Privacy Policy

Effective as of April 1, 2026

1. Introduction

This Privacy Policy is intended to inform users of the J'adore Ma Loc platform (hereinafter "the Platform"), accessible at jadoremaloc.com and via the mobile application available on the App Store and Google Play (hereinafter collectively "the Platform"), about how their personal data is collected, processed, and protected.

The Platform is published by MP CONSEIL, a simplified joint-stock company (SAS) with a share capital of €2.00, registered with the Paris Trade and Companies Registry under number 940 057 680, with its registered office at 60 rue François Ier, 75008 Paris, France (hereinafter "the Data Controller").

MP CONSEIL is committed to complying with Regulation (EU) 2016/679 of April 27, 2016 (General Data Protection Regulation — GDPR) as well as French Law No. 78-17 of January 6, 1978, as amended, relating to information technology, files, and civil liberties.

2. Data Controller

  • Company name: MP CONSEIL
  • Legal form: SAS with a share capital of €2.00
  • Registered office: 60 rue François Ier, 75008 Paris, France
  • SIREN: 940 057 680
  • Legal representative: Pierre Cazenave De Lacaussade, President
  • DPO contact: contact@jadoremaloc.com

3. Personal Data Collected

In the course of using the Platform, we collect various categories of personal data:

3.1 Data provided directly by the User

  • Identification data: last name, first name, email address, phone number
  • Housing-related data: property address, lease information, property identifier
  • Request data: subject and content of maintenance requests, attachments (photos, documents)
  • Communication data: messages exchanged through the Platform

3.2 Data collected automatically

  • Connection data: IP address, date and time of connection
  • Browsing data: browser type and version, operating system, pages viewed, visit duration
  • Cookie data: session identifiers, display preferences
  • Mobile device data: device model, operating system version, unique device identifier, push notification token

3.3 Data transmitted by partner Agencies

  • Lease information (dates, rent amount, charges)
  • Tenant contact details for Account creation
  • Property information (energy performance certificate, energy type, surface area, etc.)

3.4 Subscription and commission data

  • History of offers viewed and subscriptions made through the Platform
  • Commission amounts generated (for partner Agencies)

4. Purposes and Legal Bases for Processing

PurposeLegal basis (GDPR)
Creation and management of the User AccountPerformance of a contract (Art. 6.1.b)
Processing maintenance requestsPerformance of a contract (Art. 6.1.b)
Connecting Tenants with AgenciesPerformance of a contract (Art. 6.1.b)
Sending service-related notificationsPerformance of a contract (Art. 6.1.b)
Offering partner dealsConsent (Art. 6.1.a)
Conversion tracking and affiliation commission attributionConsent (Art. 6.1.a)
Platform improvement and statisticsLegitimate interest (Art. 6.1.f)
Security and fraud preventionLegitimate interest (Art. 6.1.f)
Compliance with legal obligationsLegal obligation (Art. 6.1.c)

5. Data Recipients

Your personal data may be shared with the following categories of recipients:

  • Partner real estate agencies: for the management of your requests and your rental relationship
  • Commercial partners: only with your prior consent, to offer you deals and benefits (energy providers, telecom operators, partner brands)
  • Affiliation networks and comparison services: Awin and other affiliation platforms, energy comparison services (Selectra and equivalents), for the purpose of conversion tracking and commission attribution
  • Technical subcontractors: hosting providers (Vercel, Supabase), transactional email delivery services (Resend Inc.), audience analytics providers, acting on behalf of MP CONSEIL and in compliance with the GDPR
  • Competent authorities: in case of legal obligation or judicial requisition

MP CONSEIL does not sell or transfer your personal data to third parties for commercial purposes.

