Privacy policy

The short version

We keep what you send us so that we can deal with your enquiry, for three years if it does not lead to a policy, and we sell it to nobody: apart from the insurers we approach to build your quote, the only outsiders who ever see part of it are our technical providers — our host, our audience measurement, our appointment diary and, for enquiries sent from an English or Italian form, the machine translation service that renders them into French — five in all, four of them based outside Europe. We measure audience only if you agree to it; to see your data, correct it or have it erased, write to info@assudire.fr. The detail is set out below, section by section.

Who processes your data

ASSUDIRE SARL, an insurance brokerage registered with ORIAS, the French register of insurance intermediaries, under number 13001333, registered office 30 Place Dou Maïet, 83600 Fréjus, joint managers Cyril RENOU and Lucas DI MASSIMO, is the controller of the data processed on this site. For a question, or to exercise your rights, write to info@assudire.fr, call 04 89 78 15 49 (+33 4 89 78 15 49 from abroad) or call in at the office: we have no data protection officer, so the office answers you itself. Our other legal details, including our RCS number in the French companies register, are in the legal notice of the site, the page headed « Mentions légales », which also sets out how to complain about our broking services: a complaint goes to reclamation@assudire.fr and follows a procedure separate from the one described here.

The data we collect

Four answers are all we need: first name, surname, email address and the type of insurance concerned, plus the box by which you agree to be contacted and confirm you have read this page; without them the enquiry is not accepted. The telephone number is optional everywhere; the message is free text, capped at 4,000 characters, and becomes compulsory only on the contact page reached through the Contact link in the menu. On the contact pages you can also say when and by which channel you would rather be called back. On the calculators, the summary of your simulation is attached automatically: age, amounts, term, sometimes your income, and the estimate produced. The optional extra block on the French calculators, headed « Obtenir un tarif au plus juste », adds whatever you are willing to give: the property, the vehicle or the boat, your date of birth, your personal and financial circumstances, your current insurer and your recent claims. None of it reaches us as separate fields: it is copied to the foot of your message and kept in that form. Two calculators also pass us health information along the way. The first is the mortgage insurance calculator, which sends your smoker status. The second is the mutuelle calculator, the mutuelle being the top-up policy that covers what the French state health scheme leaves you to pay, and it sends the reimbursement priorities you have set: hospital care, optical, dental, maternity and complementary medicine. We need nothing beyond that, so please do not set out any condition, any treatment or any bank details. The referral form is the only one on which you hand us someone else’s details, the first name, surname, email address, telephone number and insurance need of the person you are recommending, which you undertake to pass on only with their agreement and over which they have exactly the same rights as you. Finally, the site records, with no input from you, the date and time of your submission, the address of the page you wrote from, and what it infers from your enquiry: product, language, postcode, the adviser to point you to, and a priority score explained further down. Your IP address is never kept in readable form: as with your email address, all we hold is an unreadable fingerprint, used to spot duplicates.

Where your data comes from

Your data comes from you, through a form on the site or through our online appointment diary, which is provided by HubSpot. We do not buy prospect lists, we do not work with comparison sites, and we do not look anything up about you with a third party. Added without any input from you are the address of the page holding the form, an irreversible fingerprint of your IP address used to catch automated submissions, a priority marker and the name of the adviser suggested, all of them worked out on our own server from your submission alone. There is one exception, the referral form: a client sends us the first name, surname, email address, telephone number and likely need of someone close to them, declaring that they have that person’s agreement; this data follows the same path as the rest, an email to the office and the enquiry log. If you are the person recommended, we tell you at our very first contact who gave us your details, and a message to info@assudire.fr is enough to have them erased.

Why we process your data

A quote, advice, a call-back, notifying a claim, making a complaint, recommending someone close to you, applying for a job with us: we process your data to answer your enquiry, and for nothing else. The legal basis is the enquiry itself, in other words the steps taken ahead of a possible contract (article 6.1.b of the GDPR). Your message lands in the office inbox, an adviser studies it, approaches the insurers we place business with where that is needed, then replies to you; in return you receive an automatic acknowledgement written in the language of the form, and those two emails are the only ones your submission triggers. Only the first name, surname, email address and nature of the need are compulsory; the telephone number stays optional everywhere, and so does the message except on the contact page, and a calculator summary is attached only if you have used one. If you recommend someone close to you, their details serve only to contact them on your behalf. We also keep one line per enquiry in an internal log, with a priority score, the page it came from and a fingerprint of your IP address, so that we can handle enquiries in the right order and set aside automated submissions, on the basis of our legitimate interest in running the office (article 6.1.f of the GDPR). The score ranks enquiries; it turns none away. The site feeds no newsletter and no advertising campaign, and your details are neither sold nor rented.

