Privacy policy

1. Who is responsible for your data

RELOADED, 4 route de Peylon, 33380 Mios, France (full identification in the Legal notice), is the controller for the processing described below.

Contact for any question about your data or to exercise your rights: [TO BE COMPLETED: dedicated address, e.g. donnees@rlod.io], or by post to the registered office.

[TO BE DECIDED: appointment of a data protection officer — not mandatory a priori for RELOADED's activity; to be confirmed.]

The site is addressed to professionals. The data processed is that of the contacts of our clients, prospects, partners and members.

2. What we do not do

— We do not track your browsing from page to page and link it to your identity.

— We use no advertising cookie and no social network tracker.

— We do not sell your data and we do not rent it.

— We do not cite your organisation as a reference without its written agreement.

3. The data we process, why, and for how long

Consulting, contact, demonstration, estimate, study or network membership enquiry — Data: Name, organisation, role, e-mail, telephone, sector, message; modules selected, platform or network concerned; page, audience or module the enquiry comes from — Purpose: Answer your enquiry, acknowledge it by e-mail, arrange a discussion or a demonstration, prepare an estimate, a study or a membership — Legal basis: Pre-contractual measures taken at your request; legitimate interest (answering professional enquiries) — Retention: 3 years after your last contact, unless a contractual relationship exists

Client account [the client area is not open at present: this processing will apply when it opens] — Data: Surname, first name, business e-mail, telephone, organisation, role, assigned pricing profile, password (stored in irreversibly encrypted form), sign-in dates — Purpose: Create and manage your account; give you access to your prices, selections, estimates, enquiries and licences — Legal basis: Performance of the contract or pre-contractual measures — Retention: For as long as the account exists; an inactive account is deleted or anonymised after [TO BE DECIDED: 3] years, after notice

Selection and no-commitment estimate — Data: Products, quantities and options selected, estimate generated, date — Purpose: Let you prepare a requirement; send us your estimate so we can get back to you — Legal basis: Pre-contractual measures taken at your request — Retention: 3 years after the account's last activity, except for quotes or orders (kept as set out below)

Relationship history and client report [tied to the client area, not open at present] — Data: Actions carried out in your account: contact details and their updates, selections, estimates, enquiries, appointments, tickets, orders, downloads (sheets, guides), subscriptions, use of the simulators — Purpose: Follow the commercial relationship, prepare our discussions, handle your requests; answer your access and portability requests — Legal basis: Legitimate interest (management of the commercial relationship) — Retention: Duration of the relationship, then 3 years after the last activity

Quotes, orders, invoicing — Data: Billing details, quotes, orders, invoices, payments — Purpose: Draw up and perform contracts, invoice, keep the accounts — Legal basis: Performance of the contract; legal obligation — Retention: 10 years for accounting records (article L123-22 of the French Commercial Code); contractual data 5 years after the end of the relationship

Support and tickets — Data: Identity, organisation, subject and content of the request, exchanges, attachments — Purpose: Handle your support requests — Legal basis: Performance of the contract (licence, maintenance, membership); legitimate interest for non-clients — Retention: [TO BE DECIDED: 3] years after the ticket is closed

Membership of an integrator network — Data: Identity and e-mail of the people holding a seat, membership, progress and assessment reports for the training followed — Purpose: Provide the membership (access to the tools, the knowledge base, the resources, the training, the support) — Legal basis: Performance of the contract — Retention: Duration of the membership, then 3 years; training reports [TO BE DECIDED]

Newsletters (release notes) — Data: E-mail, name, organisation, chosen subscriptions, date and proof of consent — Purpose: Send you the information you subscribed to — Legal basis: Consent (double opt-in) — Retention: Until you unsubscribe; proof of consent kept [TO BE DECIDED: 3] years

Security of the site and the client area — Data: Technical logs (IP address, date, request), log of client report consultations by our team — Purpose: Prevent abuse and secure access — Legal basis: Legitimate interest (security) — Retention: [TO BE DECIDED: 6 to 12] months

Mandatory fields are marked in the forms: your profile, your name, your company and your work e-mail, plus your message for a question or a study. Without them we cannot handle the request.

