Reyond
Legal

Privacy Policy

How we handle personal data — written to be read, not to hide behind.

Last updated 29 October 2026

1. Who we are

The controller of personal data collected on reyond.co is:

Omega Technologies s.r.o.
Korunní 2569/108, Vinohrady
101 00, Prague
Czechia
IČO: 14299747

For any question about this policy or about your personal data, contact us at hello@reyond.co.

We have not appointed a Data Protection Officer. Our processing is limited enough that GDPR Article 37 does not require one.

2. What data we collect and why

2.1 Contact form

When you send a message through the form on our Contact page, we receive your name, email address, an optional company name, and your message. We also receive the IP address and timestamp of your submission, used solely to prevent spam.

  • Why: to reply to your inquiry.
  • Legal basis: Article 6(1)(f) GDPR — our legitimate interest in responding to people who contact us.
  • Retention: until the conversation is resolved, then up to 12 months for reference.

2.2 Website Analytics (Google Analytics 4 & Umami)

We use two tools to analyze website traffic:

  • Google Analytics 4 (GA4): Provided by Google Ireland Limited. When you click Accept on our cookie banner, it records anonymized IP addresses, the pages you visit, session duration, your referring page, and basic device information.
    • Why: to measure campaign performance and detailed audience behavior.
    • Legal basis: Article 6(1)(a) GDPR — your explicit consent.
    • Retention: Google Analytics retains this data for 14 months by default.
    • Withdrawing consent: clear your browser's localStorage key reyond_cookie_consent, and reload the site. The banner will reappear. If you never click Accept, no GA4 script is ever loaded.

  • Umami: A privacy-focused, self-hosted analytics tool running on our own private infrastructure. It tracks high-level page views and traffic sources without using cookies or collecting personal data/IP addresses.
    • Why: to get a clean, lightweight overview of site traffic without relying entirely on third parties.
    • Legal basis: Article 6(1)(f) GDPR — our legitimate interest in analyzing anonymous traffic patterns.
    • Retention: Stored as aggregated, non-personal metrics on our private servers.

2.3 Server logs

Our hosting provider keeps standard access logs — IP address, timestamp, page requested, browser type — for security and abuse prevention.

  • Why: to keep the site online and detect attacks.
  • Legal basis: Article 6(1)(f) GDPR — legitimate interest in security.
  • Retention: 30 days, then deleted.

2.4 Booking calls (Cal.com)

If you book a discovery call through our Cal.com booking link, Cal.com processes your name, email address, and booking details. Their privacy policy governs that processing. We receive the same details so we can attend the call.

3. Who receives your data

We share personal data only with the services required to run the site:

  • Web3Forms — routes contact form submissions to our inbox
  • Google Analytics — visit statistics, only after your consent
  • Cal.com — call booking
  • Oracle Cloud — the servers that host this website and our self-hosted Umami analytics infrastructure

We do not sell your data. We do not share it with advertisers. We do not use it to train AI models.

4. Your rights under GDPR

You have the right to:

  • Access the personal data we hold about you (Article 15)
  • Correct it if it's inaccurate (Article 16)
  • Delete it — "right to be forgotten" (Article 17)
  • Restrict how we use it (Article 18)
  • Receive a copy in a portable format (Article 20)
  • Object to processing based on legitimate interest (Article 21)
  • Withdraw consent at any time, for analytics

To exercise any of these, email hello@reyond.co. We will respond within 30 days.

5. Where your data goes

Your data is stored securely on servers within the European Union (Oracle Cloud infrastructure). Google Analytics may transfer data outside the EU under Google's Standard Contractual Clauses approved by the European Commission.

6. Cookies and similar technologies

We use browser localStorage — not cookies — for one purpose: remembering whether you clicked Accept or Decline on our cookie banner. This value is stored in your browser only, never transmitted to our servers.

Google Analytics sets its own cookies (_ga and _ga_XXXXXXXXXX) only when you click Accept. These expire after 24 months and 24 hours respectively. Our self-hosted Umami analytics tool is entirely cookie-free and does not store anything on your device.

7. Security

We protect personal data with TLS encryption in transit, encrypted server infrastructure, and least-privilege access controls. No method of transmission over the internet is 100% secure, but we take reasonable measures to protect what you send us.

8. Children's privacy

This site is a B2B service for operations teams. We do not knowingly collect personal data from children under 16.

9. Changes to this policy

If we change how we handle personal data, we'll update this page and the "Last updated" date at the top. Material changes will be reflected in the cookie banner.

10. Complaints

If you believe we have handled your data improperly, you can lodge a complaint with the Czech supervisory authority:

Úřad pro ochranu osobních údajů
Pplk. Sochora 27
170 00, Prague 7
uoou.cz

If you are a resident of the EU/EEA, you can also complain to the supervisory authority in your country of residence.

This policy is written to be read. If anything is unclear, ask us and we'll explain it in plain language.