The enquiry log

Since 28 August 2026, every enquiry sent through a form is recorded on our server, in a folder that cannot be reached from the web. The entry repeats what you typed, first name, surname, email address, telephone number and message, and adds the product, the language, the date, the page it came from, the adviser it is addressed to and its priority score. Your IP address is not kept in readable form: we hold an irreversible fingerprint of it, which lets us spot repeated submissions from one and the same source. The log lets us count enquiries, spot duplicates and organise the work of the team, on the basis of our legitimate interest in managing our own business. Only people at the office can open it, and only behind a password; it feeds no advertising profiling and is passed to nobody, and logs more than three years old are deleted automatically. You can object to it, or ask us to erase your entry, by writing to info@assudire.fr.

The priority score, and what it changes

Every enquiry is automatically given a score from 0 to 100 and a priority letter. The score says nothing about you: it estimates whether the enquiry can be acted on straight away. It takes account of where the property or the risk to be insured is, of the postcode, whether you state it or we pick it out of your message, of a telephone number, of the detail you give about your need, of your timescale and of the product; a disposable email address, or more than six submissions in an hour from the same connection, bring it down. Your nationality, your country of residence and the language of your message play no part in the calculation; where the property is weighs heavily, because we place business on the French market only. The first effect of the score is the order in which enquiries are handled: none is deleted for scoring low, they all land in the same inbox and an adviser picks them up one by one. The second is the wording of your acknowledgement, which tells you plainly that the risk falls outside our scope instead of promising a call-back within two working hours: that email is written by the machine, so it can get things wrong, and you can reply to it, it will be read. The adviser named alongside the score is only a suggestion.

If the risk is not in France

We are a French broker: we place business only for a property, a vehicle or a risk attached to France. Even so, no enquiry is thrown out by a machine, and it goes to the office in every case. If your answer on that point is read neither as a yes nor as a purchase or transfer already under way, the enquiry is flagged as outside our scope and the acknowledgement tells you so at once. That reading can be wrong: reply to it giving the town where the property is, or call 04 89 78 15 49.

Protecting our forms

Our forms contain an invisible field that has to stay empty and that also has to reach us: if a submission fills it in, or fails to send it at all, we treat that submission as automated, the enquiry does not go to the office, and we record neither your name, nor your contact details, nor your message, only a technical entry (date, reason for the block, product, and a fingerprint of your IP address, never the address itself), filed alongside the enquiries and kept for as long as they are. The screen shows the same confirmation as a successful submission, so as to tell the robots nothing. That fingerprint also lets us count the submissions coming from one connection: beyond six in an hour the enquiry drops to a lower priority, but it still reaches us. The legal basis is our legitimate interest in protecting the site (article 6.1.f of the GDPR). This filter can be wrong, in particular when an unusual browser fails to send the trap field back: if you have written to us and no acknowledgement arrives within a few minutes, call 04 89 78 15 49 or write to info@assudire.fr and we will pick your enquiry up.

Your health data

No form asks you about an illness or a treatment, but three pieces of health information can still reach us. The mortgage insurance calculator attaches the smoker status shown on screen, even if you never touch it, so its default value, which its optional block then asks you for again. The mutuelle calculator attaches the level of reimbursement you selected, and your priorities if you fill in its optional block. And your free-text message reaches us exactly as you wrote it. They reach us only because you choose to send them, and it is that explicit choice which allows us to process them: they prepare the study you have asked for, go by email to the office and are recorded in our enquiry log. If you use the English or Italian form, the content of the message field is additionally sent to OpenAI to be translated into French — including the summary produced by a calculator, and therefore the smoker status or the level of reimbursement if they appear in it. Write to info@assudire.fr and we will erase them; and if you would rather send nothing of the kind, do not submit the calculator form, call us instead and we will go through it with you over the phone.

