Privacy Notice

Last updated: 2 September 2026

Who we are

The data controller for this website is Lorne Vale, a French société par actions simplifiée (SAS) currently being registered (en cours d’immatriculation), with registered office at 47 rue Vivienne, 75002 Paris, France. For any privacy request, contact contact@lornevale.com.

This notice covers lornevale.com. Enquiry data that Lorne & Vale processes for client law firms is a separate matter: there, the firm is the controller, Lorne & Vale acts as a processor under a Data Processing Agreement, and the firm’s own privacy notice applies.

Analytics and your language preference

The site uses Vercel Web Analytics to measure visits and selected interactions. It stores your language preference in the browser. Forms also send the page of origin and, where present, a campaign reference. The embedded calendar is provided by Calendly. This notice specifies the technical data, retention periods and conditions that apply to these services.

What we collect, and why

Visiting the site. Our hosting provider processes technical data such as your IP address in server logs, for security and to deliver the pages. Legal basis: legitimate interest in running a secure website.

Writing to us or requesting the intake audit. The forms on this site, the contact form and the 15-minute intake audit request, collect your name, work email, firm and whatever you choose to write. The audit request adds your firm’s size, main practice area, an estimate of enquiry volume and, if you give one, a phone number. These submissions pass through a server function at our hosting provider, which screens out automated traffic, then through our n8n intake workflow, which routes them to us. They are used only to reply to you, prepare the audit and follow up on it. Legal basis: steps taken at your request before entering a contract, and our legitimate interest in responding to you.

Using the illustrative preview. The preview runs locally in your browser. Text entered there is not sent to Lorne & Vale or an AI provider. Do not use real client or confidential information in a sample interface.

Booking a call. Scheduling runs on Calendly, which collects the details you enter there under its own privacy notice.

Who processes it for us

We use a small number of service providers acting on our instructions: Vercel (website hosting and serverless functions), n8n (workflow automation that routes form submissions to us), and Calendly (scheduling). For client workflows operated under a firm’s Data Processing Agreement, the current pilot security pack also lists OpenAI for AI processing. The illustrative preview does not send its text to OpenAI or another model provider. We do not sell personal data, share it for advertising, or pool it across clients.

International transfers

Some of these providers are located in the United States. Where personal data leaves the EEA, the transfer relies on an adequacy decision, including the EU-US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses.

How long we keep it

Messages sent through this site’s forms and related correspondence are kept for as long as needed to handle your request and for up to 24 months after our last contact, then deleted. Preview text stays in your browser and is not received or stored by Lorne & Vale. Hosting logs are retained by the provider for short technical periods.

Your rights

Under the EU GDPR you can ask for access to your data, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interest. Write to contact@lornevale.com and we will respond without undue delay. You may also lodge a complaint with the CNIL (cnil.fr).

Lorne & Vale does not provide legal advice, does not create a lawyer-client relationship, and does not make legal decisions.