Privacy notice

Lu Gd, trading as LG, at Rue de la Préfecture, 21000 Dijon, France, is responsible for the directory’s processing. Contact [email protected] or use the personal data contact form.

The operator is established in France and observes the GDPR and applicable French data-protection law. Australia's Privacy Act 1988 and Australian Privacy Principles apply where their scope and Australian-link requirements are met. The small-business definition generally concerns annual turnover of A$3 million or less, with important exceptions. Trading in personal information for a benefit can bring a business within the Act unless the relevant consent or legal-authorisation exception applies. Other exceptions and the Australian-link test must be considered. This service does not claim a blanket exemption based on turnover or its French address. A supplier receiving information is responsible for its subsequent processing. See the OAIC guidance on the Australian Privacy Principles.

Australian scope and retention references checked on 2 October 2026: Privacy Act 1988, sections 5B and 6D (compilation of 4 June 2026), OAIC small-business guidance, and APP 11 guidance on security and destruction or de-identification. These explain legal requirements; they do not certify this service or establish an Australian storage location.

The form collects your contact name, company where relevant, email, optional telephone number, delivery postcode and, where provided, state or territory and city, and the details needed to understand the proposed purchase or rental. The originating page, supplier profile and selected search criteria may accompany the request.

The purpose is to review your project and prepare a response. The form asks for your agreement to save and review the request privately. Sending the form does not give permission to circulate your contact details to businesses. Any proposed further sharing will be explained, and any required authorisation obtained, before it happens. You may withdraw consent for future consent-based processing by contacting the operator. This does not undo prior lawful processing.

This enquiry processing relies on the consent requested in the form. You are not legally required to submit an enquiry. Required fields are needed to handle it; without them we cannot process the request, but you can still browse the directory.

Shop catalogue enquiries are received by the site operator, with the selected model, quantity and any colour preference. They do not place an order or take payment and are not automatically sent to the supplier network. Any further sharing needed to prepare a quotation will be explained before it happens, as stated on the shop enquiry form.

Quotation requests are saved on this site's private server for handling by authorised administrators. The dedicated Australian supplier-directory request form stores its request privately and does not automatically send it to a listed supplier or an external quote-management service. External quote-management forwarding is currently disabled for this edition.

Requests submitted through the documented agent interface are stored privately on this service only. That interface does not send a copy to suppliers, email or an external quote-management service. Any further sharing must be explained separately before it happens.

The directory team receives and stores the request privately, reviews the project and may contact you. Sharing with a supplier requires a separate explanation of who will receive the information and why, together with any authorisation required for that sharing.

Technical providers supporting storage, delivery of messages and email may process the request for the operator. Being listed does not automatically assign an enquiry to a supplier, and the local form does not authorise an automatic transfer to another network.

Contact details accompanying a project enable a reply to that enquiry; they do not subscribe you to unrelated advertising. Details already sent to a supplier remain subject to that supplier’s notice and your applicable rights.

Public directory inclusion does not enrol a business in a lead-distribution service. If paid introductions are introduced, payment will not remove applicable privacy duties. The operator must assess any sharing against the laws covering its activities, explain recipients and purposes, and obtain any required consent. Contact the operator to withdraw permission for future consent-based sharing or request access, correction or deletion where available.

The preparation checklist runs in your browser. Creating, copying or downloading it does not send your selections to a provider and does not establish an authority's approval.

A separate assisted research tool is available only when configured. Starting research voluntarily sends your state or territory, suburb or town, named council or territory authority if known, proposed use, permanence and construction arrangement to this server and the configured OpenAI research service. It requests no street address, owner identity, contact details or documents. The request uses the provider's API with response storage disabled; this setting does not promise that all provider security or operational logs are disabled. Provider processing and locations must be assessed before enabling the service.

Official cited passages and a validated result may be cached privately for up to six hours; the original research date is preserved. Expired evidence is removed during the next cache operation. Private operator erasure can clear research proofs while preserving quota counters and active-work limits. Contact the operator to request review or erasure of a cached research record, identifying the location and project facts rather than sending sensitive land or identity documents. A suggested URL or accepted government domain does not establish that a source was read. Findings do not determine permission or exemption for a property.

