, the data needed for follow-up is exchanged: prices, items, commissions and supporting records.

The selected professional acts as an independent controller for its own processing, including appraisal, purchase, regulatory duties and accounting. Data is never sold or rented.

5. Technical providers

• Secure cloud infrastructure (servers located within the European Union): database hosting, authentication and private storage of photographs and documents.
• Cloudflare and Turnstile: DNS, delivery, performance, security and anti-bot protection.
• Ligokero electronic signature: mandates and agreements are signed directly on the Ligokero platform, with no third-party provider; signature evidence (timestamp, document fingerprint) is stored on the infrastructure described above.
• Resend: email sending and deliverability.
• Stripe: payment processing; Stripe acts as an independent controller for banking data, which Ligokero cannot access.
• API Adresse by data.gouv.fr: geocoding of locations provided.
• Google Analytics 4 / Google Ireland Limited: audience measurement and traffic statistics, loaded only after consent through the cookie banner.
• Google Ads / Google Ireland Limited: conversion measurement and advertising campaign attribution, subject to prior consent.

6. Transfers outside the European Economic Area

Some providers may process data outside the European Economic Area. Depending on the provider, transfers rely on an adequacy decision, the EU–US framework, European Commission standard contractual clauses or another appropriate safeguard. For Google services, Google Ireland Limited relies on the EU–US Data Privacy Framework and European Commission standard contractual clauses. You may request a copy or information about these safeguards from privacy@ligokero.com.

7. Cookies and communications

Strictly necessary technologies operate without consent. The newsletter, audience measurement and advertising measurement require separate consent. Choices may be changed at any time; see the cookie policy.

8. Retention periods

• Request without a mandate: 3 years after the last contact.
• Private photographs: 12 months after the file closes, then deletion; operational access uses temporary signed URLs.
• File with mandate, offers and signature evidence: 5 years after the contractual relationship ends.
• Invoices and accounting records: 10 years after the financial year ends.
• Partner files: the relationship, then 5 years.
• Newsletter: until consent is withdrawn, and no more than 3 years without interaction.
• Technical and security logs: 12 months maximum.
• Cookie choice: 6 months maximum; any optional tracker will not exceed 13 months.

At expiry, data is deleted or irreversibly anonymised. Statistics anonymised in this way may be retained.

9. Security

Ligokero applies measures suited to the risks, including restricted back-office access, strengthened authentication and private storage of photographs accessed operationally through temporary signed links.

10. Your rights

You have rights of access, rectification, erasure, restriction, objection and portability, the right to withdraw consent where relevant, and the right to issue post-mortem instructions. Write to privacy@ligokero.com; a response will be provided within the statutory period.

You may lodge a complaint with the CNIL, www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.