Privacy policy for RetreatSeats

Who is responsible

MLJ, SASU, a French simplified joint stock company registered at 934 769 837 R.C.S. Paris, publishes RetreatSeats and is the controller of the personal data collected through retreatseats.com. The publication director is Jimenez Julien. You can reach a human being about anything on this page at jimenezjulien42@gmail.com.

What the contact form collects

The demo request form on the home page is the only place this website collects personal data. The exact fields are: name (your full name), email (your work email address), company (your retreat or studio name), role (your job title, chosen from a list), request (whether you want a demo, early access or a quote), size (how many beds you fill per session, chosen from a range), message (your free text description of your registration process) and consent (your confirmation that we may store the request in order to reply). A hidden bot-field is present to catch automated submissions and is discarded. Two hidden fields, subject and recipient, route the message to our inbox and contain no information about you.

We do not ask for payment details, government identifiers, health information or the personal data of your retreat guests through this website. If you paste guest information into the message field we will ask you to send it another way and we will delete the copy.

Why we process it, and on what legal basis

We process your submission for one purpose: to answer your request and, where you ask for it, to arrange and run a demonstration of the product. Under the European General Data Protection Regulation the legal basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a business enquiry addressed to us. Under United States state privacy laws the processing is a normal business communication carried out at your request. We do not sell personal information, we do not share it for cross context behavioral advertising, and we do not use it for automated decision making or profiling.

Who processes and stores submissions

Form submissions are processed and stored by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which hosts this website and operates the Netlify Forms service. Netlify acts as our processor under a data processing agreement. Copies of submissions are also delivered to the company email inbox of MLJ, SASU. No other third party receives your submission, and we do not pass it to advertising networks, data brokers or list vendors of any kind.

How long we keep it

Demo requests are kept for twenty four months from the date you send them, so that we can pick up a conversation that started in one season and continues in the next. If you become a customer, the enquiry becomes part of the account record and is kept for the life of the account plus the retention period set out in the terms of service. If you ask us to delete your enquiry sooner we do so within thirty days and confirm by email. Submissions identified as automated or fraudulent are deleted as soon as they are recognized.

Cookies and analytics

This website sets no advertising cookies, no tracking pixels and no third party analytics cookies. There is no advertising network on this site, no social media tracker and no cross site profiling. Web fonts are loaded from Google Fonts, which receives the network request needed to serve the font files. Netlify keeps standard server access logs, including truncated IP addresses, for security and abuse prevention, and those logs are rotated on Netlify's own schedule.

Your rights

If you are in the European Union, the European Economic Area or the United Kingdom, the GDPR gives you the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to processing, to withdraw consent at any time without affecting processing already carried out, and to receive your data in a portable format. You may also lodge a complaint with a supervisory authority, in France the Commission Nationale de l'Informatique et des Libertes.

If you are a resident of California, Colorado, Connecticut, Utah or Virginia, you have the right to confirm whether we process your personal information, to access it, to obtain a copy, to correct inaccuracies, and to request deletion. You may not be discriminated against for exercising these rights. Because we do not sell personal information or use it for targeted advertising, there is nothing to opt out of in those categories, but you may still ask us to confirm that in writing. Residents of California may designate an authorized agent to make a request on their behalf, and we will verify the agent's authority before acting.

How to exercise your rights

Send your request to jimenezjulien42@gmail.com with the email address you used on the form so that we can locate the record. We answer within thirty days, and within forty five days for requests made under United States state privacy laws, extendable once where the request is complex. We may ask one clarifying question to verify that the request comes from you or from someone authorized to act for you. There is no charge for a first request in any twelve month period.

Children's privacy

RetreatSeats is a business tool sold to adults who operate retreats. The website is not directed to children, we do not knowingly collect personal data from anyone under sixteen, and no part of this site is designed to appeal to minors. If you believe a child has sent us information through the contact form, write to jimenezjulien42@gmail.com and we will delete it promptly and confirm the deletion.

International transfers

MLJ, SASU is established in France and our hosting and form processing take place in the United States with Netlify, Inc. Submissions therefore travel from the European Union to the United States. Those transfers rely on the European Commission's standard contractual clauses together with the technical measures applied by our processor, including encryption in transit and access control. If you are in the United States, your data stays with United States infrastructure and is accessed by our team in France under the same safeguards.

Security

Traffic to this site is encrypted with TLS. Access to form submissions is limited to named accounts protected by strong authentication, and access is reviewed when someone joins or leaves. We keep the number of people who can read enquiries deliberately small.

Changes to this policy

When this policy changes we update the date at the top of the page and, for a material change affecting how we use existing submissions, we contact the people concerned by email. The version in force is always the one published here. Questions about anything on this page go to jimenezjulien42@gmail.com and are answered by a person.