Who is responsible for your data?
Patricia Hervé, operating Chez Patou as a sole trader (SIRET 933 283 426 00015), is your contact for personal data relating to the house.
27 rue Lemercier de Neuville, 53000 Laval, Francepatricia@chezpatou.fr · 06 61 40 27 78
What data do you use?
- Your enquiries: the information you voluntarily provide by telephone, email or through the adviser (name, contact details, question and details of your stay).
- Your conversation: messages, replies, exchange dates and a conversation identifier are recorded so the house can follow up on your request.
- Security: the IP address and technical browser information may be processed to limit abuse and protect conversations.
- Your booking: the room, dates, number of guests, your first and last name, email address, telephone number, special requests and, where applicable, a promotional code are sent to Chez Patou’s management service when you request the booking.
Avoid entering sensitive data, passwords or a bank card number in the adviser.
What is this information used for?
Your information is used to respond to your request, prepare your stay and contact you again if you ask us to. The steps needed for a booking are based on pre-contractual measures taken at your request or performance of your contract.
Protecting the service and preventing abuse are based on the house’s legitimate interest in securing communications. Accounting information relating to a stay is retained to comply with applicable legal obligations.
How does the adviser work?
You are speaking with an assistant that uses artificial intelligence. The messages needed to produce its answer are processed by Mistral AI. Conversations are stored in a Supabase database and may be accessed by people authorised to follow up on your request.
If you request a callback or a booking follow-up, the relevant information is also sent to the house and its management or email services. You can always choose to speak directly with Patricia instead.
Bookings and external services
The booking process sends the stay and customer details to Chez Patou’s management service to create the booking. Payment is then made on Stripe’s secure page. Chez Patou does not receive your full bank card number. The terms applying to your stay are set out in our booking terms.
The booking draft, including contact details already entered, is placed in your browser’s local storage. The application lets you resume it for 24 hours and then stops reusing this data. The local record may remain on your device until it is replaced or deleted in the browser settings.
To prevent a duplicate booking if payment is interrupted, the tab’s session storage contains a SHA-256 fingerprint calculated from the request, two random idempotency identifiers and, once created, limited booking proof: booking ID and number, version, confirmation token, amount and statuses. This data can be reused for 24 hours and contains no bank card data. The record may remain until the tab is closed or the browser clears it.
Links to a map or another website only load those services when you choose to use them. Their own privacy rules then apply.
How long is data kept?
Enquiries that do not lead to a booking are kept for no more than three years after your last contact. Data needed for the stay is used during the contractual relationship and then archived for the periods required to prove the contract and meet legal obligations. Accounting documents are kept for ten years.
The retention policy provides for closed adviser conversations that are not linked to a booking to be deleted after 90 days from the last message. Open, pending or booking-linked conversations are excluded from this deletion. Activation of automatic deletion in production still needs to be verified before launch. You may ask Patricia to delete your exchanges, subject to applicable legal obligations.
How does optional audience measurement work?
Only after your consent, Chez Patou records pages viewed, their receipt date and time, and a random identifier for the tab’s session. These measurements count consenting sessions and page views; they do not count unique people. They are stored in Chez Patou’s Supabase database, accessible to authorised members of the guest house.
Link parameters, booking tokens, your contact details, form contents and referring websites are not sent to this measurement service. No geolocation or Google Analytics is used. Your IP address necessarily passes through servers and may be processed temporarily to limit abuse; it is not recorded in the audience measurement database.
Your consent or refusal is valid for six months in the browser’s local storage (cp_audience_choice_v1). After that, the choice is no longer used; its record may remain until replaced or deleted in the browser. The random identifier (cp_audience_session_v1) is placed in session storage after consent and disappears when the tab closes or consent is withdrawn.
You can decline or withdraw consent at any time in the cookie information panel, without affecting bookings or the assistant. Withdrawal stops new measurements and deletes the local identifier. Previously sent measurements remain in the database until deleted by the guest house; no automatic deletion is currently configured. To request deletion, contact Patricia with the session identifier if you have it.
What are your rights?
Depending on the processing concerned, you may request access, rectification, erasure, restriction or portability of your data, and object to processing based on legitimate interest. If processing relies on your consent, you may withdraw it at any time.
Send your request to patricia@chezpatou.fr. The house normally responds within one month and will inform you if the complexity of the request requires more time.
You can also submit a complaint to the CNIL.
A question?
Patricia can tell you about the recipients of your data and the arrangements applying to your request. See also the Chez Patou legal notice.
Updated: 12 October 2026.