Privacy policy

This site runs no analytics, carries no advertising and sells no data. It loads nothing from a third-party server and sets no cookie as long as you are simply reading it.

Three situations are the exception, and each is set out below: sending a form, signing in to the area reserved for training participants, and playing a video on the “In the field” page.

Data controller

1. The forms

Contact form

It collects:

• Name — required, so we can address you properly
• Email address — required, it is how we reply
• Company — optional
• Type of enquiry — chosen from a list
• Message — required, its content is yours
• Site language — English or French, so we reply in yours

Training quote request

The form on the Training page also collects your job title, your organisation, a phone number (optional), the number and profile of participants, your intended timeframe and a description of your needs.

Neither form writes anything to a database. Your message is sent by email to info@rnr-regalia.com and exists afterwards only in that mailbox.

Please do not send sensitive information, or anything covered by a confidentiality clause, through these forms: a first conversation is better suited to that.

2. The area reserved for participants

Participants in our training courses have personal access to their materials. That area does rely on a database, hosted by our provider in France.

There is no self-registration: accounts are created by R&R Consulting when a training session opens, from the details supplied by you or your employer.

What is recorded

• Your account — name, email address, organisation, job title, creation date and last visit date
• Your password — never in clear text: only an irreversible cryptographic fingerprint is kept, from which the original password cannot be recovered
• Which sessions you belong to — this determines the materials you can reach, and nothing else
• Sign-in attempts — the email address entered, the IP address, success or failure, and a timestamp. Their only purpose is to block repeated-guess attacks
• Downloads — which account retrieved which document, when, and from which IP address

The download history answers a precise need: knowing whether the materials are actually being read, and spotting an account shared beyond its holder. It is used neither to assess a participant nor to build a profile, and it is disclosed to no one — not even to the employer who commissioned the training.

3. Videos on the “In the field” page

The photographs on that page are hosted on our own server. The videos are hosted by YouTube (Google) or Vimeo.

Nothing is requested from them until you click a video: the page shows only a thumbnail kept on our server. No request, no third-party cookie merely from reading the page.

The moment you click, the player is loaded from the service concerned, which then receives your IP address and applies its own privacy policy. For YouTube we use the so-called “no-cookie” mode (youtube-nocookie.com), which limits what is stored without removing it entirely. This load never happens without an action on your part.

Purpose and legal basis

• Forms — to handle your request and reply to it. The processing rests on your own decision to get in touch and on our legitimate interest in following it up.
• Participants' area — to deliver the training agreed with you or your organisation, and to secure access to the materials.

None of this data feeds automated prospecting: you will not be added to a mailing list you did not ask for. No automated decision is made about you, and no profile is built.

Recipients

Your data is read by R&R Consulting alone. It is never sold, traded or passed on for commercial purposes.

Two technical processors are necessarily involved: our host OVH SAS (France), which hosts the site, the database and the materials, and keeps the server connection logs; and our business email provider. Neither uses this data for its own purposes.

Should an expert from our network need to be involved in your file, that would only happen with your agreement.

Retention

• Enquiries with no follow-up — deleted no later than 12 months after the last exchange
• Exchanges that led to a business relationship — kept for the duration of that relationship, then according to statutory accounting retention periods
• Participants' area accounts — kept for the duration of the training and the following year, so you have time to come back for your materials. Access can be closed without deleting the account: tell us if you would rather have it removed entirely
• Download history — 24 months
• Sign-in attempts — 30 days at most. A given account's failures are erased as soon as it signs in successfully
• Server connection logs — kept by the host according to its own periods

Cookies

Reading this site sets no cookie. No analytics, no advertising tracker, no social media button.

Two technical cookies exist, in two distinct situations:

• PHPSESSID — set when you submit a form, and only then. It limits repeated submissions by bots.
• RRSESSION — set when you sign in to the participants' area. It keeps your session open. It is unreachable from JavaScript, sent only over HTTPS, and not sent when you arrive from another site.

Both disappear when you close your browser. Being strictly necessary to the service you asked for, they do not require your prior consent. Neither is used to follow you from page to page for measurement.

Security

The site is served entirely over HTTPS: your data travels encrypted between your browser and the server.

Passwords for the participants' area are never stored in clear text. Training materials are kept outside the web-accessible folder and handed over only after the account has been checked: their address alone is not enough to retrieve them. The number of sign-in attempts is limited, and a session left idle for two hours is closed automatically.

Your rights

You have the right to access, correct, erase, restrict and object to the processing of data concerning you, as well as the right to data portability.

To exercise it, write to info@rnr-regalia.com. We reply within one month. A deletion request is carried out immediately, unless a legal retention obligation applies.

Complaints

In Côte d'Ivoire, the processing of personal data falls under Law no. 2013-450: you may refer the matter to the Autorité de Régulation des Télécommunications de Côte d'Ivoire (ARTCI).

If you live in the European Union, the GDPR applies to this processing and you may refer the matter to the supervisory authority of your country of residence — the CNIL in France.

Transfers outside Côte d'Ivoire

The site, the database and the materials are hosted in France, at OVH. Your data is therefore processed within the European Union, whose level of protection is recognised as adequate.

If you play a video on the “In the field” page, your IP address is passed to YouTube (Google) or Vimeo, companies established in the United States. That transfer happens only when you click.

Changes

This policy may change along with the site. Any change is published on this page, whose update date appears below.

Last updated: 31 July 2026.