Personal data
Privacy policy
How information submitted through the website is collected, used and protected.
Data controller
URLab, a French SAS registered under number 929 199 347 RCS Nanterre, is the controller for the processing described on this page.
For questions about your personal data, email contact@urlab.ai.
Data concerned
The form collects your first name, last name, professional email address, organisation and job title. These fields are required to submit an enquiry. The message is optional. Please do not include sensitive data or confidential information about policyholders.
The IP address forwarded to the server is used to limit abusive form submissions. When Google Analytics is enabled and accepted, browser identifiers, pages viewed, clicks to contact, the start of form entry and confirmed submissions are processed to measure traffic and enquiries. No form fields are sent to Google Analytics. Only public page URLs and filtered campaign codes are included.
Purposes and lawful bases
Form data is used to respond to your enquiry and prepare the professional discussion you requested. Submission limits protect the form against abuse.
This processing is based on URLab’s legitimate interests in responding to professional enquiries and protecting its website. Optional audience measurement relies on your consent, which you can withdraw at any time in cookie settings.
Recipients and service providers
Enquiries are emailed to the URLab team responsible for responding. The website uses Resend to send these emails. Vercel hosts the website; Microsoft 365 handles the receiving mailboxes.
Google Analytics is used only when audience measurement is enabled and you accept it. Contracting entities, processing locations and any access or transfers outside the European Economic Area must be checked in provider contracts. This version makes no claim of exclusively European hosting.
Retention periods
Prospect enquiries received through the form and related emails are retained for no more than three years after the last contact initiated by you, then deleted.
Retention periods for technical logs and abuse-prevention data remain to be defined and implemented. Google Analytics is configured to retain event-level data for 2 months and user-level data for 14 months, with the user period reset on new activity. These settings do not govern aggregated standard reports.
Your cookie choice is valid for 180 days. This is not the retention period for contact enquiries or audience measurement data.
Your rights
Subject to the conditions set by the GDPR, you can request access, rectification, erasure or restriction of processing. Depending on the processing and its lawful basis, you may also have rights to object and to data portability.
To exercise your rights, email contact@urlab.ai or write to URLab’s registered office. You can withdraw consent to audience measurement using ‘Manage cookies’ in the footer. Withdrawal does not affect the lawfulness of processing carried out beforehand.
You can also lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL).
Security
The form includes field validation, a bot trap and submission limits. Hosting, email and internal access security measures must be documented before publication. This page does not claim certification.