6. Data Transfers Outside the European Union

Some of our technical subcontractors are located outside the European Union, including:

  • Vercel Inc. (United States) — website hosting
  • Supabase Inc. (United States, EU servers) — application data hosting on servers located within the European Union (eu-west region)
  • Resend Inc. (United States) — transactional email delivery (notifications, callback requests)

These transfers are governed by appropriate safeguards in accordance with the GDPR: Standard Contractual Clauses (SCCs) approved by the European Commission and/or adherence to the EU-US Data Privacy Framework. You may obtain a copy of these safeguards by contacting us at contact@jadoremaloc.com.

7. Data Retention Period

Your personal data is retained for the period strictly necessary for the purposes for which it was collected:

  • Account data: for the duration of registration, then 3 years after Account deletion or last activity
  • Maintenance request data: for the duration of the relevant lease, then 3 years from the closure of the request
  • Connection data: 13 months in accordance with CNIL recommendations
  • Marketing data: 3 years from the last contact or last activity
  • Billing data: 10 years in accordance with accounting and tax obligations
  • Cookies: 13 months maximum

Upon expiration of these periods, data is deleted or irreversibly anonymized.

8. Cookies

8.1 Strictly necessary cookies (exempt from consent)

These cookies are essential for the operation of the Platform and cannot be disabled:

  • Session cookie: authentication and secure connection maintenance
  • Preferences cookie: storing your display settings
  • Security cookie: CSRF attack protection

8.2 Audience measurement cookies (subject to consent)

Where applicable, audience measurement cookies may be used to analyze Platform traffic and usage. These cookies are anonymized in accordance with CNIL recommendations and are only placed with your consent.

8.3 Affiliation and conversion cookies (subject to consent)

When you access a Partner offer through the Platform, affiliation cookies may be placed by third-party affiliation networks (including Awin and its partners) or by comparison services (Selectra and equivalents). The purposes of these cookies are:

  • Tracking conversions (subscriptions, purchases) made through the Platform
  • Attributing affiliation and intermediation commissions

The lifespan of these cookies varies by partner (typically between 7 and 30 days). These cookies are only placed with your prior consent and you may refuse them without affecting your access to the Platform.

8.4 Cookie management

You can manage your cookie preferences at any time through your browser settings. Disabling certain cookies may affect your experience on the Platform.

9. Data Security

MP CONSEIL implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of data at rest
  • Strict access control to data
  • Secure authentication
  • Access logging
  • Regular backups

10. Your Rights

In accordance with the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR): obtain confirmation that your data is being processed and receive a copy
  • Right to rectification (Art. 16 GDPR): have your inaccurate or incomplete data corrected
  • Right to erasure (Art. 17 GDPR): request the deletion of your data, subject to legal retention obligations
  • Right to restriction (Art. 18 GDPR): obtain the restriction of processing in certain cases
  • Right to data portability (Art. 20 GDPR): receive your data in a structured, commonly used, and machine-readable format
  • Right to object (Art. 21 GDPR): object to the processing of your data on legitimate grounds
  • Right to withdraw consent: withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal

10.1 How to exercise your rights

You may exercise your rights by sending a request, accompanied by a copy of a proof of identity, by email to: contact@jadoremaloc.com

Or by mail to:

MP CONSEIL — Data Protection
60 rue François Ier
75008 Paris, France

We are committed to responding to your request within one month of receipt. This period may be extended by two months in the case of complex requests or a high number of requests.

10.2 Complaint to a supervisory authority

If you believe that the processing of your personal data constitutes a violation of the GDPR, you have the right to lodge a complaint with the French Data Protection Authority (CNIL):

11. Minors

The Platform is not intended for persons under 16 years of age. If we learn that personal data of a minor under 16 has been collected without the consent of the holder of parental authority, we will take the necessary steps to delete such data.

12. Changes to this Privacy Policy

MP CONSEIL reserves the right to modify this Privacy Policy at any time. In the event of a substantial change, Users will be informed by notification on the Platform or by email. The date of the last update is indicated at the bottom of this page.

13. Contact

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us:

Last updated: April 2026