Privacy policy

Who is responsible

The controller for the personal data described here is [LEGAL ENTITY NAME], a [LEGAL FORM] registered in [COUNTRY OF REGISTRATION] under number [REGISTRATION NUMBER], with its registered address at [REGISTERED ADDRESS] ("Talea", "we").

For any question about your data, write to [PRIVACY CONTACT EMAIL] or to the postal address above. General enquiries can also go to info@taleaint.com.

What happens with your data in short

Reading this website does not require you to give us any personal data. We process personal data in four situations: when you send us a request through one of the contact forms, when our analytics records how the site is used, when you talk to the chat assistant, and in the technical logs that come with hosting a website. Each is described below.

Contact and request forms

The quick contact form asks for your name, email address and message, and optionally your company, phone number and the subject of your request, plus up to five attachments. The detailed request form asks in addition for your job title, several email addresses, phone numbers and postal addresses, details about your business (brand, website, business type, main market, industry), the services you need, the products you have in mind and up to ten attachments.

We use this data to answer your request, prepare a quotation and, if you become a customer, to carry out the contract. The legal basis is the preparation and performance of a contract (Art. 6(1)(b) GDPR) and, for details you give voluntarily, our legitimate interest in understanding your needs (Art. 6(1)(f) GDPR).

Form data is stored in a database operated for us by Neon, Inc. in [DATABASE REGION]. Attachments go to a private storage bucket of the same provider; they are never public. To limit abuse, each submission is stored together with a salted hash of your IP address, which cannot be turned back into the address itself and is used only to block repeated submissions. The detailed form keeps a draft in your own browser (local storage) so you can continue later; that draft never leaves your device until you submit.

Analytics

We measure how the site is used with PostHog, an analytics tool running on our own server, not on PostHog's cloud. It records page views, the pages you move between, clicks and where on a page they happen (heatmaps), the time you spend, and technical details such as browser, device type, screen size, language, referring page and an approximate location derived from your IP address. PostHog sets cookies and browser storage entries that recognise your browser on later visits.

We use this to understand which content is read and to improve the site. The legal basis is your consent where the law requires it for analytics cookies (Art. 6(1)(a) GDPR) and otherwise our legitimate interest in understanding the use of our site (Art. 6(1)(f) GDPR). Analytics data is not shared with third parties and is not used for advertising. If you do not want to be measured, you can block cookies and scripts from our analytics domain in your browser, or ask us at [PRIVACY CONTACT EMAIL] to delete what has been recorded.

Chat assistant

The chat window in the corner of the page is an assistant built with Dify and hosted on our own server. What you type, together with the assistant's replies, is stored on that server so the conversation can continue, and is sent to the language model of [LLM PROVIDER] to generate the replies. Please do not enter sensitive personal data in the chat; use the contact forms for anything confidential.

The legal basis is our legitimate interest in answering visitors' questions quickly (Art. 6(1)(f) GDPR). Conversations are kept for [RETENTION PERIOD] and then deleted.

Hosting and technical data

The website is served by Vercel Inc., which processes the technical data every web server needs: your IP address, the page requested, date and time, browser and operating system, and the referring page. Vercel keeps these logs for a short period for security and troubleshooting. We also use Vercel Speed Insights, which collects anonymised performance measurements (how fast pages load) without identifying you.

The legal basis is our legitimate interest in running a secure and reliable website (Art. 6(1)(f) GDPR). Fonts are bundled with the site, so no request is sent to a font provider when you visit.

Cookies and browser storage

This website uses the following cookies and browser storage entries:

• NEXT_LOCALE (cookie, one year): remembers the language you chose in the language switcher. Strictly necessary for that function.
• PostHog cookies and storage (ph_*): analytics, as described above. Lifetime up to one year.
• taleaLeadDraft (local storage): a draft of the detailed request form, kept until you submit the form or clear your browser data.
• talea-tools-view (local storage): whether you prefer the grid or the list view on the Tools page.
• Cookies and storage set by the chat assistant: keep your conversation while you stay on the site.

Blog and external content

Blog posts are loaded from a content management system (Sanity) that holds only the articles themselves, not visitor data. Where our pages link to other websites, their own privacy policies apply once you leave our site.

Where your data is processed

Talea has offices in China, the United Arab Emirates and Oman, and the staff who handle your request may work in any of them. Our hosting and database providers process data in [DATABASE REGION] and in the regions used by Vercel's network.

If you are in the European Economic Area, Switzerland or the United Kingdom, this means your data is transferred to countries without an adequacy decision. Such transfers are protected by the European Commission's standard contractual clauses with our providers and, within Talea, by internal data transfer agreements. You can request a copy of these safeguards at [PRIVACY CONTACT EMAIL].

How long we keep data

Requests sent through the forms, including attachments, are kept for [RETENTION PERIOD] after our last contact with you, or longer where a contract or legal obligation requires it. Analytics data is kept for [RETENTION PERIOD]. Server logs are deleted by our hosting provider after a short period. You can ask us to delete your data earlier at any time, unless we must keep it by law.

Your rights

Depending on where you live you have some or all of the following rights, which you can exercise by writing to [PRIVACY CONTACT EMAIL]:

• to be told whether we process your data and to receive a copy of it;
• to have inaccurate data corrected and incomplete data completed;
• to have your data deleted, or its processing restricted;
• to receive the data you gave us in a portable format;
• to object to processing based on our legitimate interests;
• to withdraw a consent you gave, with effect for the future;
• to complain to a data protection authority, for people in the EEA the authority of your country of residence or [SUPERVISORY AUTHORITY].

Children

This website is aimed at businesses and is not intended for anyone under 18. We do not knowingly collect data from children.

Changes to this policy

We update this policy when the site or the services behind it change. The date at the top shows the current version. Material changes will be announced on this page.

Contact

[LEGAL ENTITY NAME], [REGISTERED ADDRESS]. Privacy requests: [PRIVACY CONTACT EMAIL]. General contact: info@taleaint.com.