Privacy Policy
This policy explains how REXOR GROUP LLC, which operates the Lodgeyard brand, processes personal data in connection with the France version of lodgeyard.com, quote requests, the conversation window, business prospecting and customer relations: which data, for what purposes, on what legal basis, with whom, where, for how long, and how to exercise your rights. Version 2.1 of 28 October 2026.
In short. We use the information in your request to study your project and reply to you. We do not sell or rent your data. Some of your data are processed outside the European Union, under the safeguards described in Article 11. You may at any time ask us to access, correct or delete your data, and object to our prospecting messages, by writing to contact@lodgeyard.com.
Article 1. Purpose and scope
1.1 This policy is provided in accordance with articles 12 to 14 of the General Data Protection Regulation and with French Law no. 78-17 of 6 January 1978 on information technology, data files and civil liberties (loi Informatique et Libertés).
1.2 It applies to the processing of personal data carried out by REXOR GROUP LLC:
- through the France version of the Website, in French and in English;
- through the quote request form of the Website;
- through the conversation window displayed on the pages of the Website;
- in the course of our correspondence by email;
- in the course of the business prospecting that we carry out among professionals of outdoor accommodation and tourism;
- in the course of our pre-contractual relations with our prospective customers and the performance of the orders of our customers.
1.3 This policy does not apply to the processing carried out by third parties acting as independent controllers, such as the partner installer named in a quote, the freight forwarder acting on behalf of a customer or the carriers, which process personal data under their own responsibility, nor to the websites of third parties to which the Website may link.
1.4 REXOR GROUP LLC is not established in the European Union. It applies the General Data Protection Regulation to the processing described in this policy, which relates to the offering of goods to persons in the Union, within the meaning of article 3(2) of that Regulation.
1.5 This policy supplements the information given to you at the time of collection, in the quote request form, in the conversation window and in our prospecting messages.
Article 2. Definitions
2.1 In this policy:
- "GDPR" means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation);
- "personal data", "processing", "controller", "processor", "recipient" and "data subject" have the meaning given to them by article 4 of the GDPR;
- "Website" means the website available at lodgeyard.com, and in particular its France version;
- "Conversation Window" means the conversation window of the pages of the Website and the automated replies displayed in it;
- "we", "us" and "our" refer to REXOR GROUP LLC, acting under its Lodgeyard brand;
- "you" refers to the data subject whose personal data we process: visitor of the Website, person requesting a quote, user of the Conversation Window, contact person of an establishment, of a prospect or of a customer.
Article 3. Controller
3.1 The controller is REXOR GROUP LLC, a limited liability company organised under the laws of the State of New Mexico (United States of America), operating the Lodgeyard brand, whose head office is at 8206 Louisiana Blvd NE, Ste A #9493, Albuquerque, NM 87113, United States of America. Email: contact@lodgeyard.com.
3.2 Any question relating to this policy or to the processing of your personal data may be sent to contact@lodgeyard.com or by post to the address above.
3.3 Lodgeyard is a brand of REXOR GROUP LLC and not a separate legal entity. Any reference to Lodgeyard in our communications designates REXOR GROUP LLC.
3.4 REXOR GROUP LLC has not designated a data protection officer, its activities not falling within the cases in which article 37 of the GDPR requires such a designation.
Article 4. Personal data processed
4.1 When you request a quote
We process the data that you enter in the quote request form:
- your name;
- the name of your establishment, if you give it;
- your email address;
- your telephone number, if you give it;
- the location of your site;
- the characteristics of your project (number of units, model) and its timeframe;
- your message, if you write one.
We also record the date and time at which the request is received and, where you have yourself chosen a country or language version of the Website in its selector, that choice. We then process the content of our exchanges by email.
To limit abuse of the form, our hosting provider counts the submissions made from the same IP address over one minute; this address is not kept.
4.2 When you write to us
We process your contact details, the content of your messages and of their attachments, and the information that appears in your signature.
