Data protection

Privacy policy

Last updated: 16/10/2026

This English version is a courtesy translation. The French text is the only legally binding version. Read the French version

An estate involves sensitive information: that of a deceased person, and that of their family. This page describes what we process, why, for how long, and how you stay in control.

Data controller

Maison Luciole, operated by Marie Houzot, sole trader — 101 avenue Victor Hugo, 92100 Boulogne-Billancourt. For any question about your data: contact@lamaisonluciole.fr.

Data processed and purposes

Website visitors

The contact form collects your name, email address, an optional phone number and the content of your message. This information is used solely to reply to you. It is sent by email to our team and is not stored in any marketing file.

Legal basis: your consent, given when you send the form. Retention: the time needed to handle your request, then twelve months at most if no mission is opened.

People involved in a mission

When a mission is opened, we process the identification and contact details of the heirs and invited relatives, the decisions they make item by item, the documents they entrust to us, and the technical access logs. Photographs of items and of rooms in the home are also kept.

Legal basis: performance of the mission contract, and compliance with our legal obligations for traceability records.

Data about the deceased person

Information about the deceased falls under article 85 of the French Data Protection Act (loi Informatique et Libertés). It is processed solely for the mission and for its duration. The heirs may decide what becomes of it, in accordance with any instructions the person may have left.

Logging

Every creation, change or deletion is logged with its author, date and time, the value before and after, and the connection address the action came from. This address is personal data: it is kept for as long as needed as evidence, then deleted.

This audit trail protects families first and foremost: it makes it possible to establish who decided what, and when.

Retention periods

Contact request with no follow-up: twelve months at most.
Mission file: the duration of the mission, then the retention period agreed in the contract.
Accounting records: the applicable statutory periods.

The principle is transit, not archiving. When a mission closes, the data is flagged for return or deletion, then actually processed on the agreed date.

Recipients

Your data is never sold, rented or used for advertising. It is accessible:

to the members of the Maison Luciole team authorised on your file, and to them alone;
to the notary’s office, for the end-of-mission deliverables intended for it;
to the contractors strictly needed to carry out the work — transport, cleaning, auction house — and only for the information they need for their task.

Separation between missions is checked on the server at every access, not merely in the display. Several families share the same platform: none can reach another’s data.

Processors and hosting

Our technical providers act as processors within the meaning of article 28 of the GDPR, under a contract. Data and backups are hosted in the European Union, by o2switch SAS.

Security

Encryption of exchanges and files, in transit and at rest.
Individual authentication, hashed passwords, limited number of attempts.
Personal invitation links, single-use and time-limited.
Timestamped logging of access and changes.
Daily backups, with restoration tested periodically.

Cookies

This website sets no advertising cookies and uses no third-party analytics tool. Two technical cookies may be used: a session cookie when you sign in to your mission workspace, and a cookie that remembers the language you chose. They are essential to the service and do not require consent.

Your rights

You have the right of access, rectification, erasure, restriction, objection and portability. You may also set instructions about what happens to your data after your death.

To exercise them, write to contact@lamaisonluciole.fr. We reply within one month. You may also lodge a complaint with the French data protection authority (CNIL), www.cnil.fr.

Portability

You can ask at any time for a full export of your file in an open format, readable without our tool: structured data, photographs and supporting documents included.