Privacy Policy

1. Data controller

Controller under GDPR: Milles, 12 rue de la Paix, 75002 Paris, France (SIRET placeholder: 123 456 789 00012).

Email: contact@milles.fr

2. Scope

This policy covers milles.fr, use of the marketplace connecting customers with independent providers, informational pages, and the milles-Orb assistant where personal data is processed.

3. Data we collect

Depending on how you use the platform, we may process:

• Registration and profile data: identity, contact details, SIRET, insurance, photos, descriptions, reviews.
• Request-related data: job descriptions, quotes, messages, status, payment details shared between users.
• Technical data: IP address, timestamps, browser, device, language, server logs.
• Messages you send to contact@milles.fr or via forms.
• Public-source data to verify professional credentials (RGE, SAP, trade registers) where needed.

4. Purposes and legal bases

• Art. 6(1)(b) GDPR — contract: account, matching, support, paid features where applicable.
• Art. 6(1)(c) GDPR — legal obligation: accounting, retention, authority requests, platform transparency (EU Reg. 2019/1150).
• Art. 6(1)(f) GDPR — legitimate interests: security, fraud prevention, limited analytics, product improvement.
• Art. 6(1)(a) GDPR — consent: newsletter, non-essential cookies, optional profile enrichments.

5. milles-Orb and automation

The assistant may suggest categories, price ranges, and job wording for guidance only.

No solely automated Article 22 GDPR decision with legal effect is taken without human review on complaint.

6. Recipients

We do not sell your data to third-party advertisers.

• Processors (Art. 28 GDPR): Cloudflare hosting, email, backups, payment providers where used.
• Other marketplace users when needed to fulfil a match.
• Courts or authorities when legally required.
• Professional advisers within necessary limits.

7. Transfers outside the EU

Where processors are outside the EU/EEA, Chapter V GDPR safeguards apply (SCCs, adequacy decisions).

8. Retention

Data is kept for the contractual relationship and statutory periods (French accounting rules often require ten years for certain records).

9. Your rights (Articles 15–22 GDPR)

• Art. 15 access; Art. 16 rectification; Art. 17 erasure; Art. 18 restriction; Art. 20 portability where applicable.
• Art. 21 object, including to processing based on legitimate interests and to direct marketing at any time.
• Art. 22 — no solely automated decision with significant legal effect without human escalation.
• You may lodge a complaint with the CNIL (French DPA): www.cnil.fr

10. Account deletion

Request deletion of your account and linked data by emailing contact@milles.fr from your registered address.

• We acknowledge and complete erasure within a reasonable time, subject to legal holds or ongoing disputes.

11. Security

Appropriate technical and organisational measures including TLS, access controls, and logging.

Breach notification to the CNIL and affected users under Articles 33 and 34 GDPR where required.

12. Cookies

Strictly necessary cookies run the site; analytics or marketing cookies require prior consent.

You may block or delete cookies in your browser settings.

13. External links

Third-party sites have their own privacy policies—we are not responsible for their processing.

14. Children

The service is not directed at children under 16. Contact us if you believe we hold a minor's data without proper consent.

15. Changes

We may update this policy and notify you of material changes. See our Terms & Conditions.

16. Contact

Privacy enquiries: contact@milles.fr or the controller address above.