Privacy Policy
This page describes what reeftox.com collects, why, and what you can ask us to do about it. It covers this website only. Data you send us inside a testing engagement is governed by the contract and the confidentiality terms of that engagement, not by this page.
Last updated 25 August 2026
Who is responsible
The data controller is EcoSeaStems SAS, trading as ReefTox, 18 Parc Acti de l'Estuaire, 56190 Arzal, France.
For anything on this page, including a request to access or delete your data, write to info@reeftox.com.
What we collect, and why
When you contact us
The quote and scoping forms on this site are embedded from Fillout, which processes the submission on our behalf. We receive what you type: typically your name, company, email address and a description of the formulation, product or programme you want tested. We use it to answer you and to scope the work, which is the pre-contractual step you asked for. If you email us directly, we hold that correspondence for the same reason.
Cookies and measurement
Audience and performance measurement runs on every page through Vercel. It is cookieless and aggregate: it counts visits and page timings, and does not build a profile of you or follow you to other sites.
Two further tools load only if you allow them in the cookie banner, and nothing is set until you choose: Google Analytics if you accept analytics, and the LinkedIn Insight Tag if you accept marketing.
Your choice is kept in your own browser, not held by us as an identifier, and we ask again after about six months. You can change it at any time from the Cookie settings link in the footer.
Who else sees it
We do not sell personal data and we do not share it for anyone else's advertising. It reaches only the providers that make the site and the enquiry work: Vercel (hosting and analytics), Fillout (form submissions), and, where you consented, Google and LinkedIn. Some of these operate outside the EU; those transfers rely on the European Commission's standard contractual clauses.
Our host keeps ordinary server logs, including IP addresses, for a short period for security and abuse prevention.
How long we keep it
Enquiries that do not become engagements are kept for up to three years from our last exchange, so we can pick the conversation back up. Enquiries that do become engagements are kept for the life of the contract and the retention period the law imposes on the records that follow it. Aggregate analytics carry no identifier and are kept as long as the measurement is useful.
Your rights
Under the GDPR you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. Where we rely on consent, you can withdraw it at any time without affecting what happened before.
Write to info@reeftox.com and we will answer within one month. If you are not satisfied, you can complain to the CNIL, the French supervisory authority, at cnil.fr.
Changes
If we add a processor or a tag, we update this page and move the date at the top. Material changes to what the consent banner asks for will re-trigger the banner.