Booking an appointment online

The Book a meeting page, in all three languages, displays a HubSpot diary. Your name, your contact details and the slot you pick go straight to HubSpot, without passing through the contact form or the enquiry log; we keep them there as we keep any other enquiry, in order to prepare the meeting. HubSpot being an American company, they are processed outside the European Union, on the terms set out in its own privacy policy. This diary loads the moment the page opens, before any question of consent, and it can drop its own trackers even if you have refused audience measurement; if you would rather it did not, call 04 89 78 15 49.

If someone has passed on your details

Our referral page lets someone else recommend you by giving your first name, surname, email address, telephone number and insurance need. They tick a box declaring that they have your agreement: that is our only safeguard, and we have no way of checking it. Your details land in the email sent to the office and in our enquiry log, where they stay three years at the most, on the basis of our legitimate interest in making ourselves known through recommendation; from the very first exchange, we tell you who recommended you. You can object, or ask us to erase them, by simply writing to info@assudire.fr.

The legal basis for our processing

Answering your enquiry and arranging an appointment are the pre-contractual steps you have asked us to take (article 6.1.b). The enquiry log, the priority score and the anti-robot filter rest on our legitimate interest (article 6.1.f) in measuring our activity, handling enquiries in order and protecting our forms; the score sets no enquiry aside, they all reach an adviser, and only the automatic reply changes when the risk lies outside France, and you may object at info@assudire.fr. Audience measurement rests on your consent (article 6.1.a of the GDPR and article 82 of the loi Informatique et Libertés, the French data protection act): its cookies are set only once you have agreed on the banner, and you can withdraw that agreement by clearing the data the site holds in your browser. The tick-box on the forms, compulsory before you can send, is not itself a legal basis.

Who has access

Your enquiry lands in the info@assudire.fr inbox and in an internal log, behind a password, which our team alone consults and from which an adviser can pull a spreadsheet holding your details and your message. We sell nothing and rent nothing, and the site passes your data to no insurer: it is your adviser who then approaches the insurers and wholesale brokers concerned, giving them no more than the quote requires. Five providers are involved: IONOS hosts the pages, the log and the mail; Google Ireland measures audience, and its tag loads the moment a page opens, before any consent, handing over your IP address and the page viewed, though with no cookie before you agree; Microsoft supplies Clarity, heat maps and anonymised recordings of browsing, loaded only after that agreement; and HubSpot carries the diary on our appointment pages, likewise loaded before any choice about cookies, and receives directly the name, email address and slot you enter; and OpenAI, lastly, translates into French the enquiries written in English or Italian, receiving for that purpose the content of the message field alone: never the identity fields of the form, not your name, not your email address, not your telephone number. That field, however, goes exactly as you wrote it — if it carries your name, your number, or the summary produced by one of our calculators, those go with it. OpenAI states that it does not use content received through its programming interface to train its models. That translation is a reading convenience for the adviser, not a required step: if it fails, your enquiry reaches us unchanged, and an enquiry sent from a French form is never passed to OpenAI at all — it is the form you use that triggers the translation, not the language you happen to write in. Microsoft, HubSpot, OpenAI and the Google group move data outside Europe: they state that they apply the safeguards laid down by the GDPR, standard contractual clauses or membership of the data protection framework between the European Union and the United States, and we will send you the detail on request at info@assudire.fr.

How long we keep it

If nothing comes of it, your enquiry is kept for three years after our last exchange. Once you are a client, your file stays with us for the whole term of the policy and then five years after it ends (anti-money-laundering rules, article L.561-12 of the code monétaire et financier, the French monetary and financial code), and a few supporting documents for longer where accounting or tax rules require it. Only one deletion happens by itself: the log is kept in monthly files and loses those more than three years old, and the counters for repeated submissions, which hold a fingerprint of the IP address and never the address itself, expire after twenty-four hours. Everywhere else nothing goes on its own: the office inbox, exports, technical traces, the HubSpot account behind the appointments, deletion there is done by hand.

