Privacy Policy

1. Data Controller

• Reelixy
• Contact email: info@reelixy.com

2. Scope

This policy applies to personal data processed through the Reelixy website and related communication channels when you request consultations, submit forms, or interact with our content.

3. Data We Collect

• Contact and request data: name, email, company name, and message details submitted via forms.
• Technical and usage data: IP address, browser/device metadata, pages visited, referral source, and interaction events.
• Communication data: messages and follow-up correspondence related to your inquiry.

4. Legal Bases for Processing

• Performance of a contract or pre-contractual steps (e.g., handling your request).
• Legitimate interests (service quality, analytics, website security, fraud prevention).
• Consent, where required by law (for optional analytics/cookie processing).
• Compliance with legal obligations.

5. Why We Process Your Data

• Respond to inquiries and provide consultation/services.
• Prepare project proposals and communicate delivery details.
• Operate, secure, and improve website performance and user experience.
• Maintain records required for legal, tax, and compliance purposes.

6. Cookies and Analytics

We use analytics tools (including Google Analytics) to measure traffic and improve the website. We do not intentionally collect special-category personal data through analytics events. You can manage cookies via browser settings; where required, consent mechanisms apply.

7. Sharing and Processors

• Infrastructure and hosting providers (e.g., Vercel).
• Database and backend service providers (e.g., Supabase).
• Analytics providers (e.g., Google Analytics).
• Professional advisors or public authorities when legally required.
• We do not sell personal data.

8. International Transfers

Your data may be processed outside your country. When transfers are required, we use appropriate safeguards, such as contractual protections and provider security commitments.

9. Retention

• Inquiry/contact records are generally retained for up to 24 months after last meaningful interaction.
• Technical logs and security records are retained for up to 12 months unless longer retention is required.
• Data may be retained longer where necessary to comply with legal obligations or resolve disputes.

10. Security Measures

• HTTPS encryption in transit.
• Access controls and role-based permissions.
• Infrastructure hardening and security headers.
• Monitoring, audit logging, and incident response procedures.

11. Your Privacy Rights

• Right of access, correction, and deletion.
• Right to restrict or object to certain processing.
• Right to data portability where applicable.
• Right to withdraw consent (when processing is consent-based).
• Right to lodge a complaint with your local data protection authority.

12. Children’s Privacy

Our services are not directed to children. We do not knowingly collect personal data from minors. If you believe a child submitted data, contact us and we will remove it.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices, and we recommend reviewing their policies separately.

14. Policy Updates

We may update this Privacy Policy from time to time. Material updates will be reflected on this page with a revised “Last updated” date.