{# canonical_link wraps the whole element so a page can drop it entirely (a 404 must not canonicalise to a URL that does not exist); the inner canonical block still allows overriding just the href. #} {# Only the hero headline face is preloaded: it paints above the fold. Preloading all four would compete with the stylesheet on first paint. #}

Privacy Notice

Last updated: 27 July 2026 · This notice covers this website, reflens.com, including its sign-in area. Other sites operated separately, including tracecite.com, publish their own notices.

Who we are

RefLens Ltd is registered in England and Wales, company number 17291983, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. We are the data controller for the personal data described in this notice. Contact: [email protected].

What we collect and why

Enquiries

If you email us, we receive your email address and whatever you include in the message, and we use it to respond to your enquiry. Our lawful basis is our legitimate interest in answering people who contact us about our services. Please do not send confidential information, credentials, personal records or health data in an initial enquiry.

Website technical logs

Our hosting provider records standard technical logs — IP address, requested URL, time and browser identifier — which we rely on to keep the site available and secure. Our lawful basis is our legitimate interest in the security and reliability of the service.

Account area

If an account is created on this site we process the name, email address, organisation details and a password (stored only as a cryptographic hash), in order to provide and secure that account. Our lawful basis is performance of a contract with the account holder. The email address is also used for sign-in and password reset. This site does not accept file uploads and does not send any account content to an AI provider.

Who processes data for us

  • DigitalOcean — hosting and the managed database for this site (London region).
  • Google Workspace — the mailbox behind [email protected], and outgoing site email.

We do not use analytics, advertising or tracking services, and we do not sell or share personal data for marketing.

How long we keep data

  • Enquiries that do not lead to work: up to 12 months, then deleted.
  • Enquiries that become client work: for the duration of the engagement and 6 years afterwards, to meet UK accounting and limitation requirements.
  • Accounts: for as long as the account is active; deleted within 30 days of a deletion request.
  • Technical logs: retained by the hosting provider on a short rolling basis, normally no more than 30 days.
  • Backups: overwritten on the provider's ordinary backup cycle.

Where data is held

Hosting is in the United Kingdom. Google Workspace may process email outside the UK; where that happens the transfer relies on the safeguards in Google's data processing terms, including the UK International Data Transfer Addendum.

Cookies

This site sets only strictly necessary cookies: a session cookie that keeps you signed in, a CSRF token that protects forms against cross-site request forgery, and a cookie remembering your language choice. Because these are strictly necessary for a service you have requested, no consent banner is shown. We use no analytics or advertising cookies and load no third-party trackers.

Automated decision-making

We do not make decisions about people by automated means, and this site performs no profiling.

Your rights

You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable form where that right applies. To exercise any of these, email [email protected]. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office, the UK supervisory authority.