4.3 When you write in the conversation window
The conversation window of our pages puts you in contact with an automated sales agent, an automated system and not a person (Article 9). We process:
- your messages and the replies of the Conversation Window;
- the contact details that you choose to leave (email address or telephone number);
- your IP address, which our hosting provider processes in order to route the conversation. To limit abuse, we keep only an encrypted fingerprint of it, computed with a secret key, which does not allow the address to be retrieved.
If you ask to speak to a person or leave your contact details, the Lodgeyard team receives your contact details and the transcript of the conversation through the team's internal messaging service, in order to reply to you.
4.4 When we write to you first
If we write to you without a request on your part, we use the name of your establishment and the professional email address published on its website. We write only to general addresses of establishments (such as info@ or contact@), never to a personal address. We also use the public information of the register of classified tourist accommodation published as open data by Atout France (name, address, municipality, classification, category, capacity, number of pitches and website of the establishment), and we keep a record of the messages sent, of the replies received and of any objection.
We send two messages at most: a first message and a single follow-up.
4.5 When you become a customer
We process the identity and contact details of your contact persons, the corporate name, address and identifiers of your company (SIREN or SIRET number, intra-Community VAT number, EORI number), the address of your site and the place of delivery, the contractual documents, the information relating to payments (amounts, dates and the information appearing on the transfers received), our correspondence and, where applicable, your claims.
4.6 When you browse the Website
When you consult the Website, our hosting and content delivery provider necessarily processes the technical data required to transmit the pages to you and to protect the Website against attacks, in particular your IP address, the address of the page requested, the date and time of the request and information about your browser. We do not keep a log of these data and do not use them to identify you.
On your arrival on the home page, we direct you to the version of the Website for your country, on the basis of the country of your connection and of the language settings of your browser. This country is neither recorded nor kept. If you choose a country or a language yourself in the menu, a functional cookie named "pays" remembers that choice for 12 months (Article 17).
We measure the audience of the Website without cookies or identifiers: page views are counted in aggregate, without following a person from one visit to the next. The measurement service, provided by our hosting provider, presents to us only aggregated statistics, such as the number of pages viewed, the referring pages, the types of browsers and devices, the countries of connection and the loading times of the pages.
4.7 Data we do not ask for
We do not ask for any data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life or sexual orientation, nor for any genetic or biometric data. Please do not communicate any such data in the form, in your messages or in the conversation window. Please do not communicate any bank card number or bank login details either.
4.8 Data concerning other persons
If you communicate to us the personal data of other persons, such as colleagues, the manager of your establishment or the person who will receive the delivery, you undertake to inform them of this policy and to communicate to us only the data necessary for the purposes described in it.
4.9 Data of legal persons
The name of an establishment and its general email address, when they do not identify a natural person, are data of a legal person and not personal data within the meaning of the GDPR. We nevertheless apply to them the same rules of minimisation, retention and objection as those described in this policy.
Article 5. Sources of the data
5.1 The data that we process are collected directly from you, through the form, the conversation window or your messages, or from the persons of your organisation who are in contact with us.
5.2 For business prospecting, the data come from sources accessible to the public: the register of classified tourist accommodation published as open data by Atout France, and the professional email address published on the official website of the establishment.
5.3 In the course of the performance of an order, we may receive information concerning it from the undertakings involved (freight forwarder, carriers, partner installer).
