Privacy Policy – Centralys

1. Data controller

Centralys LTD
Company number: 14217440
Registered office: 3rd Floor Suite, 207 Regent Street, London, England, W1B 3HH
Website: centralys.co
Email: contact@centralys.co

2. Data collected

When you use this site and submit the contact form, we collect:

• First and last name
• Business email
• Phone number
• Company name
• Free-text message

Electronic signature of documents

When you view and electronically sign a document via our platform (quote, contract), we collect the following data, which constitutes the evidence file for the signed document:

• IP address
• Device, browser, and operating system type
• Timestamps and viewing time for each page of the document
• Approximate geographic location, only with your explicit consent via your browser's permission request, to prefill the “Signed at” field

This data is collected on the basis of our legitimate interest in ensuring the evidentiary value of signed documents (eIDAS Regulation No. 910/2014), and you are informed of this by a dedicated banner on the signature page.

3. Purposes of processing

Your data is used solely to:

• Respond to your contact request
• Offer you a 30-minute discovery call
• Prepare a personalized mockup if you request one
• Send you information about our services (with your consent)

4. Legal basis

The processing of your data is based on your explicit consent (checkbox on the form) and on taking pre-contractual steps at your request.

5. Retention period

Your contact data is retained for 3 years after our last exchange, unless you request its deletion. The data in the electronic signature evidence file is retained with the signed document for 10 years, for legal audit purposes (eIDAS Regulation).

6. Data recipients

Your data is accessible only to the Centralys team. We use the following service providers to operate the site:

• Vercel (hosting) — data processed in the EU
• Supabase (database) — data processed in the EU
• Calendly (call scheduling) — data processed in the United States (standard contractual clauses)
• Meta (Facebook Pixel) — for ad tracking (with your consent)

7. Your rights

Under the GDPR, you have the following rights:

• Right of access to your data
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw your consent at any time

To exercise these rights, contact us at contact@centralys.co. You also have the right to lodge a complaint with the CNIL (cnil.fr).

8. Cookies

A banner asks for your choice on your first visit; no non-essential tracker is loaded before then. Your choice (accepted or declined) is stored for 6 months, then requested again. Three categories:

• Necessary — site operation and remembering your choice (always active).
• Audience measurement — Google Analytics 4 and PostHog (browsing statistics, session recording with input masking). Vercel Analytics, which is cookieless and aggregated, is not covered.
• Advertising — Meta pixel (Facebook / Instagram), only with your consent.
• Third-party content — embedded Calendly calendar for booking calls, which sets its own cookies: displayed only with your approval (or when you click).

You can change your choice at any time: manage my cookies.

9. Security

We implement appropriate security measures:

• HTTPS encryption
• Restricted data access
• Secure authentication
• Regular backups

10. Contact

For any questions about this privacy policy or the processing of your data, contact us: