Privacy notice

Lu Gd, trading as LG, at Rue de la Préfecture, 21000 Dijon, France, is responsible for the directory’s processing. Contact [email protected] or use the personal data contact form.

The operator is established in France, so the GDPR and applicable French data-protection law govern its processing. US federal and state requirements also apply where their territorial, business and processing conditions are met. State consumer-privacy laws have different coverage thresholds and exemptions; browsing this US edition does not itself establish that every state statute applies. A supplier receiving information is responsible for its subsequent processing.

The form collects your contact name, company where relevant, email, optional telephone number, delivery ZIP code, state and city, and the details needed to understand the proposed purchase or rental. The originating page, supplier profile and selected search criteria may accompany the request.

The purpose is to handle your project and seek suitable quotations. The form asks for your agreement before submitting and sharing the request as described there. You may withdraw consent for future consent-based processing by contacting the operator. This does not undo prior lawful processing.

This inquiry processing relies on the consent requested in the form. You are not legally required to submit an inquiry. Required fields are needed to handle it; without them we cannot process the request, but you can still browse the directory.

Shop catalog inquiries are received by the site operator, with the selected model, quantity and any color preference. They do not place an order or take payment and are not automatically sent to the supplier network. Any further sharing needed to prepare a quotation will be explained before it happens, as stated on the shop inquiry form.

Quotation requests are saved on this site's private server for handling by authorized administrators. The dedicated US supplier-directory request form stores its request privately and does not automatically send it to a listed supplier or an external quote-management service. External quote-management forwarding is currently disabled for this edition.

Requests submitted through the documented agent interface are stored privately on this service only. That interface does not send a copy to suppliers, email or an external quote-management service. Any further sharing must be explained separately before it happens.

The directory team receives and stores the request privately, reviews the project and may contact you. With the agreement given in the form, it may share the necessary details and contact information with professionals consulted for a response.

Technical providers supporting storage, delivery of messages and email may process the request for the operator. Being listed does not automatically assign an inquiry to a supplier, and the local form does not authorize an automatic transfer to another network.

Contact details accompanying a project enable a reply to that inquiry; they do not subscribe you to unrelated advertising. Details already sent to a supplier remain subject to that supplier’s notice and your applicable rights.

Professionals may pay the directory for introductions. Where a state privacy law covers the processing, a paid transfer of contact details needs to be assessed under that law’s definition of sale and its exceptions; using information for quotations rather than advertising does not by itself establish an exemption. Agreement to a quotation request does not waive an applicable right to opt out. You can contact the operator or use the personal data contact form to withdraw permission for future sharing or make a rights request.

When you choose “Search local rules” in a permit guide, the server sends your selected state, city or town, county where relevant, container use, construction method, placement duration and jurisdiction choice to OpenAI to research and summarize official rules. The research form does not ask for a street address, name, email or telephone number. Opening a guide or checking whether the tool is available does not start this research.

The server saves a private cache of public source passages and research output so validated findings can be reused for up to six hours, including after a restart. The cache may contain the researched location and project context. It uses a hashed lookup key and excludes API keys, request headers and provider reasoning. Expired entries are removed when the cache is next accessed; at most 128 entries are retained. Usage-limit records contain timestamps and random temporary request references. The application does not write research prompts or response bodies to diagnostic logs. These application controls do not establish OpenAI’s retention periods or a US-only processing location; provider processing is separate from this site’s cache.

The search is optional. You can browse the guide and contact the responsible city or county directly without using it. Research results describe the sources found and remaining uncertainty; they are not an issued permit or approval of your property.

The contact form collects a name, email, subject, message and optional affected page. These are stored privately to respond, resolve service issues and correct inaccurate information. Under EU law, service follow-up relies on the operator’s legitimate interests; data rights requests are handled to meet applicable legal obligations. Where US privacy law requires consent, the form’s stated purpose and consent apply; an EU legitimate-interest basis does not replace US consent requirements.

