Privacy Notice

Last updated: 29 July 2026

Who we are

The data controller for this website is Lorne Vale, a French société par actions simplifiée (SAS) currently being registered (en cours d’immatriculation), with registered office at 47 rue Vivienne, 75002 Paris, France. For any privacy request, contact contact@lornevale.com.

This notice covers lornevale.com. Enquiry data that Lorne & Vale processes for client law firms is a separate matter: there, the firm is the controller, Lorne & Vale acts as a processor under a Data Processing Agreement, and the firm’s own privacy notice applies.

No cookies, no trackers

This website sets no cookies and runs no analytics, advertising, or tracking scripts of any kind. There is nothing to consent to, which is why you see no cookie banner. If you send us a form, we add one line to your message recording which page you sent it from and, where you followed a link we shared, the campaign tag in that link. It tells us which of our own pages are useful. That line travels with your message and is not stored on your device. The one thing this site does keep on your device is your language choice, EN or FR, so the site opens in the language you picked. It is a preference, not an identifier, and clearing your browser data removes it. Nothing is recorded for visitors who never contact us, and none of it is used to follow you across other websites.

What we collect, and why

Visiting the site. Our hosting provider processes technical data such as your IP address in server logs, for security and to deliver the pages. Legal basis: legitimate interest in running a secure website.

Requesting the pilot security pack. The form on the Security page collects your name, work email, and firm, used only to send the pack and follow up on it. Legal basis: steps taken at your request before entering a contract, and our legitimate interest in responding to you.

Trying the live demo. If the live engine is enabled, the enquiry text you type is processed transiently to generate the sample brief shown on the page. It is analysed, returned, and not used for any other purpose. Do not paste confidential, legally privileged, or time-sensitive information into the demo. Legal basis: legitimate interest in demonstrating the service you asked to see.

Booking a call. Scheduling runs on Calendly, which collects the details you enter there under its own privacy notice.

Who processes it for us

We use a small number of service providers acting on our instructions: Netlify (website hosting and serverless functions), n8n (workflow automation that routes form submissions to us), OpenAI (AI analysis of demo text, excluded from model training by default and retained by the provider for a maximum of 30 days for abuse monitoring), and Calendly (scheduling). We do not sell personal data, share it for advertising, or pool it across clients.

International transfers

Some of these providers are located in the United States. Where personal data leaves the EEA or the UK, the transfer relies on an adequacy decision, including the EU-US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses.

How long we keep it

Security pack requests and related correspondence are kept for as long as needed to handle your request and for up to 24 months after our last contact, then deleted. Demo text is processed transiently and is not stored by Lorne & Vale. Hosting logs are retained by the provider for short technical periods.

Your rights

Under the EU GDPR and UK GDPR you can ask for access to your data, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interest. Write to contact@lornevale.com and we will respond without undue delay. You can also lodge a complaint with the CNIL (cnil.fr) or, in the UK, the ICO (ico.org.uk).

Lorne & Vale does not provide legal advice, does not create a lawyer-client relationship, and does not make legal decisions.