Privacy policy

Who is responsible for your data

The controller of the personal data described here is MLJ, SASU, the company that publishes FitRoomLog and operates fitroomlog.com. The publication director is Jimenez Julien. You can reach a human being about anything on this page at jimenezjulien42@gmail.com, and the reply will come from the person who runs the company rather than from a ticketing queue.

This policy covers the marketing website you are reading. Customer records that a subscribing boutique stores inside the FitRoomLog application belong to that boutique. In that situation the boutique is the controller of its own customer data and MLJ, SASU acts as a processor on its instructions, under the data processing terms attached to the subscription.

What the contact form collects

The only place this website gathers personal data is the demo request form on the home page. When you send it, we receive exactly these fields, and nothing else: name (your full name), email (your work email address), company (your boutique name), role (your job title, chosen from a list), request (whether you want a demo, early access or a quote), size (how many fitting rooms you run), message (your description of how your shop keeps fit notes today) and consent (the record that you ticked the agreement box).

Two hidden fields travel with the submission: a subject line identifying the site, and the recipient address the message is routed to. A honeypot field named bot-field is included to catch automated spam. If that field is filled in, the submission is discarded. The form does not ask for a phone number, a payment detail, a date of birth or any information about your customers, and you should not put customer details into the message box.

Why we hold it, and on what legal basis

We use what you send for one purpose: to answer your enquiry, arrange a demonstration if you asked for one, and continue that specific conversation. We do not add form senders to a newsletter, we do not build a marketing profile, and we do not enrich your record with data bought from third parties. Under the EU General Data Protection Regulation the legal basis is your consent, given by ticking the box, together with the steps taken at your request before entering into a contract. Under United States state privacy laws the processing is a business purpose disclosed to you at the point of collection.

How long submissions are kept

Enquiries that do not lead to a subscription are deleted twenty four months after the last message in the thread, or sooner if you ask. Enquiries that become customer accounts are retained for the life of the account and then for the period required by accounting and tax obligations. Spam submissions are deleted as soon as they are identified.

Who processes the data with us

Submissions are transmitted and stored by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which hosts this website and operates the form handling service. Netlify stores the submission so it can be delivered and reviewed. Email replies are handled through a standard business email provider. No other company receives the content of your enquiry, and it is never sold, rented or traded.

Cookies and measurement

This site sets no advertising cookies and runs no third party analytics scripts. There is no Google Analytics tag, no advertising pixel, no session recorder, no heat mapping and no cross site tracker. The only JavaScript on the page is one small file we wrote ourselves, which opens the menu, animates section reveals and checks the form before it is sent. Your browser may store standard technical information with the host for security and delivery, which is normal server logging and is not used to profile you.

Your rights

If you are in the European Union, the United Kingdom or another jurisdiction covered by the GDPR, you have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw your consent at any time without affecting processing already carried out. You also have the right to complain to your national supervisory authority.

If you live in California, Colorado, Connecticut, Utah or Virginia, you have rights under your state privacy law to know what personal information is collected about you and the purposes for which it is used, to obtain a copy of it, to have it deleted, to have inaccuracies corrected, and to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell or share personal information and we do not conduct targeted advertising, so there is nothing to opt out of, but the right exists and we will confirm that position in writing on request. California residents also have the right not to receive discriminatory treatment for exercising these rights, and may use an authorized agent to make a request on their behalf.

To exercise any of these rights, write to jimenezjulien42@gmail.com with the email address you used on the form. We answer within thirty days and usually much sooner. We may ask one question to confirm that the request comes from you, and we will not charge a fee unless a request is manifestly excessive or repetitive.

Children

FitRoomLog is a business tool sold to retailers, and this website is not directed at children. We do not knowingly collect personal data from anyone under sixteen years of age. If you believe a child has sent us information through the form, write to us and we will delete it promptly.

International transfers

MLJ, SASU is established in France and the hosting and form processing take place in the United States with Netlify, Inc. When personal data moves from the European Economic Area to the United States it is transferred under the European Commission standard contractual clauses included in the hosting agreement, supported by the technical measures described below. If you are in the United States, your data is processed in the United States and may be reviewed in France by the publisher when answering you.

Security

Traffic to this site is served over HTTPS. Form submissions are encrypted in transit and at rest by the host. Access to submissions is limited to the publication director. The application that subscribing boutiques use is protected by individual staff logins, role based permissions and an access log that owners can review. No system is perfect, and if a breach ever affected your data we would tell you and the relevant authority within the legal deadline, in plain language.

Changes to this policy

If this policy changes we update the date at the top of the page and, when the change is significant, we email people whose enquiries are still open. The current version always lives at this address, and previous wording is available on request.