The contact form collects a name, email, subject, message and optional affected page. These are stored privately to respond, resolve service issues and correct inaccurate information. Under EU law, service follow-up relies on the operator’s legitimate interests; data rights requests are handled to meet applicable legal obligations. Where Australian privacy law applies, the operator also observes its collection, notice, use and disclosure requirements; an EU legitimate-interest basis does not replace those duties.

A support ticket is not published or sent to suppliers as a sales enquiry. Keep passwords, identity documents and unnecessary sensitive information out of free-text fields. Retention lasts as long as needed for handling, follow-up and any identified dispute or legal requirement.

Review submissions contain a public pseudonym, rating, account of the experience, experience date and private email. The form asks for consent to moderation and publication under the pseudonym. After moderation, the review, pseudonym and relevant dates may be published. Email addresses are not published. A review awaiting moderation does not enter the displayed average. You can withdraw your consent by contacting the operator.

Public business details come from company websites, public registers and approved changes submitted by representatives. Registered business information does not establish a trading depot. External platform ratings, where used, are identified separately with their platform and checking date.

Where business information identifies an individual, the operator’s EU-law basis is its legitimate interest in maintaining accurate professional information. Publicly accessible information can still be personal information; being online does not establish unrestricted permission to reuse it. Contact us to correct details, object or request removal, identifying the profile. Requests are assessed under the applicable law.

An account uses your name, email and password; the server stores a password hash. A session cookie maintains authentication. Profile-management requests include your role and evidence that you can represent the business. The applicant and validation team can see this material; it is not published as profile content.

Email confirmation and password recovery are available only when the dedicated account-email service is configured. The server stores a hash of each single-use token, its purpose and expiry. Confirmation links are valid for 24 hours and recovery links for 30 minutes. Redeeming a valid recovery link revokes prior account sessions; it does not grant profile-management permission or verify ownership of a business. The email delivery provider processes the account email and the account link when this service is enabled. Link validity expiry does not itself promise automatic deletion of every security record.

Saving a draft or uploading a photograph sends it to the directory’s server before publication is requested. Public descriptions, contacts, services, coverage, photographs and captions appear only after approval. Access and change history supports the management of editing rights.

Necessary account and profile-management operations support performance of the service you request. Security and access-history processing relies on the operator’s legitimate interest in protecting accounts and preventing unauthorised changes. Contact the team with your account email and profile reference to request correction or deletion, subject to any justified retention for security or disputes.

The current directory does not use advertising cookies, social pixels or third-party advertising trackers. Authentication uses a session cookie where you sign in. Quotation, contact and review fields are submitted when you send the form, rather than streamed as you type.

With your optional consent, browser page views and form openings are counted to improve this site. Counts are aggregated by day and page without a visitor identifier or individual browsing history. These are not unique-visitor counts. The counters do not retain contact details, IP addresses or URL parameters. Do Not Track and Global Privacy Control keep browser measurements off. You can withdraw this optional consent using the controls below.

The same optional choice also allows snapshots of page loading, response to interactions and layout stability (LCP, INP and CLS), counted when a page first goes into the background. The browser sends a recognised public page path, metric value and a broad viewport category (under 768 pixels or wider). The server retains only daily counts of performance ratings by page, metric and category; it does not retain individual values, visitor or metric identifiers, exact screen sizes, URLs with search criteria, page elements or form content. Older performance counts are deleted on the next observation after 90 days. Collection covers full page loads that stay on that page, and may be incomplete when a browser does not support a metric. Later changes after reopening a tab do not update its first snapshot.

A separate operational counter may record a successfully received enquiry by day and page to administer the service. It contains no contact details or visitor identifier and is distinct from optional browser measurements. Servers necessarily receive network information to deliver pages; any hosting or security logs are separate from the anonymous counters.