Article 6. Purposes and legal bases
6.1 We process your personal data for the following purposes, on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Studying your project, preparing a quote and replying to you | Pre-contractual measures taken at your request (article 6(1)(b) GDPR) |
| Answering your questions in the conversation window, preparing your quote and, at your request, putting you in contact with a person | Pre-contractual measures taken at your request (article 6(1)(b) GDPR) |
| Performing the order if you place an order, including invoicing, delivery and the information necessary for customs clearance | Performance of the contract (article 6(1)(b) GDPR) |
| Transmitting to the partner installer and to the freight forwarder the data necessary for the turnkey quote and its performance | Pre-contractual measures and performance of the contract (article 6(1)(b) GDPR) |
| Limiting abuse of the form and of the conversation window, and protecting the Website | Our legitimate interest in protecting our services (article 6(1)(f) GDPR) |
| Presenting our accommodation units to professionals of outdoor accommodation and tourism (business-to-business prospecting) | Our legitimate interest in making our offer known (article 6(1)(f) GDPR) |
| Respecting your objection to prospecting (opposition list) | Compliance with a legal obligation (article 6(1)(c) GDPR, in connection with article 21(3) GDPR) |
| Reading conversations of the conversation window to check and improve the quality and accuracy of the replies of the Conversation Window | Our legitimate interest in providing accurate information (article 6(1)(f) GDPR) |
| Answering your requests to exercise your rights | Compliance with a legal obligation (article 6(1)(c) GDPR, in connection with articles 12 to 22 GDPR) |
| Measuring the audience of the Website in aggregate, without cookies | Our legitimate interest in understanding the use of the Website (article 6(1)(f) GDPR) |
| Remembering the country or language that you have chosen | Our legitimate interest in providing the version of the Website that you have chosen (article 6(1)(f) GDPR) |
| Keeping accounting records and evidence, and managing claims and disputes | Our legitimate interest in the management of our business and in the establishment, exercise or defence of legal claims (article 6(1)(f) GDPR) and, where a legal obligation under Union or Member State law applies to us, compliance with that obligation (article 6(1)(c) GDPR) |
| Preventing payment fraud, in particular attempts to substitute bank details | Our legitimate interest and that of our customers in the security of payments (article 6(1)(f) GDPR) |
6.2 To obtain prices, we transmit to manufacturers the technical characteristics of your project, without your contact details.
6.3 No decision based solely on automated processing, including profiling, producing legal effects concerning you or similarly significantly affecting you, within the meaning of article 22 of the GDPR, is taken about you.
6.4 We do not process your data for purposes incompatible with those for which they were collected. In particular, we do not use the data of the quote request form or of the conversation window to send you prospecting messages unrelated to your request, and we do not use them for advertising targeting.
6.5 None of the processing described in this policy is based on your consent. Should we in the future propose a processing based on consent, we would obtain your consent beforehand, and you could withdraw it at any time, without affecting the lawfulness of the processing carried out before its withdrawal.
Article 7. Legitimate interests pursued
7.1 Where a processing is based on our legitimate interest, we have assessed that this interest is not overridden by your interests or fundamental rights and freedoms, taking into account the following elements.
7.2 Protection of our services. Counting submissions per IP address over one minute without keeping the address, and keeping only an encrypted fingerprint of the IP address of the users of the conversation window, are limited measures that do not allow us to identify you.
7.3 Business prospecting. Our messages are addressed only to professionals, at general addresses of establishments published by them, and concern products related to their professional activity. Their number is limited to two, each of them identifies us and allows you to object free of charge and simply, and an address that has not replied is deleted 12 months after our last message.
7.4 Audience measurement and country choice. The audience measurement does not use cookies or identifiers and produces only aggregated statistics. The "pays" cookie contains only the country or language that you have chosen and serves only to stop redirecting you.
7.5 Quality of the automated replies. Reading the conversations allows us to correct inaccurate replies and to ensure that the Conversation Window gives only verified information. Conversations are deleted automatically after 12 months.
7.6 Management of our business, claims and fraud prevention. These processing operations concern only the data of our prospective customers and customers that are necessary for those purposes.
7.7 You may object at any time to a processing based on our legitimate interest, on grounds relating to your particular situation, and at any time and without giving reasons to prospecting (Articles 14 and 15).
Article 8. Mandatory and optional data
8.1 The fields marked as mandatory in the quote request form are necessary for us to prepare a quote: without them, we cannot study your project. The other fields, in particular the telephone number, the name of the establishment, the timeframe and the message, are optional.
8.2 The provision of the data necessary for the conclusion and performance of a contract, in particular for invoicing, delivery and customs clearance, is a contractual requirement: without them, the order cannot be performed.
8.3 Leaving your contact details in the conversation window is optional. Without them, the Conversation Window can answer your questions, but we cannot contact you.