4. Audience measurement

We measure site traffic with a tool hosted in France, without cookies and without personal data: number of visits, pages viewed, referrer (search engine, assistant, link), device type. These statistics are anonymous and are never linked to a person or to an account.

We also use Google Search Console and Bing Webmaster Tools, which tell us about the site's presence in search engines, with no tracker installed on the site.

5. Cookies and storage in your browser

rd_session session cookie [set only when the client area is open; it is not open at present] — Role: Keep you signed in to your client area — Duration: 7 days — Consent: Not required (strictly necessary)

Remembering your selection of modules, in your browser's local storage — Role: Keep your selection from one page to the next, until your estimate request — Duration: Until your estimate request is sent (a demonstration request keeps it), or until you clear the site's data in your browser — Consent: Not required (records your choice)

Remembering your display preferences, in your browser's local storage — Role: Keep the light or dark theme you chose, and avoid showing you twice the reminder that suggests requesting an estimate — Duration: Until you clear the site's data in your browser — Consent: Not required (records your choice)

No other cookie or tracker is used. [TO BE UPDATED if a third-party tool (appointment booking, support, payment) sets one.]

6. Who has access to your data

— Our team, according to their roles (sales, technical, support, administration); access to client reports is restricted and logged.

— Our processors, bound by contract and acting on our instructions:

OVH SAS [TO BE CONFIRMED — D12: host under consideration as at 13 October 2026] — Role: Hosting of the site and its database — Data location: France [TO BE CONFIRMED]

Sellsy [TO BE CONFIRMED: entity] — Role: Sales management, quotes, invoicing (accounts and enquiries are synchronised there) — Data location: [TO BE COMPLETED]

[TO BE COMPLETED: e.g. Zammad, hosting to be specified] — Role: Support and tickets — Data location: [TO BE COMPLETED]

[TO BE COMPLETED] — Role: Sending e-mails (acknowledgements of enquiries, confirmations, estimates, newsletters) — Data location: [TO BE COMPLETED]

[TO BE COMPLETED] — Role: Booking demonstration appointments — Data location: [TO BE COMPLETED]

[TO BE ENABLED with online purchasing — D14] — Role: Payment — Data location: [TO BE COMPLETED]

— The authorities, upon legal request.

We do not pass your data on to third parties for commercial purposes.

7. Transfers outside the European Union

We favour providers hosting data within the European Union. [TO BE COMPLETED: if a processor transfers data outside the EU, state the country and the applicable safeguard — adequacy decision or standard contractual clauses of the European Commission.]

8. Your rights

You have the following rights over your data:

— access: obtain a copy of your data — we provide you with the data we hold about you and, where you have an account, the report that sets out its entire history;

— rectification: correct inaccurate data (on request; directly in your client area once it is open);

— erasure;

— restriction of processing;

— objection to processing based on our legitimate interest;

— portability: receive your data in a structured, machine-readable format (the report is also available in CSV and JSON);

— withdrawal of your consent at any time, for the newsletters (unsubscribe link in every mailing);

— instructions on what happens to your data after your death.

To exercise them: [TO BE COMPLETED: dedicated address]. We answer within one month, extendable by two months if the request is complex; we may ask you to prove your identity in case of doubt.

Some data cannot be erased while a legal obligation requires it to be kept (accounting records, for example).

If you consider that your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

9. Security

We implement appropriate measures: encryption of exchanges (HTTPS), passwords stored in irreversibly encrypted form, restricted and logged access, hosting in France [TO BE CONFIRMED — D12], regular backups, processors contractually bound on security.

10. Data processed on behalf of our clients

This policy covers the data processed by the site and for the commercial relationship. Data that RELOADED may process on behalf of its clients as part of a service or hosting arrangement (for example data from a building's installations) falls under a processing agreement entered into with each client (article 28 GDPR).

When you use our agentic modules with the assistant and the artificial intelligence provider of your choice, the data exchanged with that provider is governed by that provider's own terms.

11. Changes

We may update this policy, in particular as the site changes. The date of the last update appears at the top. In the event of a significant change (new purpose, new type of data), we will inform you by e-mail, or in your client area once it is open.