A support ticket is not published or sent to suppliers as a sales inquiry. Keep passwords, identity documents and unnecessary sensitive information out of free-text fields. Retention lasts as long as needed for handling, follow-up and any identified dispute or legal requirement.

Review submissions contain a public pseudonym, rating, account of the experience, experience date and private email. The form asks for consent to moderation and publication under the pseudonym. After moderation, the review, pseudonym and relevant dates may be published. Email addresses are not published. A review awaiting moderation does not enter the displayed average. You can withdraw your consent by contacting the operator.

Public business details come from company websites, public registers and approved changes submitted by representatives. Registered business information does not establish a trading depot. External platform ratings, where used, are identified separately with their platform and checking date.

Where business information identifies an individual, the operator’s EU-law basis is its legitimate interest in maintaining accurate professional information. Exemptions for public or business information vary by state law and have specific limits; information being online does not establish unrestricted permission to reuse it. Contact us to correct details, object or request removal, identifying the profile. Requests are assessed under the applicable law.

An account uses your name, email and password; the server stores a password hash. A session cookie maintains authentication. Profile-management requests include your role and evidence that you can represent the business. The applicant and validation team can see this material; it is not published as profile content.

New accounts must confirm their email before signing in. Confirmation and password-reset requests use one-time links: confirmation tokens expire after 24 hours and reset tokens after 30 minutes. The server retains a hash of each token, rather than the usable token itself. Resetting a password invalidates existing sessions. Account service emails can be sent only when their dedicated email delivery has been configured and enabled.

Saving a draft or uploading a photograph sends it to the directory’s server before publication is requested. Public descriptions, contacts, services, coverage, photographs and captions appear only after approval. Access and change history supports the management of editing rights.

Necessary account and profile-management operations support performance of the service you request. Security and access-history processing relies on the operator’s legitimate interest in protecting accounts and preventing unauthorized changes. Contact the team with your account email and profile reference to request correction or deletion, subject to any justified retention for security or disputes.

The current directory does not use advertising cookies, social pixels or third-party advertising trackers. Authentication uses a session cookie where you sign in. Quotation, contact and review fields are submitted when you send the form, rather than streamed as you type.

With your optional consent, browser page views and form openings are counted to improve this site. Counts are aggregated by day and page without a visitor identifier or individual browsing history. These are not unique-visitor counts. The counters do not retain contact details, IP addresses or URL parameters. Do Not Track and Global Privacy Control keep browser measurements off. You can withdraw this optional consent using the controls below.

The same optional choice also allows snapshots of page loading, response to interactions and layout stability (LCP, INP and CLS), counted when a page first goes into the background. The browser sends a recognized public page path, metric value and a broad viewport category (under 768 pixels or wider). The server retains only daily counts of performance ratings by page, metric and category; it does not retain individual values, visitor or metric identifiers, exact screen sizes, URLs with search criteria, page elements or form content. Older performance counts are deleted on the next observation after 90 days. Collection covers full page loads that stay on that page, and may be incomplete when a browser does not support a metric. Later changes after reopening a tab do not update its first snapshot.

A separate operational counter may record a successfully received inquiry by day and page to administer the service. It contains no contact details or visitor identifier and is distinct from optional browser measurements. Servers necessarily receive network information to deliver pages; any hosting or security logs are separate from the anonymous counters.

Search criteria may appear in page URLs. The browser-based jobsite facilities checklist runs locally. Business-account drafts and photo uploads are separate actions which send content to the server.

New tracking or data uses require an assessment of the applicable privacy laws and appropriate notice and consent. Consent to a quotation request is separate from optional audience measurement or unrelated marketing.

Commercial email is subject to the federal CAN-SPAM Act where applicable, including accurate sender information, a valid postal address and an effective opt-out. Automated calls and texts have separate consent and other rules; email requirements are not a permission to send marketing texts. The operator also observes the EU rules applicable to its activities. A request for a project response does not subscribe you to a newsletter.

