Privacy Policy
Last updated: October 2026
1. Introduction
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard information when you use our website.
2. Data Controller
ReportingSoft SA, chemin de Chantemerle 14, 1010 Lausanne, Switzerland. Contact: info@reportingsoft.ch
3. What Data We Collect
When you contact us. When you send an enquiry or request a demo, we receive your name, email address, company, your language setting, and whatever you choose to tell us in your message.
Automatically, on every visit. Your IP address, browser type and device information reach the providers that deliver and protect this website, as part of serving the pages to you.
With your consent. If you accept analytics, Clicky receives your IP address and basic browser details for each page you view, and Google Analytics records your visit against a randomly generated identifier stored in your browser, so that repeat visits can be recognised as the same browser. If you accept marketing cookies, HubSpot records an identifier that allows us to connect your activity on this website to your record in our customer relationship system, if you have one.
From other sources. Some contact records also include business information from other sources, such as a public professional profile. Where we hold information about you that you did not give us directly, you may ask what it is and where it came from.
We do not ask for sensitive personal data — for example information about health, religious or political views, or trade union membership — and we have no use for it. Please do not include any in your message.
4. Purpose of Processing
We use personal data for:
- Responding to enquiries and providing requested services
- Keeping a record of the people and organisations who contact us, so that we can follow up properly and so that a later conversation does not start from nothing
- Understanding how the website is used and which pages are read
- Where you have consented to it, recognising returning visitors and connecting website activity to our existing records
- Protecting the website and its forms from automated abuse
- Legal and regulatory compliance
Automated processing. We use our customer relationship system to organise and prioritise our contact with the people and organisations who approach us — grouping them, recording how they have engaged with our material, and scoring how relevant an enquiry looks so that we know who to follow up first. No automated process makes a decision about you that has legal effect or similarly significant consequences; the decisions that matter are made by a person.
5. Legal Basis (GDPR / Swiss nFADP)
- Performance of a contract, or steps taken at your request before entering one — receiving and answering your enquiry
- Compliance with legal obligations
- Legitimate interests — keeping a record of business enquiries in our customer relationship system so that we can respond and follow up; organising and prioritising that follow-up (see section 4); keeping our business contact records accurate and up to date; and protecting the website and its forms from automated abuse
- Consent — for all analytics and marketing technologies. You may withdraw consent at any time via the consent banner.
6. Data Sharing
We do not sell personal data and we do not share it for anyone else’s advertising.
We work with the following service providers to operate our website, manage enquiries and provide the analytics and marketing functions described in this policy:
| Provider | What it does | When |
|---|---|---|
| Netlify | Hosts this website and delivers its pages | Every visit |
| Cloudflare | Checks that our forms are not being submitted by automated systems | When you submit a form |
| consentmanager | Presents the consent banner and records your choice | Every visit |
| HubSpot | Our customer relationship system. It receives the enquiry you submit, so that we have a record of it and can reply | When you submit a form |
| Clicky (Roxr Software Ltd) | Website analytics — see section 9 | Only with your consent |
| Google Analytics — see section 9 | Only with your consent | |
| HubSpot | Website tracking that connects your visit to your record in our system — see section 9 | Only with your consent |
Enquiry emails are delivered to ReportingSoft’s own mail server. No third-party email provider receives the contents of your enquiry.
HubSpot appears twice because HubSpot is used for two main reasons. When you submit an enquiry, its contents are sent to HubSpot by us, from our server, so that we have a record of your enquiry and can respond to it. That happens whatever you choose in the consent banner, because it is how your enquiry reaches us — not a tracking activity. Separately, if you accept marketing cookies, HubSpot also records your browsing on this site. The enquiry we send does not include your browser’s HubSpot identifier or your IP address, so submitting a form does not by itself link your enquiry to your browsing — though if you have accepted marketing cookies, that link can be made later by other means.
We may also disclose data where we are legally required to.
7. Data Retention
We retain personal data only as long as necessary for the purposes stated above or as required by law. In particular:
- Enquiries and related correspondence and CRM records are reviewed annually. During this review, we delete closed enquiries and inactive prospect records where there has been no meaningful contact for more than 12 months, unless an ongoing business relationship or a legal requirement justifies retaining them.