Article 9. Conversation window
9.1 The replies in the Conversation Window are produced by an automated system, based on artificial intelligence, and not by a person. The Conversation Window says so when it opens and answers truthfully if you ask whether you are speaking to a person, in line with the transparency requirements applicable to systems intended to interact with natural persons (Regulation (EU) 2024/1689, article 50).
9.2 The replies of the Conversation Window are drafted and checked with the help of automated conversation providers acting as our processors (Article 10.2). We exclude providers that retain the data or reuse them for their own purposes.
9.3 We read the conversations in order to check and improve the quality and accuracy of the replies of the Conversation Window (Article 6).
9.4 The Conversation Window provides general information and helps prepare your quote. It takes no decision about you, concludes no contract and never communicates bank details. Only the written quote binds us.
9.5 The Conversation Window does not access your browsing on other websites, does not deposit any cookie and does not use your conversation to build a profile of you for advertising purposes.
9.6 You may at any time ask to speak to a person. Your contact details and the transcript of the conversation are then transmitted to the Lodgeyard team (Article 4.3).
9.7 To limit abuse, repeated attempts to divert the Conversation Window from its purpose may lead it to stop answering the same connection for 30 days. This measure uses only the encrypted fingerprint of the IP address.
9.8 Conversations are deleted automatically 12 months after their last message. You may ask us to delete a conversation earlier by writing to contact@lodgeyard.com.
Article 10. Recipients
10.1 Within REXOR GROUP LLC
Your data are accessible only to the persons of REXOR GROUP LLC who need them to perform their tasks.
10.2 Processors
We use technical service providers that act on our instructions, as processors within the meaning of article 28 of the GDPR, under contracts that bind them to confidentiality and security:
- hosting and content delivery provider, established in the United States: hosting of the Website and of the conversation window, storage of quote requests and conversations, routing of emails, protection of the Website against attacks and abuse, audience measurement without cookies. This provider is also the host identified in the legal notice of the Website;
- email service provider, established in the United States: our mailbox, in which we receive the alerts of quote requests and our correspondence;
- automated conversation providers, established in the United States: drafting and checking of the replies of the Conversation Window (excluding providers that retain or reuse the data), and assistance with the drafting and sorting of our correspondence;
- internal team messaging service: transmission to the team of contact requests made in the conversation window, with the transcript of the conversation.
Each processor processes the data only for the service entrusted to it, and may not use them for its own purposes. A processor may engage another processor only under the conditions of article 28(2) and (4) of the GDPR, which imposes on it the same data protection obligations.
The list of our processors, with their names, is available on request at contact@lodgeyard.com.
10.3 Independent third parties
To prepare and perform your turnkey quote, we also transmit:
- your contact details and the address of your site to the partner installer named in the quote;
- for customs clearance, your corporate name and your EORI and VAT numbers to the freight forwarder acting on your behalf;
- to the carriers responsible for delivery, the delivery address and the contact details of the person who receives the delivery.
These undertakings process these data for their own contract with you or for the performance of their own services, under their own responsibility.
10.4 Authorities
Your data may be communicated to the competent public authorities where the law so requires, and to the extent necessary for the establishment, exercise or defence of legal claims.
10.5 No sale
Your data are neither sold nor rented.
Article 11. Transfers outside the European Union
11.1 Your data are processed outside the European Union:
- in the United States, where REXOR GROUP LLC and its hosting, email and automated conversation providers are located;
- in the Asia-Pacific region, where the database of the conversations of the conversation window is hosted;
- in the Philippines, from where its manager works;
- for the internal team messaging service, in the countries in which that service operates its infrastructure.
The Philippines are not the subject of an adequacy decision of the European Commission.
11.2 REXOR GROUP LLC being established outside the European Union, the data that you send to us are received outside the Union.
11.3 Safeguards. The transfers to our providers are governed by the standard contractual clauses adopted by the European Commission (Implementing Decision (EU) 2021/914 of 4 June 2021) and, for the hosting and content delivery provider, by the EU-U.S. Data Privacy Framework (Implementing Decision (EU) 2023/1795 of 10 July 2023). You may obtain a copy of these safeguards by writing to us.
