Privacy Policy
Last updated: September 13, 2025
This Privacy Policy describes how Retabled ("we", "us", or "our") collects, uses, and shares information about you when you use our platform and services.
1. Who We Are
Retabled is a feedback management platform. We act as a data controller for information we collect directly from you, and as a data processor on behalf of organizations ("Clients") that use our platform to collect feedback from their stakeholders. Our registered address is [Postal address].
2. Information We Collect
a) Information you provide
• Account data: Name, email address, password (hashed), organization name, role, and industry when you register.
• Feedback content: Text, attachments, ratings, categories, and any other content you submit through a feedback form.
• Contact information: Email or phone number, if you voluntarily provide it when submitting feedback.
• Onboarding requests: Company name, purpose, industry, and representative contact details submitted during sign-up.
b) Information collected automatically
• Usage data: Pages visited, features used, timestamps, and interaction logs.
• Device data: IP address, browser type, operating system, and referring URL.
• Cookies: Session tokens and preference cookies necessary for the platform to function.
c) Information from third parties
• If your organization uses Single Sign-On (SSO), we receive your name, email, and role from your identity provider.
3. How We Use Your Information
We use the information we collect to:
• Provide, operate, and improve the platform.
• Authenticate users and manage account access and permissions.
• Route and deliver feedback to the appropriate organization and team.
• Send transactional emails (e.g., account confirmations, password resets, feedback acknowledgements).
• Send platform notifications and updates, where you have opted in.
• Detect, investigate, and prevent spam, abuse, fraud, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.
• Analyse aggregate, de-identified usage trends to improve our product.
4. Legal Bases for Processing (EEA / UK / Canada)
Where data protection law requires a legal basis, we rely on:
• Contract performance — to deliver the services you or your organization have requested.
• Legitimate interests — for security monitoring, fraud prevention, and product analytics (balanced against your rights).
• Legal obligation — where processing is required by law.
• Consent — for optional marketing communications and non-essential cookies, which you can withdraw at any time.
5. How We Share Your Information
We do not sell your personal information. We share it only as described below:
• Client organizations: Feedback you submit to a Client is shared with that Client's authorized administrators and team members.
• Service providers: Trusted sub-processors who help us operate the platform (e.g., cloud hosting, email delivery, analytics). See our [Sub-processor List link].
• Legal requirements: When required by law, court order, or to protect the rights, safety, or property of Retabled, our users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.
6. Data Retention
We retain personal data for as long as your account is active or as needed to provide services. Feedback content is retained for the period specified in the Client's subscription agreement. We may retain certain data longer where required by law or for legitimate business purposes such as dispute resolution and audit logs. When data is no longer needed, we delete or anonymize it.
7. Cookies and Tracking
We use the following categories of cookies:
• Strictly necessary: Session authentication and security tokens. Cannot be disabled.
• Functional: Preferences such as language and region. Can be disabled.
• Analytics: Aggregate usage statistics to improve the platform. Can be disabled via Cookie Settings.
You can manage cookie preferences at any time via the Cookie Settings link in the footer.
8. International Transfers
Retabled is operated from Canada. If you are located in the EEA, UK, or another jurisdiction with data transfer restrictions, your data may be transferred to and processed in countries that may not provide the same level of data protection as your home country. Where required, we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
• Access: Request a copy of the personal data we hold about you.
• Correction: Request that inaccurate or incomplete data be corrected.
• Deletion / Erasure: Request that we delete your personal data, subject to legal retention requirements.
• Restriction of processing: Request that we limit how we use your data.
• Data portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority.
10. Data Security
We implement industry-standard technical and organizational security measures including encryption in transit (TLS), hashed passwords, role-based access controls, audit logging, and regular security reviews. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security but are committed to protecting your data.
11. Children's Privacy
Retabled is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will delete it promptly. If you believe we have collected data from a child, please contact us at [email protected].
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated "Last updated" date, and where required by law, by sending you an email notification. Your continued use of the platform after changes take effect constitutes acceptance of the revised policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact our Privacy team:
Email: [email protected]
Postal address: [Postal address]