Contents
- We collect what you type into the demo request form, and what you choose when you book a time.
- Our analytics use no cookies. Advertising, affiliate and session-recording tags load only if you accept them.
- Demo requests reach our sales team through Telegram, a service outside the European Economic Area, and are kept for 24 months.
- You can ask to see, correct or delete your data at any time: privacy@thereflection.io.
This policy covers the website thereflection.io. When your company uses The Reflection platform, we process your employees’ data on its behalf under a data processing agreement; that processing is described in the agreement and on our Trust and security page.
01Who we are
The controller of personal data collected on this website is:
| Company | THE REFLECTION SAS, a French simplified joint-stock company |
|---|---|
| Registered office | 11 Rue Carnot, 94270 Le Kremlin-Bicêtre, France |
| SIREN | 925 090 425 |
| Legal representative | Petr Kanaev, President |
| Privacy contact | privacy@thereflection.io |
[Data protection officer: appointed or not, and contact if appointed]
02What we collect and why
We collect only what we need to answer your request and to understand how the website is used.
| When | What we collect | Why | Legal basis |
|---|---|---|---|
| Demo request form | Work email, name, company, team size; optionally what you want to practice and a comment; the page you sent the form from and the site language | To answer your request and prepare the demo | Steps at your request before a contract (GDPR art. 6(1)(b)) and our legitimate interest in answering business inquiries (art. 6(1)(f)) |
| Booking a time | Name and email from the form, passed to Calendly when you choose Pick a time after sending it, and the time you book there | To schedule the demo | Steps at your request before a contract (art. 6(1)(b)) |
| Website analytics | Pages visited, referrer, browser, device type and country, counted without cookies by Plausible, which we host ourselves | To see which pages are useful | Legitimate interest (art. 6(1)(f)). Your IP address is used only at the moment of the visit, to determine the country and a daily hash, and is not stored. The requests that send visit statistics are not written to our server logs. |
| Advertising, affiliate links and session recording | Google Ads and LinkedIn Insight Tag conversion data; Lemon Squeezy affiliate referral data; Microsoft Clarity session recordings with form fields hidden | To measure campaigns and affiliate referrals, and to fix usability problems | Your consent (art. 6(1)(a)), given in the cookie banner and withdrawable at any time |
| Cookie banner choice | A random ID also kept in the tr_consent cookie, the banner version, the categories you accepted, how you chose (accept all, reject all, your own selection or withdrawal), the site language and the time. No IP address and no details about your browser | To show that you gave or refused consent to cookies and tags | Our legal obligation to be able to demonstrate consent (art. 6(1)(c) and art. 7(1)) |
| Emails with us | Your email address and what you write | To reply and keep a record of the conversation | Legitimate interest (art. 6(1)(f)) |
We do not sell personal data, and we do not use it to make decisions about you by automated means.
03Who receives your data
Personal data is seen by the people at The Reflection who need it, and by the following service providers.
| Recipient | What it does | Where |
|---|---|---|
| Telegram Messenger Inc. | Delivers demo requests to our sales team | Outside the EEA [country] |
| Calendly LLC | Booking the demo time, once you follow the link after the form. This website does not load Calendly | United States |
| Hetzner Online GmbH | Hosts this website and its visit statistics | Germany |
| Google, LinkedIn, Microsoft | Advertising measurement and session recording, only with your consent | [Entities and countries] |
| Lemon Squeezy | Tracks visits from our affiliate partners’ links, only with your consent | Link, LLC (formerly Lemon Squeezy LLC), United States |
| [Email provider] | Our email | [Country] |
04Transfers outside the EEA
Some recipients are outside the European Economic Area. Telegram, which delivers demo requests to our sales team, and Calendly, which books the demo, process data outside the EEA.
[Legal basis for each transfer outside the EEA: adequacy decision, EU–US Data Privacy Framework certification or standard contractual clauses. Text to be written with a lawyer.]
05How long we keep it
- Demo requests: 24 months from the request. Once a month we delete requests older than that.
- Cookie banner choices: 13 months after the end of the month you made the choice, then deleted automatically.
- Bookings: [Period]
- Analytics: 25 months.
- Advertising and session recordings: [Period per provider]
- Emails: [Period]
06Cookies and tags
The website sets no advertising or analytics cookies until you accept them in the cookie banner. You can change your choice at any time from the link in the footer. Each choice is recorded on our server without your IP address, so we can show what you agreed to. The full list of cookies and tags is in our cookie policy.
07Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy;
- have it corrected if it is wrong, or deleted;
- restrict how we use it, or object to processing based on our legitimate interest;
- receive data you gave us in a portable format;
- withdraw your consent at any time, without affecting processing before you withdrew it;
- give instructions on what happens to your data after your death, as French law allows.
Write to privacy@thereflection.io. We answer within one month. If you think we have not handled your data properly, you can complain to the French data protection authority, the CNIL (cnil.fr), or to the authority in the country where you live or work.
08Security
[Security measures for the website and the form: encryption in transit, access control, who at The Reflection can read demo requests]
09Children
This website is for business visitors. It is not directed at children, and we do not knowingly collect their data.
10Changes to this policy
When we change this policy, we update this page and the date at the top. If a change affects how we use data you have already given us, we will tell you before it applies.
11Contact
Questions about this policy or your data: privacy@thereflection.io, or by post to THE REFLECTION SAS, 11 Rue Carnot, 94270 Le Kremlin-Bicêtre, France.