The processing arrangements below distinguish this running service from optional or planned providers:

• Hostinger International Limited is the confirmed deployment hosting provider. The provider's registered address is 61 Lordou Vironos Street, 6023 Larnaca, Cyprus; that address does not identify the server region. A local preview still runs on its local machine.
• Cloudflare provides the confirmed reverse proxy and security service, processing network and request information separately from optional page counters.
• Resend delivers website quotation and contact-form notifications to the operator when the corresponding email notifications are enabled. A notification may contain your contact details, message and its reference. When separately configured and enabled, account email delivery also uses Resend for confirmation and password-reset links sent to your account email address. These are service messages, not a subscription to advertising.
• Proton Mail, operated by Proton AG, provides the operator's mailbox at [email protected] for receiving and answering correspondence.
• OpenAI processes the location and project choices described above when you actively use an enabled local permit search. It does not receive your quotation or contact-form details through that research tool.

Processing by the French operator and enabled providers may take place outside the United States. Contact the operator for the locations and safeguards applying to your information. A provider’s registered address alone does not establish its server or backup locations.

Information processed abroad may be accessible under the laws of those jurisdictions. For transfers subject to the GDPR, the operator must establish an applicable transfer mechanism, such as a relevant adequacy decision or appropriate contractual safeguards, and assess any additional measures required. A provider’s brand or US address alone does not establish that a transfer mechanism applies. No US-only storage location is promised.

The operator’s retention policy limits quotation requests to three years after the last exchange, unless a specific dispute or legal obligation justifies a longer period. You may request earlier erasure where your rights apply. This policy is not a universal US legal deadline. Technical diagnostics record the request reference and date without copying its contents, contact details or ZIP code.

For reviews, the retention criteria are the period of publication and the need to moderate, investigate authenticity or handle a dispute. For business accounts, drafts and representation evidence, the criteria are the account's active use, the continuing editing authorization and any necessary security or dispute follow-up. Information no longer needed for these purposes should be erased; a justified legal hold may delay deletion.

If an inquiry leads to a purchase, information needed to carry out that contract and meet accounting obligations is kept separately from routine prospecting records. The French operator retains invoices and accounting supporting documents for ten years from the end of the relevant financial year under its French accounting obligations. This is distinct from the three-year inquiry policy and is not stated as a universal US retention period.

Inquiry retention is managed by the operator through a manual review and deletion procedure, based on the last actual exchange with you. A change of processing status does not restart this period.

The retention policy also covers any copies held by enabled providers, related correspondence, exports and backups, subject to the applicable backup cycle and any justified legal hold. Suppliers that have received an inquiry manage their own copies and applicable retention obligations.

Depending on the processing and applicable law, you can request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent where used. You may object to direct marketing. Include the inquiry or ticket reference, or the account and profile concerned, so the request can be located.

Under GDPR Article 12(3), we respond without undue delay and within one month of receiving a rights request. When necessary because of its complexity or the number of requests, this period may be extended by two further months; we explain the reasons within the first month. US state-law periods, verification, appeals and exceptions depend on the law covering the processing. For example, where the CCPA applies, access, correction and deletion requests generally require a response within 45 days of receipt, with one further 45-day extension when reasonably necessary and notice within the initial period. Verification does not restart that clock. See California Civil Code 1798.130.

Where applicable, state rights can also include opting out of sale, sharing or targeted advertising. The present service does not use advertising trackers; this is not a blanket exemption for paid supplier introductions. We identify the relevant response period and explain any lawful extension. Contact [email protected] or the data contact form linked above.

You may raise relevant US privacy or deceptive-practice concerns with the Federal Trade Commission or the responsible state attorney general or privacy regulator. The FTC reporting service does not determine an individual dispute. You may also contact the French CNIL concerning the French operator. These options do not remove other available rights.

Notice updated on October 2, 2026.