Your rights

You can obtain access to your data, correct it, have it erased, restrict its use, receive what you sent us in a reusable format, and object to your enquiry feeding the log and our internal statistics. You withdraw your agreement to audience measurement by clearing the data the site holds in your browser, and the banner then comes back. An automatic priority score guides the way we sort enquiries and, for a property outside France, the automatic reply you receive, without ever shutting anyone out; ask us and an adviser will look at your file again. Write to info@assudire.fr or to ASSUDIRE, 30 Place Dou Maïet, 83600 Fréjus, quoting the email address you used, which is the only way we have of finding you. We answer within one month, plus two further months if the matter is complex, and we ask for proof of identity where there is real doubt. You may also leave instructions on what is to become of your data after your death. If our answer does not satisfy you, you can refer the matter to the CNIL, the French data protection authority, at 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at www.cnil.fr.

How we protect your data

The site is served over HTTPS only, and any connection in the clear is redirected. The enquiry log is written outside the site root, where no web address can reach it; were it ever to fall back inside, the server refuses access to it and your details are then not logged at all. Your IP address never appears there in readable form, only a computed fingerprint. An invisible trap field turns away part of the automated traffic without recording your name or your contact details, and the internal page used to consult enquiries is not indexed, requires a password and limits the number of attempts. Our files and our mail are hosted in France, with IONOS; the third-party tools are the responsibility of the companies that supply them. No protection is absolute: should an incident affect your data, we would inform you on the terms laid down by the GDPR.

Cookies and audience measurement

We measure nothing without your agreement: about a second after your first page opens, a banner offers you ‘Accept’ or ‘Decline’, and for as long as you have not answered, the consent signal sent to Google stays on refusal and no measurement cookie is set. The Google Analytics 4 tag (Google Ireland Limited) is nevertheless loaded the moment a page opens, so before your choice: it counts the visit without a cookie, but it does expose your IP address to Google. When a form is sent, all we report to it is the name of the form and the type of need, never your contact details and never your message. Microsoft Clarity (Microsoft Corporation, United States) loads only once you have accepted, and then records screen replays and heat maps; whether what you type is masked depends on the default settings of Clarity, which we do not change and therefore cannot guarantee, and choosing ‘Decline’ is enough to stop it loading at all. We display no advertising and resell nothing, but accepting also switches on the advertising permissions of Google. Your choice stays in the local storage of your browser with no time limit, alongside one single other technical item, the fact that the English or Italian version of the site has already been offered to you: clear the data the site holds to see the banner again. There are two exceptions: the map on our directions page contacts Google only if you open it; and the three appointment pages load the HubSpot module, an American publisher, the moment they open and without waiting for your answer, so HubSpot receives your IP address and may drop its own trackers.

Forms in English and Italian

The English and Italian forms work exactly as the French ones do: same address, info@assudire.fr, same enquiry log, same retention, same rights. There are only two differences. The subject you choose carries an [EN] or [IT] marker. And, so that our advisers can read you without reaching for a translation tool, the content of the message field is sent to OpenAI (an American company), which returns a French version, attached to the original in the email and in the log; the original remains what counts, the translation is labelled as machine-made, and if it fails your enquiry reaches us just as you wrote it. It is the form you use that triggers this, not the language of your text: writing in French on the English form does not avoid it, and writing in English on the French form does not cause it. That marker stays internal: it appears in the subject line of the email and in the log, it has your acknowledgement written in your own language and it suggests an adviser; the enquiry still lands in the shared inbox and an adviser decides what happens next. Your language plays no part in the priority score, which ignores language, nationality and country of residence alike: it looks at where the property or the risk is, at what you are planning and at how to reach you. If the property lies outside France, the enquiry goes to the back of the queue and the reply tells you so plainly, because a French broker cannot place it. These pages use the same measurement tools as the French ones, Google Analytics and Microsoft Clarity, and the same consent banner, even though it names Google Analytics alone. This policy is now published in English as well as French, the French text remaining the reference version; if any point here is unclear, write to info@assudire.fr and we will answer you in your own language.

Updates to this policy

This policy was reviewed on 28 August 2026, when the enquiry log went live, and it describes the site as it stood on that date. We correct it as soon as any processing changes: a new tool, a new field, a new recipient or a new retention period. Only the version shown here applies; we keep no earlier ones and we notify nobody individually. This page is the English version, translated from the French original, which remains the reference text should the two ever differ.