11.4 Orders. If you place an order, the name of your company and the delivery address appear on the transport and customs documents for your units, which are prepared in China and handled by freight forwarders and carriers. These transfers, limited to what is necessary for the transport and customs clearance of the units, are carried out on the basis of the derogations provided for in article 49(1) of the GDPR for transfers necessary for the performance of a contract.
Article 12. Retention periods
12.1 We keep your data for the following periods:
| Data | Retention period |
|---|---|
| Establishment that we have contacted and that has not replied | Address deleted 12 months after our last message |
| Conversation in the conversation window, with the encrypted fingerprint of the IP address | Deleted automatically 12 months after its last message |
| Measure limiting the conversation window after repeated misuse | 30 days |
| Quote request and exchanges, if you do not become a customer | Three years from your last contact with us; the record of the form is deleted automatically three years after it is sent |
| Data of customers | The duration of the business relationship, then three years, subject to the periods imposed by law for accounting documents |
| Opposition list (prospecting) | At least three years, solely to avoid writing to you again |
| IP address used to limit abuse of the form | One minute, not kept |
| Country of connection used to direct you to your version | Neither recorded nor kept |
| "pays" cookie | 12 months |
| Conversation identifier kept in your browser (local storage) | Up to 12 months after your last message |
12.2 In the event of a claim or dispute, the data necessary for its handling are kept until it is finally resolved and the periods of appeal have expired.
12.3 At the end of these periods, the data are deleted or irreversibly anonymised.
12.4 We take reasonable steps to keep your data accurate and up to date. Please inform us of any change in the data that you have provided to us, in particular your contact details and those of your company.
Article 13. Security
13.1 Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with article 32 of the GDPR, including:
- encryption of the communications between your browser and the Website (HTTPS, with strict transport security);
- restriction of access to the data to the persons who need them;
- limitation of the number of submissions of the form and replacement of the IP address of the users of the conversation window by an encrypted fingerprint;
- automatic deletion of conversations and quote requests at the end of their retention period;
- a rule under which our bank details appear only on our pro forma invoices, and never in the conversation window.
13.2 Security also depends on you: do not send us sensitive data by email, check that you are on lodgeyard.com before entering information, and never make a payment to bank details that do not appear on our pro forma invoice, even if a message purporting to come from us asks you to do so.
13.3 In the event of a personal data breach, we notify the competent supervisory authority and, where required, the data subjects, in accordance with articles 33 and 34 of the GDPR.
Article 14. Your rights
14.1 Under the conditions and within the limits provided for by the GDPR, you have the following rights:
- right of access (article 15): to obtain confirmation that your data are or are not being processed and, where they are, a copy of them and information on their processing;
- right to rectification (article 16): to have inaccurate data corrected and incomplete data completed;
- right to erasure (article 17): to have your data deleted, in particular where they are no longer necessary or where you have objected to their processing, subject to the exceptions provided for by that article;
- right to restriction of processing (article 18): to have the processing of your data restricted, in particular while the accuracy of the data or the legitimacy of an objection is being verified;
- right to data portability (article 20): to receive the data that you have provided to us, in a structured, commonly used and machine-readable format, and to have them transmitted to another controller, where the processing is based on a contract and carried out by automated means;
- right to object (article 21): to object at any time, on grounds relating to your particular situation, to a processing based on our legitimate interest, and to object at any time, without giving reasons, to processing for prospecting purposes (Article 15);
- right to give instructions concerning the retention, erasure and communication of your data after your death, in accordance with article 85 of Law no. 78-17 of 6 January 1978.
14.2 To exercise your rights, write to contact@lodgeyard.com or to our postal address (Article 3). We may ask you for additional information where we have reasonable doubts about your identity (article 12(6) of the GDPR).
14.3 We reply within one month of receipt of the request. This period may be extended by two further months, taking into account the complexity and number of requests, in which case we inform you within the first month (article 12(3) of the GDPR). Exercising your rights is free of charge, except in the case of manifestly unfounded or excessive requests (article 12(5) of the GDPR).
