EU GDPR & CNIL Compliance

Privacy Policy

Last Updated: August 25, 2026 • Effective Immediately

At VeriLocal (accessible via verilocal.biz), safeguarding your privacy and ensuring the security of your personal information is a foundational commitment. This policy explains what personal data we collect, how it is processed, and your statutory rights under the General Data Protection Regulation (EU GDPR 2016/679).

1Data Controller Identity

The data controller responsible for the VeriLocal platform is the operating entity of the website (referred to as "VeriLocal", "we", "us", or "our"). For any questions regarding personal data management or to exercise your rights, you can reach our Data Protection Officer (DPO) at: contact@verilocal.biz.

2Personal Data We Collect

We collect only the information strictly necessary to provide reliable matchmaking and verified directory services:

Quote Requesters & Homeowners: Full name, email address, telephone number, job location commune or postcode, and project specifications.
Business Owners & Artisans: Company trading name, SIRET registration number, owner contact info, Decennale and RC Pro insurance certificates, project portfolio showcases, and login credentials.
Billing & Payment Data: Payments are processed directly by Stripe Payments Europe. VeriLocal never stores full credit card numbers.

3Anti-Spam & Lead Privacy Protection

Strict 3-Provider Cap & Contact Masking

Unlike traditional lead aggregators who resell your contact details to dozens of companies, VeriLocal restricts every quote request to a maximum of 3 qualified local specialists. Your direct phone number and email remain masked until a verified artisan officially unlocks your brief.

4Legal Basis for Processing

In accordance with Article 6 of the GDPR, personal data is processed under the following lawful bases:

Contractual performance: Delivering quotation matching and managing business directory accounts.
Legal compliance: Maintaining tax records and auditing legal registration validity.
Legitimate interests: Fraud prevention, authentic review moderation, and network security.
Explicit consent: Optional analytics cookies and marketing preferences.

5Data Retention Periods

We retain your personal data only for as long as required to fulfil the purposes for which it was gathered:

Quote requests: Retained for 24 months following project completion.
Business accounts: Retained for the active duration of the listing plus statutory archival periods.
Insurance certificates: Retained for the active duration of the policy.
Invoices & Stripe records: Retained for 10 years per French Commercial Code requirements.

6Your Statutory Rights Under GDPR

Under EU Regulation 2016/679, you possess the following enforceable data rights:

Right of Access & RectificationRequest a copy of your records and rectify inaccurate information.

Right to Erasure (To Be Forgotten)Request complete deletion of your records subject to legal retention rules.

Right to Data PortabilityReceive your data in a structured, machine-readable format.

Right to Object & RestrictObject to specific processing activities or restrict processing.

To exercise any of these rights, email your request to contact@verilocal.biz. You also have the right to lodge a formal complaint with the French Data Protection Authority (CNIL - cnil.fr).

7Security & Data Storage

All communications across VeriLocal are secured via HTTPS/TLS encryption. Your data is hosted on secure infrastructure located within the European Union adhering to industry-leading security practices.

Questions about your data?

Our compliance team is here to help.

Contact Data Officer