Épure · Information
Privacy policy
What we collect, why, for how long, and what you can demand.
Who is responsible
GROUPE LAUVIGE, 1610 avenue des Chênes Verts, ZAC de Nicopolis, 83170 Brignoles, France. Trade register: Draguignan 805 345 758.
For any question about your data: contact@lauvige.com
Booking a visit
What we collect: your name, your email address, the number of visitors, how many of them are 16 or 17, and your age declaration. Payment is handled by Stripe: we never see your card number.
Why: to hold your booking, send your ticket, welcome you on the day, and uphold the minimum age of 16.
Legal basis: performance of the contract you enter into when booking.
For how long: three years after the visit for the booking itself. Accounting records are kept ten years, as the law requires.
Being told about new dates
What we collect: your email address, and your agreement.
Why: to write to you when new dates open. Nothing else.
Legal basis: your consent, which you may withdraw at any time.
For how long: until you withdraw, or three years without you opening a message.
Planning your day, in writing or by voice
The « On the road » module builds a half-day around your visit.
If you write: your sentence is sent to a language model, through the Lovable gateway. We ask the provider not to keep it. Your sentence and the answer shown are also passed to our automation tool, n8n, hosted by Hostinger in the United Kingdom, which emails them to the Épure team. We use this email to improve the answers. It is deleted after 30 days.
If you speak: your recording is sent to a transcription service at Google, through the same gateway. The audio lives only as long as the transcription, the text only as long as the page. Nothing is kept.
What never leaves: not your name, not your email address, not your booking code.
Legal basis: our legitimate interest in being useful to you. You can always write rather than speak, or not use this module at all.
A reservation we would rather state plainly: the public documentation of these services does not specify the region where your voice is processed. A transfer outside the European Union is possible. We neither assert nor deny it, for want of a public contractual statement.
Place addresses and travel times come from OpenStreetMap. The name of a town you type is sent there, nothing else.
Audience measurement
The site collects visit statistics through the tool built into Lovable.
Why: to know how many people visit the site and which pages are read.
Legal basis: our legitimate interest in understanding how the site is used.
The podcast
Listening to an episode collects no personal data. The episode is a conversation produced by an artificial intelligence tool, and the page says so.
Reminder for an incomplete order
If you tick the box offered when ordering, we send you a single email reminder when that order isn't completed. The reminder includes a link to stop it.
Who receives your data
We neither sell nor rent any data. Our providers:
- Lovable Labs: site hosting, gateway to artificial intelligence services, and sending some of the site's emails
- Hostinger: hosting of our automation tool (n8n), in the United Kingdom
- Supabase: database and files
- Stripe: payment
- Brevo: email delivery
- Google: voice transcription, through the Lovable gateway
- OpenAI: building your day, through the Lovable gateway
- OpenStreetMap: addresses, travel times, places to eat
Some of these providers may process data outside the European Union.
Your rights
You may ask to access your data, correct it, have it erased, restrict its processing, object to a processing, and receive your data in a readable format.
Write to contact@lauvige.com. We answer within one month.
If our answer does not satisfy you, you may refer the matter to the French data protection authority, cnil.fr.
Cookies and trackers
The site uses cookies and browser storage associated with hosting, payment and signing in to the management area. The table below lists the items observed on 22 October 2026, their durations and the available information about their purposes.
| Name | Type | Purpose | Duration |
|---|---|---|---|
__dpl | site hosting cookie | purpose not documented by the host | 24 hours |
__cf_bm | hosting security cookie (Cloudflare) | tell visitors apart from bots | 30 minutes |
__stripe_mid | Stripe cookie, set on the booking pages and "Your souvenirs" | payment fraud prevention | 1 year |
__stripe_sid | Stripe cookie, set on the same pages | payment fraud prevention | 30 minutes |
m | Stripe third-party cookie, set on the same pages | fraud detection, according to Stripe | 400 days observed; 2 years according to Stripe |
sb-…-auth-token | local storage | keep the person signed in to the management area or to "My booking" | cleared on sign out |
tsr-scroll-restoration-v1_3 | session storage | return to your place on the page | when the tab closes |
Payment is handled by Stripe, which may set its own cookies to prevent fraud. Stripe describes them in its cookie policy:
stripe.com/cookies-policy/legal.
Changes
This page may change. The date it was last updated appears at the bottom.
Updated on 23 October 2026