14.4 Where we rectify or erase data, or restrict their processing, at your request, we communicate this to each recipient to whom the data have been disclosed, unless this proves impossible or involves disproportionate effort, and we inform you of those recipients if you so request (article 19 of the GDPR).
14.5 Where we cannot grant a request, in whole or in part, in particular because the data must be kept to comply with a legal obligation or for the establishment, exercise or defence of legal claims, we inform you of the reasons and of your right to lodge a complaint (Article 16).
14.6 If you ask us to erase your data and to no longer contact you, we keep only the information necessary to respect that request in the opposition list (Article 15).
Article 15. Objection to prospecting
15.1 You may at any time, without giving reasons and free of charge, refuse to receive our prospecting messages:
- by replying "STOP";
- or by writing to contact@lodgeyard.com.
15.2 You receive a confirmation within 48 hours.
15.3 Our prospecting messages are sent by email to professionals only, in accordance with article L34-5 of the French Postal and Electronic Communications Code and with the rules of the CNIL on business-to-business prospecting: they concern products related to the professional activity of the recipient, identify REXOR GROUP LLC and the Lodgeyard brand, and indicate how to object to receiving further messages.
15.4 When you object, we keep your address in an opposition list, which serves only to ensure that we no longer write to you, for at least three years.
Article 16. Complaints
16.1 If you consider that your rights are not respected, you may lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (cnil.fr), or with the supervisory authority of the Member State of the European Union in which you have your habitual residence or your place of work, or in which the alleged infringement took place (article 77 of the GDPR).
16.2 You may also write to us beforehand at contact@lodgeyard.com, so that we can try to resolve your request.
Article 17. Cookies and similar technologies
17.1 The Website deposits no audience measurement or advertising cookie. We measure the audience without cookies or identifiers. The conversation window deposits no cookie and writes nothing in your browser before you open it by clicking on it. It then keeps in the session storage of your browser, deleted when the tab is closed, its display settings and its open or closed state during the visit and, on rexorcloser.com, which displays it, its display texts and settings. Once you have sent a first message, it also keeps the identifier of your conversation in the local storage of your browser, on lodgeyard.com and on rexorcloser.com, for 12 months after your last message, as long as the conversation itself is kept, so that the conversation can pick up where it left off when you come back. This identifier is used for nothing else: no advertising, no tracking from one website to another. You can also erase it from the conversation window, with the "New conversation" link. You can erase it by clearing the data of the Website and of rexorcloser.com in your browser; the conversation then no longer resumes automatically, but it remains kept and can be deleted on request, as described in Article 9.8. Our hosting provider may deposit a technical cookie strictly necessary for the security of the Website. If you choose a country or a language yourself, the functional "pays" cookie remembers that choice for 12 months.
17.2 These trackers are strictly necessary for the provision of the service that you request or for the security of the Website and do not require consent. The conversation identifier, in particular, is written only from your first message and serves only to provide the conversation that you have requested. They are described in detail in our Cookie Policy.
Article 18. Minors
The Website is intended for professionals. It is not directed at minors, and we do not knowingly collect personal data concerning persons under the age of fifteen.
Article 19. Third-party websites
The Website may contain links to websites of third parties, in particular of public bodies. We have no control over their processing of personal data, which is governed by their own policies.
Article 20. Changes to this policy
20.1 We may amend this policy, in particular to take account of legal, regulatory or technical developments. The version in force is the one published on the Website, with its version number and date.
20.2 Where a change significantly affects the processing of your data, we inform you of it by appropriate means before it takes effect.
20.3 Previous versions of this policy are available on request at contact@lodgeyard.com.
Article 21. Language and contact
21.1 This policy is published in French at /juridique/politique-de-confidentialite and in English. In the event of discrepancy, the French version prevails.
21.2 For any question: contact@lodgeyard.com, or REXOR GROUP LLC, 8206 Louisiana Blvd NE, Ste A #9493, Albuquerque, NM 87113, United States of America.
Version 2.1 of 28 October 2026. Related documents: Legal information · Cookie Policy · Legal Notice · General Terms of Sale · Website Terms of Use.