Privacy Policy

Last updated: 03 June 2026

This privacy policy explains how Scroll SAS collects, uses, and protects personal data submitted via the agence-scroll.com website, as well as in the context of its business exchanges and services.

Scroll places particular importance on the confidentiality of personal data and is committed to processing data in a fair, transparent, proportionate, and secure manner.

1. Data Controller

The data controller is:
Scroll SAS
Registered office: 50 rue Rodier, 75009 Paris, France
Email: contact@agence-scroll.com

For any questions regarding your personal data or to exercise your rights, you may contact us at the following address: contact@agence-scroll.com.

2. Personal Data Collected

Scroll may collect personal data when you use the website, fill out a form, contact us, or enter into a business relationship with Scroll.

The data concerned may include, but is not limited to:

Identification and contact data: first name, last name, email address, phone number, company, position or role.
Data related to your request or project: information submitted via our forms, quote requests, appointment requests, specifications, expressed needs, indicative budget, deadlines, messages, and files voluntarily provided.
Data related to the business relationship: email exchanges, quotes, contracts, invoices, project tracking information, and information necessary for the performance of our services.
Technical and navigation data: pages visited, date and time of visit, device type, browser used, navigation events, and technical data necessary for audience measurement and the proper functioning of the site.

Scroll does not request that you submit sensitive data via its forms. We invite you not to share sensitive or confidential information that is not necessary for processing your request.

3. Purposes of Processing and Legal Bases

The collected data is used for the following purposes:

Responding to a request sent via the website — Legitimate interest or pre-contractual measures.
Scheduling an appointment or qualifying a need — Pre-contractual measures.
Preparing a quote, a commercial proposal, or a contract — Pre-contractual measures.
Executing a service entrusted to Scroll — Contract performance.
Ensuring customer follow-up and project management — Contract performance or legitimate interest.
Manage billing, accounting, and administrative obligations — Legal requirement.
Improve the website and measure its audience without analytics cookies — Legitimate interest.
Send B2B commercial communications related to our services — Legitimate interest, with the option to opt out.
Ensure website security and prevent abuse — Legitimate interest.

4. Forms and contact requests

When you fill out a form on the website, the information provided is used to process your request, respond to you, and, where applicable, offer you an exchange, an appointment, or a tailored proposal.

Mandatory fields are limited to the information necessary to process your request. Without this information, Scroll may not be able to respond to you properly.

5. Audience measurement without cookies

The website uses an audience measurement solution to understand how visitors browse the site, identify the most visited pages, improve the user experience, and measure content performance.

To this end, Scroll uses PostHog, configured in a cookieless approach, meaning no analytics cookies are stored on visitors' devices.

In this configuration, Scroll aims to limit data collection to what is strictly necessary for audience measurement. The collected data is not used to track visitors across other sites or to create advertising profiles.

The data that may be processed can include:

pages visited;
date and time of visit;
device or browser type used;
navigation events necessary to understand site usage;
limited technical data used to generate audience statistics.

Scroll does not seek to personally identify visitors through its audience measurement tool. In particular, Scroll does not transmit directly identifying data, such as an email address, name, or phone number, to PostHog without an appropriate legal basis.

If the website’s configuration were to change and involve the use of cookies or trackers subject to consent, Scroll would implement an appropriate consent collection mechanism.

6. Data recipients

The personal data collected is intended for Scroll and authorized personnel within its team.

It may also be shared with technical service providers acting on behalf of Scroll, notably for:

website hosting;
form management;
appointment scheduling;
email;
billing;
commercial management;
audience measurement;
project management.

Scroll notably uses PostHog for the site’s audience measurement, in a configuration aimed at limiting data collection and avoiding the use of analytics cookies.

Scroll does not sell your personal data to third parties.

Where necessary, certain data may also be disclosed to administrative, judicial, or tax authorities, solely to comply with a legal obligation.

7. Subcontracting and services provided for clients

As part of its services, Scroll may process personal data on behalf of its clients, particularly when creating websites, applications, automations, internal tools, or solutions incorporating artificial intelligence.

In such cases, Scroll acts as a data processor under the GDPR. The data entrusted by the client is processed solely for the purposes of the service, in accordance with the client’s instructions and the terms set out in the contract.

The specific terms of processing, security, confidentiality, retention, or deletion of data may be detailed in the quote, contract, special conditions, or a dedicated subcontracting agreement.

8. Transfers outside the European Union

Some of the technical service providers used by Scroll may be located outside the European Union or process data from third countries.

When such transfers are necessary, Scroll ensures they are governed by appropriate safeguards in accordance with applicable regulations, including standard contractual clauses, an adequacy decision, or any other mechanism recognized by the GDPR.

For audience measurement, Scroll prioritizes a configuration that limits data collection and reduces risks related to the transfer of personal data.

9. Retention periods

Scroll retains personal data only for as long as necessary to fulfill the purposes for which it was collected.

For reference:

Contact requests and incoming inquiries — Duration necessary to process the request, then up to 3 years after the last contact.
B2B prospect data — Up to 3 years after the last contact from the prospect.
Client data and project tracking data — For the duration of the contractual relationship, then archived if necessary for evidence or legal obligation.
Unfollowed quotes — Duration necessary for commercial follow-up, then deletion or archiving depending on the situation.
Invoices and accounting documents — 10 years in accordance with accounting obligations.
Audience measurement data — Limited and proportionate duration for the purpose of audience measurement.
Data required to manage a commercial opt-out — Duration required to process the opt-out.

10. Data Security

Scroll implements reasonable technical and organizational measures to protect personal data against loss, unauthorized access, disclosure, alteration, or destruction.

These measures may include, as applicable: access restrictions, permission management, authentication, backups, selection of providers with security guarantees, team awareness, and securing the tools used.

11. Your Rights

In accordance with applicable regulations, you have the following rights regarding your personal data:

right of access;
right to rectification;
right to erasure;
right to object;
right to restriction of processing;
right to data portability, where applicable;
right to withdraw your consent at any time, where processing is based on consent;
right to define instructions regarding the handling of your data after your death.

To exercise your rights, you may write to: contact@agence-scroll.com.

To protect your data, Scroll may request proof of identity if necessary to verify your request.

You also have the right to lodge a complaint with the CNIL if you believe your rights are not being respected.

12. Commercial Prospecting

Scroll may contact you in a professional context to present its services, solely when relevant to your business or your interactions with us.

You may object at any time to receiving commercial communications by writing to: contact@agence-scroll.com.

13. Automated Decision-Making

Scroll does not make automated decisions that produce legal or significant effects on you based on data collected via the website.

14. Privacy Policy Updates

This policy may be updated to reflect changes to the website, services offered by Scroll, tools used, or applicable regulations.

The update date indicated at the top of the page identifies the latest applicable version.