Your data
Last updated: 26 June 2026
This privacy policy is intended to inform users of the UPTILL website about how their personal data may be collected, used, stored, protected and shared when they browse the website, submit a contact request or book an appointment.
UPTILL undertakes to process personal data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
Information about data processing must be provided in a concise, transparent, intelligible and easily accessible form.
The data controller is:
UPTILL
Simplified joint-stock company (société par actions simplifiée) with a share capital of €1,000
Company being registered with the Lyon Trade and Companies Register (RCS)
Registered office: 671 route des 7 Chemins, 69530 Orliénas, France
Contact: via the contact form available on the website
Once the company is registered, its SIREN and RCS details will be added to this policy.
When the website is used, UPTILL may collect the following data:
UPTILL takes care to collect only the data that is necessary for the purposes pursued.
Data may be collected when the user:
The website may contain a link to HubSpot or integrate HubSpot features enabling appointment booking, the management of sales enquiries or the follow-up of exchanges.
HubSpot states that it may act as a processor when its customers use its products to collect and process personal data in the course of sales, marketing or customer relationship management activities.
The personal data collected by UPTILL may be used for the following purposes.
UPTILL processes the data submitted in order to respond to requests for information, qualify the needs expressed and get back to the people who contacted the company.
Legal basis: taking steps prior to entering into a contract at the request of the data subject, or UPTILL's legitimate interest.
Data provided via the appointment booking tool is used to schedule, confirm, change or follow up on an appointment.
Legal basis: taking steps prior to entering into a contract, or UPTILL's legitimate interest.
UPTILL may enter the information provided into a CRM tool in order to follow up on exchanges, contact prospects again, keep a history of interactions and offer suitable services.
Legal basis: UPTILL's legitimate interest in developing its business with a professional clientele.
UPTILL may use the business contact details provided by a prospect to send them communications about its services, provided these communications relate to their professional activity.
Legal basis: UPTILL's legitimate interest, subject to the data subject's right to object.
With regard to B2B direct marketing, the French data protection authority (CNIL) states in particular that individuals must be informed of the use of their data and be able to object to it.
Certain technical data may be processed to ensure the proper operation of the website, its security and maintenance, fraud prevention, the detection of technical incidents and performance improvements.
Legal basis: UPTILL's legitimate interest in ensuring the security and availability of its website.
Certain data may be retained in order to comply with the legal, regulatory, accounting, tax or administrative obligations applicable to UPTILL.
Legal basis: legal obligation.
Where certain data is necessary to process a request or book an appointment, the corresponding fields may be marked as mandatory.
If the mandatory information is not provided, UPTILL may be unable to respond to the request or arrange the appointment.
All other information is optional.
The personal data collected is intended for authorised persons within UPTILL, in particular its management, sales, operations, administrative or technical teams.
It may also be shared, only where necessary, with UPTILL's service providers and processors, in particular:
UPTILL does not sell the personal data collected via its website.
UPTILL does not share data with third parties for their own direct marketing purposes without informing the data subject beforehand and, where required, without their consent.
UPTILL may use service providers located within or outside the European Union.
Where personal data is transferred outside the European Union, UPTILL ensures that such transfers are subject to appropriate safeguards in accordance with applicable regulations, in particular standard contractual clauses adopted by the European Commission or any other recognised mechanism.
HubSpot states in particular that it uses transfer mechanisms such as standard contractual clauses for certain international data transfers.
UPTILL retains personal data only for as long as necessary for the purposes for which it was collected.
The CNIL points out that personal data must not be kept indefinitely and that the retention period must be set according to the purpose pursued.
The following retention periods apply:
Data is kept for the time needed to handle the request, then for a maximum of 3 years from the last active contact with the prospect.
Data used for B2B direct marketing may be kept for a maximum of 3 years from its collection or from the last contact initiated by the prospect.
Where a business relationship is entered into, data is kept for the entire duration of the contractual relationship, then archived for the period necessary to comply with legal, accounting and tax obligations or to defend UPTILL's rights.
Technical data and connection logs may be kept for a maximum of 12 months, unless they need to be kept longer in the event of a security incident, fraud, litigation or a legal obligation.
The information needed to manage objections may be kept to ensure that the person is no longer contacted.
In accordance with applicable regulations, every data subject has the following rights:
These rights may be exercised by writing to UPTILL via the contact form available on the website, or by post to its registered office: 671 route des 7 Chemins, 69530 Orliénas, France.
UPTILL may request proof of identity where necessary to process the request.
UPTILL will respond within the time limits set by applicable regulations.
Anyone may object at any time to the use of their personal data for direct marketing purposes.
To exercise this right, simply contact UPTILL via the contact form available on the website or by post to its registered office.
UPTILL will act on the request as soon as possible.
If a person considers that the processing of their personal data does not comply with applicable regulations, they may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), or, in Malta, with the Information and Data Protection Commissioner (IDPC).
UPTILL implements appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, unauthorised disclosure or unauthorised access.
These measures may include in particular:
Despite these measures, no IT system can guarantee absolute security. In the event of a security incident, UPTILL will take the necessary measures and, where required, notify the competent authorities and/or the data subjects.
The UPTILL website is aimed at professionals.
It is not intended to collect personal data relating to minors.
UPTILL reserves the right to amend this privacy policy at any time, in particular to take account of legal, regulatory, technical or operational changes.
The applicable version is the one published on the website at the time of consultation.
A cookie is a small file stored on or read from the user's device when they visit a website.
Cookies can allow the website to work properly, secure browsing, remember certain choices, measure audience or, depending on the tools used, track the user's browsing.
The UPTILL website may use cookies that are strictly necessary for the operation of the website, its security or the provision of a service requested by the user.
These cookies do not require the user's prior consent.
The website may use audience measurement cookies to measure traffic, understand how pages are used and improve the user experience.
Where these cookies do not meet the exemption criteria set out in the regulations, they are only placed after the user has given consent.
The website may integrate or link to third-party services, in particular HubSpot, to allow appointment booking, form management or the follow-up of sales enquiries.
These services may place their own cookies or trackers when the user interacts with them.
Where these cookies are not strictly necessary, they are subject to the user's prior consent.
On their first visit to the website, the user may be asked to accept, refuse or customise cookies.
Refusing non-essential cookies does not prevent access to the website.
The CNIL points out that users must be able to refuse cookies as easily as they can accept them, and generally recommends keeping the choice made for 6 months.
The user can change their cookie preferences at any time via the cookie management tool available on the website.
The user can also configure their browser to block or delete all or some cookies.
At present, the website only uses cookies that are strictly necessary for its operation and security, together with a cookie that remembers your cookie preferences.
Third-party services integrated into the website, in particular HubSpot (appointment booking and forms), may place their own cookies when you interact with them; where they are not strictly necessary, these cookies are subject to your prior consent. This list will be updated if new tools are added to the website.