- Google Analytics deletes event and user data after 14 months. Aggregate reporting is unaffected by this.
- The cookies described in section 9 expire as set out in that section.
- Records of your consent choice are kept for as long as that choice is valid, so that we can show what you agreed to.
8. Your Rights
You may request access, correction, deletion, restriction, portability, or object to the processing of your data. Requests: info@reportingsoft.ch
You may also withdraw your consent at any time. If you believe your data has been handled improperly, you have the right to complain to a data protection authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); if you are in the EEA or the UK, the authority in your country of residence.
9. Cookies and similar technologies
When you first visit this site you are asked which optional technologies may run. Your choice is recorded so that you are not asked again, and you can change or withdraw it at any time by reopening the consent banner.
Your consent choice is recorded both in your browser and by consentmanager on its own systems, so that your decision can be respected on every page.
Withdrawing your consent stops anything further from running, but it does not delete cookies that were already placed while you had accepted them. You can remove those yourself at any time through your browser’s settings.
Strictly necessary — always active
These cannot be switched off, because the site would not work correctly without them, and none of them is used to build a profile of you.
| What | What it does | Stored for |
|---|---|---|
consentmanager (__cmpcccu71321, __cmpconsent71321) | Records which technologies you allowed | 12 months |
| Cloudflare Turnstile | Checks that our forms are not being submitted by automated systems | Nothing is stored on your device |
Analytics — only with your consent
We use two analytics tools. Both are governed by the same choice: if you decline analytics, neither of them runs at all.
Clicky tells us which pages are read and how visitors arrive. It is configured not to store anything on your device, and we do not use it to identify individual visitors. We have verified that it places no cookies and no other data in your browser. It does receive, for each page view, the page you are looking at, the page you arrived from, your IP address and basic details of your browser such as its language, timezone and screen size. Clicky is operated from the United States (see section 11). You can also opt out of Clicky across every website that uses it, at https://clicky.com/optout(opens in a new tab).
Google Analytics helps us understand how visitors use the site over time. If you accept, it places identifiers in your browser so that repeat visits can be recognised as the same browser.
| Cookie | Purpose | Stored for |
|---|---|---|
_ga | Distinguishes one browser from another | 2 years |
_ga_2P4B1L3CRZ | Maintains the session for this website | 2 years |
Google Analytics on this site is configured not to share data with Google’s advertising products and not to be used for advertising personalisation. This is set in the website’s own code rather than in a settings panel, and it is checked automatically whenever the site is rebuilt. Google uses your IP address to work out an approximate location and does not store it.
If you decline analytics, none of this runs, no information about your visit is sent to either Clicky or Google, and none of these cookies is set.
Marketing — only with your consent
We use HubSpot, our customer relationship system. If you accept, HubSpot places identifiers in your browser that let us connect your activity on this website to your record in our system, where one exists. This helps us understand which of our material is useful to the organisations we are already talking to.
| Cookie | Purpose | Stored for |
|---|---|---|
hubspotutk | Identifies your browser to HubSpot | 6 months |
__hstc | Records visit and source information | 6 months |
__hssc | Tracks the current session | 30 minutes |
__hssrc | Detects whether you have restarted your browser | Session only |
If you decline, none of this runs and none of these cookies is set. Accepting analytics does not switch marketing on: it is a separate choice, deliberately. Declining analytics does not prevent you from contacting us, and does not affect what happens to an enquiry you choose to send (see section 6).
10. Security
We use technical and organizational measures to protect personal data from unauthorized access or disclosure.
11. International Transfers
Most of our service providers are based in the United States. Each of their data processing agreements provides for the European Commission’s standard contractual clauses and addresses data protected by the Swiss Federal Act on Data Protection. Our consent banner provider is contracted through its German entity.
Clicky is operated by Roxr Software Ltd, of Milwaukie, Oregon, United States. Roxr is certified under the EU–US Data Privacy Framework, the Swiss–US Data Privacy Framework and the UK Extension, and its data processing agreement also provides for the standard contractual clauses described above.
If you decline analytics, no information about your visit is sent to Clicky or to Google. If you decline marketing cookies, your browser sends no information about your visit to HubSpot — though an enquiry you choose to submit still reaches HubSpot, as described in section 6.
12. Updates
We may update this Privacy Policy. The latest version will always be available on this website.