Privacy Policy
How we protect your personal data
LAMALO (a subsidiary of Reboot Conseil) is committed to protecting the privacy of users of its website lamalo.ai and its Lamalo platform. This policy describes the data collected and its use.
Data Collected
We only collect data necessary for the proper functioning of our services: • Contact form: name, email, company, phone, message • Account creation: name, email, password (encrypted) • Usage data: pages visited, session duration (anonymized) • Technical cookies: necessary for website operation
Use of Data
Your data is used exclusively for: • Responding to your contact requests • Providing and improving our services • Sending commercial communications (with your consent) • Complying with our legal obligations
Recipients and processors
We never sell your data. We do, however, entrust it to providers acting on our behalf, solely for the purposes described above: • Google Cloud (European Union, Belgium region) : hosting of the website, the database and the files you send to the chatbot. • ActiveCampaign (United States) : customer relationship management: contact details and messages from the contact, demo and newsletter forms, plus your browsing activity if you have accepted it. • Google : Gemini API (United States) : generation of the chatbot's replies: the content of the messages you send it. • Microsoft Teams (Microsoft 365) : internal alerts to our sales and technical teams: contact details and conversation excerpts. • Calendly (United States) : appointment booking: name, email address and the slot you pick. The booking script is present on every page. • Google Analytics and Google Ads (United States) : audience measurement and advertising, only after you consent. • LinkedIn (United States) : measurement of our advertising campaigns, only after you consent. • Embedded content : YouTube (no-cookie mode), Loom and LinkedIn, on the pages that carry it: these services receive your IP address the moment the player loads. • country.is : automatic detection of your country so prices display in your currency; this service receives your IP address. None of these providers is allowed to use your data for its own purposes. Your data is never used to train artificial intelligence models.
Transfers outside the European Union
The website's hosting and its database stay inside the European Union. Several of the providers listed above are, however, established in the United States: ActiveCampaign, Calendly, Google (Analytics, Ads, Gemini API) and LinkedIn. Your data may therefore be transferred there. These transfers rely on the safeguards set out by the GDPR: the European Commission's standard contractual clauses and, for providers that participate in it, the EU–US Data Privacy Framework. You can decline measurement and advertising cookies at any time. In that case nothing is sent to Google Analytics, Google Ads, LinkedIn or ActiveCampaign's site tracking.
Cookies and trackers
Necessary cookies, set without consent: • NEXT_LOCALE (12 months) : remembers the language you chose. • spoton-country (12 months) : remembers your country so prices display in the right currency. • lml_attr (30 days) : remembers how you reached the site (campaign or referring site), so your enquiry can be attributed to the right origin if you contact us. This cookie holds no identifying data and is read by no third party. Measurement and advertising cookies, set only after you accept: • Google Analytics (_ga, _ga_*) : audience measurement. • Google Ads : advertising conversion measurement. • LinkedIn Insight Tag : campaign measurement and audience building. • ActiveCampaign site tracking : links your browsing to your record in our CRM. Your choice is kept in your browser's local storage. To change it, clear this site's data in your browser settings: the banner will reappear.
Storage and Security
The website, its database and the files you send us are hosted in the European Union (Google Cloud, Belgium region) and protected by industry-standard security measures. Some of the providers we rely on are, however, established outside the European Union: the "Transfers outside the European Union" section lists them. We never sell your data to third parties, and it is never used to train AI models.
Your Rights
Under the GDPR, you have the following rights: • Right of access to your personal data • Right of rectification • Right to erasure ("right to be forgotten") • Right to data portability • Right to object to processing • Right to withdraw your consent To exercise these rights, contact us at: serge@lamalo.ai
Data Retention
Contact data is retained for 3 years from the last contact. Account data is retained for the duration of the contractual relationship, then 3 years after its end.
Updates
This policy may be updated. The date of the last modification is indicated below.
Last updated: September 2026