Search criteria may appear in page URLs. The browser-based site facilities checklist runs locally. Business-account drafts and photo uploads are separate actions which send content to the server.

New tracking or data uses require an assessment of the applicable privacy laws and appropriate notice and consent. Consent to a quotation request is separate from optional audience measurement or unrelated marketing.

Commercial electronic messages with an Australian link must comply with the Spam Act 2003 where applicable, including consent, sender identification and a working unsubscribe mechanism. Telephone marketing has separate rules. A project response does not subscribe you to unrelated marketing. See ACMA's spam guidance.

The processing arrangements below distinguish this running service from optional or planned providers:

• Hostinger International Limited is the confirmed deployment hosting provider. The provider's registered address is 61 Lordou Vironos Street, 6023 Larnaca, Cyprus; that address does not identify the server region. A local preview still runs on its local machine.
• Cloudflare provides the confirmed reverse proxy and security service, processing network and request information separately from optional page counters.
• Resend delivers website quotation and contact-form notifications to the operator when the corresponding email notifications are enabled. A notification may contain your contact details, message and its reference. These are service messages, not a subscription to advertising.
• Optional account email and assisted research: Resend receives account emails and single-use account links when the dedicated confirmation/recovery service is enabled. OpenAI receives only the location and project facts listed above when assisted research is configured and you start a search. These are separate configurations; availability in the interface does not establish an Australian processing location.
• Proton Mail, operated by Proton AG, provides the operator's mailbox at [email protected] for receiving and answering correspondence.

Processing by the French operator and enabled providers may take place outside Australia. Where the Australian Privacy Principles apply, cross-border disclosure must also be assessed under APP 8. Contact the operator for the recipients, locations and safeguards applying to your information. A provider’s registered address alone does not establish its server or backup locations.

Information processed abroad may be accessible under the laws of those jurisdictions. For transfers subject to the GDPR, the operator must establish an applicable transfer mechanism, such as a relevant adequacy decision or appropriate contractual safeguards, and assess any additional measures required. A provider’s brand or Australian address alone does not establish that a transfer mechanism applies. No Australia-only storage location is promised.

Quotation details are kept for the handling and follow-up of the request and any identified dispute or legal requirement. The general quotation store has a manual review tool for records older than three years after the last exchange; changing a processing status does not restart that period. The separate supplier-directory request store requires operator review and deletion. No automatic three-year deletion is currently running. You may request earlier erasure where your rights apply. Three years is an internal review criterion, not a universal Australian legal deadline. Technical diagnostics record the request reference and date without copying its contents, contact details or postcode.

For reviews, the retention criteria are the period of publication and the need to moderate, investigate authenticity or handle a dispute. For business accounts, drafts and representation evidence, the criteria are the account's active use, the continuing editing authorisation and any necessary security or dispute follow-up. Information no longer needed for these purposes should be erased; a justified legal hold may delay deletion.

This enquiry service does not complete purchases or take payment. If you later contract with a supplier, that supplier must explain the records needed for its contract, tax and accounting obligations. Those records are separate from the directory's enquiry record.

Enquiry retention is managed by the operator through a manual review and deletion procedure, based on the last actual exchange with you. A change of processing status does not restart this period.

Deletion also requires review of related correspondence, exports and copies held by enabled providers. The local application does not delete remote provider or backup copies automatically; any backup cycle and justified legal hold must be assessed separately. Suppliers that have received an enquiry manage their own copies and applicable retention obligations.

Contact [email protected] or the personal data form for access, correction, withdrawal of consent, an objection or deletion where the applicable law provides it. Include the request reference or profile so the record can be located. GDPR rights can also include restriction and portability, subject to their conditions.

For GDPR requests, the operator responds without undue delay and normally within one month; a justified extension is explained within that period. Australian requirements depend on the law covering the processing. Complaints should first be raised with the operator; see the OAIC privacy complaint process for its scope and steps. You may also contact the French CNIL.

Processing arrangements updated on 3 October 2026. Official privacy references retain the checking dates stated above.