Legal
Privacy policy
This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have over it.
Who is responsible for your data
NV PARTNERS, an EURL registered at 173 rue de Courcelles, 75017 Paris, France under number 109 269 878 R.C.S. Paris and trading as Systematic Partners, is the controller of the personal data described here. You can reach us at contact@systematicpartners.io.
We are established in France, so the EU General Data Protection Regulation applies to our processing wherever in the world the people concerned are located. Where we handle the data of United States residents, applicable state privacy laws may give additional rights, which are set out below.
Two groups of people
We process personal data about two distinct groups, and the treatment differs for each.
Law firms and their staff
If you contact us or engage our services, we process business contact details, correspondence and billing information. The lawful basis is our legitimate interest in responding to enquiries and running our business, and performance of a contract once you become a client.
People who submit legal inquiries
Our campaigns invite members of the public to describe a potential legal matter. Depending on the practice area, that information can include the nature and date of an incident, injuries sustained, medical treatment received, employment circumstances, and whether the person is already represented.
Information about physical or mental health is a special category of personal data under article 9 GDPR. We collect it only where the person has given explicit consent at the point of submission, for the specific purpose of being connected with a law firm that may be able to help them. Consent may be withdrawn at any time by contacting us.
Why we process it
- To assess whether an inquiry meets the criteria a client firm has set.
- To verify the information in an inquiry, including by contacting the person where necessary.
- To transmit qualifying inquiries to the client firm.
- To measure and improve the performance of our campaigns.
- To meet our legal, accounting and tax obligations.
Who we share it with
Qualifying inquiries are transmitted to the client law firm whose criteria they meet. That firm becomes an independent controller of the data from the point of delivery and applies its own privacy practices. Inquiries that do not qualify are not transmitted to any firm.
We also use the service providers below, who process data on our behalf under written terms and only on our instructions.
- Vercel Inc.
- Website hosting and server logs. United States. 440 N Barranca Avenue #4133, Covina, CA 91723.
- Supabase Inc.
- Database storage for inquiries submitted through forms on this website. United States. Data is stored in the AWS US East (North Virginia) region.
- PostHog, Inc.
- Website analytics and session recording, described under Cookies and tracking. United States. Data is stored in PostHog’s United States cloud region.
- Telegram
- Operational alerts notifying us that a new inquiry has arrived. Telegram FZ-LLC, Dubai, United Arab Emirates.
Meta is not a service provider of that kind. Through the advertising pixel described under Cookies and tracking, Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) decides for itself part of what happens to the data it receives, so we and Meta are jointly responsible for collecting it and passing it on, and Meta’s own terms govern what it does with the data afterwards.
International transfers
Our client firms are located in the United States, so delivering an inquiry involves transferring personal data outside the European Economic Area. Our service providers are also established outside the EEA: inquiries are stored by Supabase in the United States, the website is hosted by Vercel in the United States, analytics records and session recordings are held by PostHog in the United States, and operational alerts are delivered by Telegram in the United Arab Emirates. Personal data collected through this website is therefore stored and processed outside the EEA from the moment it is submitted.
For these transfers we rely on the European Commission’s standard contractual clauses, or on the explicit consent of the person concerned, and we assess the safeguards in place before transferring. Alerts sent over Telegram are limited to the fact that an inquiry has arrived and do not contain health information or the substance of a claim.
Data collected by the Meta pixel is received by Meta Platforms Ireland Limited inside the European Economic Area and transferred by Meta to its parent in the United States under the EU-US Data Privacy Framework, to which Meta is certified.
How long we keep it
- Inquiries that do not meet a client firm’s criteria are deleted within 30 days.
- Inquiries delivered to a client firm are retained for 24 months so that billing and replacement claims can be resolved.
- Business correspondence and accounting records are kept as French law requires.
- Analytics records of how this website is used are kept for up to 12 months. Session recordings are deleted automatically after 30 days.
Cookies and tracking
Meta advertising pixel
This website carries the Meta advertising pixel on every page. It places two cookies in your browser: _fbp, which identifies your browser to Meta, and, if you arrived from a Meta advertisement, _fbc, which identifies the advertisement you clicked. Together they let us measure which of our advertising produces enquiries, and let us show our advertising again to people who have read these pages.
When the enquiry form on this website is submitted, we also send a record of that submission to Meta from our own server. That record carries the two identifiers above, your network address and browser description, and an irreversibly hashed copy of the name, email address and telephone number entered on the form. Meta uses the hashes to recognise an enquiry it has already seen an advertisement delivered to. The contact details themselves are not sent in a readable form.
Analytics and session recording
Every page also carries PostHog, which we use to understand how this website is used. It stores one cookie in your browser, with a name beginning ph_ and ending _posthog, holding randomly generated identifiers for your browser and for your current visit. The same values are kept in your browser’s local storage so that they survive between visits.
PostHog records which pages you open and in what order, clicks and form submissions on them, the page you arrived from and any campaign parameters in the link you followed, and your browser, operating system and screen size. Your network address is recorded and used to derive an approximate location, no more precise than a city.
We also record sessions. A session recording is a replay of this website as it appeared on your screen, reconstructed from the contents of the page and from your mouse movement, clicks and scrolling. It shows us where a page confused someone, rather than only that they left it.
Everything typed is masked before it leaves your browser. Field contents are replaced with a placeholder as the recording is made, so no name, email address, telephone number or free text entered anywhere on this website appears in one, and we cannot recover those values from a recording afterwards.
The requests PostHog makes are served through this website’s own domain rather than PostHog’s, so an extension that blocks analytics by hostname will not recognise them. Blocking third party scripts or cookies in your browser still prevents them.
A profile is kept for every visitor, including those who never contact us, so that the pages one firm opened across several visits can be read together rather than as unconnected hits.
Lawful basis and your choices
The forms on this website are completed by law firms about their own business. No information about a person’s health, injuries or potential legal matter is collected here, and none is sent to Meta or any other advertising platform. Two pages reproduce a consumer enquiry form as a demonstration for prospective clients; what is entered into them is discarded in your browser and never reaches us, and because everything typed is masked it does not appear in a session recording either.
Our lawful basis for both the pixel and the analytics is our legitimate interest: in measuring and improving advertising for our own services, and in understanding how the firms we speak to use this website. We balance it against the limited and business-facing nature of what is collected. You may object at any time by writing to us, and you can stop it yourself by blocking third party cookies or scripts in your browser, or through the advertising controls in your Meta account. Strictly necessary cookies required to serve the site do not require consent.
Your rights
Under the GDPR you may request access to your personal data, correction of it, erasure of it, restriction of or objection to its processing, and portability of it. Where processing rests on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.
If you are a United States resident, applicable state law may additionally give you the right to know what personal information is collected, to have it deleted or corrected, and to opt out of its sale or sharing. We do not sell personal information as that term is generally defined in those laws.
To exercise any of these rights, write to contact@systematicpartners.io. If you believe we have not handled your data properly, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the French supervisory authority.
Security
We apply technical and organisational measures appropriate to the sensitivity of the data, including access controls, encryption in transit, and limits on who inside the business can view inquiry records.
Last updated