Privacy Policy
This policy explains how Transiflow collects, uses and protects your personal data when you use transiflow.com. Last updated: 30 August 2026.
1. Data controller
The data controller is Transiflow, a French SASU with a share capital of €1,000, registered office at Bureau 326, 59 rue de Ponthieu, 75008 Paris, France, registered with the Paris Trade Register under number 102 606 936. Contact: [email protected].
2. Data we collect
Contact form: first name, last name, email address, phone number, and where provided your website URL, the service you are interested in and your message. This data is used solely to answer your request.
Call booking: if you book a call, scheduling is handled by Google Calendar (Google Ireland Ltd). The information you enter there (name, email) is processed by Google under its own privacy policy.
Analytics and site improvement: pages visited, traffic source, device type, interactions with pages. See the cookies section below.
We do not collect any sensitive data and we never sell or rent your data to third parties.
3. Legal basis and purposes
- Answering your contact and quote requests: pre-contractual measures (Article 6.1.b GDPR)
- Analytics and site improvement: your consent (Article 6.1.a) collected through the cookie banner, or legitimate interest for consent-exempt audience measurement
- Follow-up related to your request: legitimate interest (Article 6.1.f), with the right to object at any time
4. Tools we use and recipients
Contact form email delivery: Resend (Plus Five Five, Inc., USA). Your messages arrive directly in our inbox.
Hosting: Cloudflare, Inc. (USA), served from servers located in Europe.
Google Analytics 4 (audience measurement) and Google Calendar (call booking): Google Ireland Ltd.
PostHog (usage analytics and session replay, hosted in the European Union): helps us understand user journeys and fix usability issues. Form fields are masked in recordings.
Umami (aggregated, cookieless statistics).
Some of these providers are located in the United States: transfers are governed by Standard Contractual Clauses or the EU-US Data Privacy Framework.
5. Cookies and trackers
On your first visit, a banner lets you accept or refuse analytics cookies. If you refuse, only consent-exempt tools (aggregated, anonymous statistics) remain active. You can also configure your browser to block cookies or delete those already set.
6. Retention periods
- Contact requests: 3 years after the last exchange
- Client data (quotes, invoices): 10 years under accounting obligations
- Analytics data: 14 months maximum
7. Your rights
Under the GDPR and the French Data Protection Act, you have the right of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to withdraw your consent at any time.
To exercise these rights, write to [email protected]: we reply within 30 days. You may also lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).
8. Security
The site is served entirely over HTTPS. Access to the tools listed above is limited to the people who need it and protected by authentication. No banking data is collected on this site.
9. Changes
This policy may evolve along with the tools used on the site. The last update date is shown at the top of the page. For legal information about the site publisher, see the legal notice.