Privacy policy

Who is responsible for your data

MLJ, SASU, a company registered in Paris under SIREN 934 769 837, publishes StencilIntake and decides why and how the personal data described here is processed. In the language of the General Data Protection Regulation, MLJ, SASU is the data controller. Jimenez Julien is the publication director and the person who answers privacy requests. You can reach him at jimenezjulien42@gmail.com. Full company identification is on the legal notice page.

What the contact form collects

This website has exactly one place where you can send us personal information: the request form in the contact section of the home page. When you submit it, the following named fields are transmitted and stored.

• name: your full name, so a reply is addressed to a person.
• email: the work email address we answer at.
• company: your shop or studio name, so we can look at your public booking setup before we reply.
• role: your role in the shop, chosen from shop owner, resident artist, guest artist, studio manager, booking coordinator or apprentice.
• request: what you are asking for, chosen from booking a demo, requesting early access or requesting a quote.
• size: the number of chairs in your shop, chosen from a fixed list of ranges.
• message: the free text you write about how custom requests reach you today.
• consent: the record that you ticked the consent box before sending.

Three hidden fields travel with the submission for routing purposes: form-name, which tells the form service which form was used, subject, a fixed line identifying the site, and recipient, the mailbox that receives the notification. A honeypot field named bot-field is present and hidden from people; it exists only to catch automated spam and is always empty for a human visitor. Our form service also records the time of submission and the internet protocol address the request came from, as part of its ordinary spam protection.

We do not ask for and do not want client information, reference photographs, medical details, consent documents or payment card numbers through this form. Please do not paste them into the message field. Product data belonging to a StencilIntake subscription is governed by the subscription agreement described in our terms of service, not by this page.

Why we process it, and on what legal basis

We use what you send for one purpose: to answer your question, to prepare and hold the walk through you asked for, and to send you the pricing or setup information you requested. Under the GDPR our legal basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a business enquiry addressed to us. We do not use your details to build a marketing profile, we do not add you to a newsletter, and we do not send you a sales sequence after the conversation ends.

Who processes and stores submissions

The form is handled by Netlify Forms, operated by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which also hosts the pages of this website. Netlify receives your submission, stores it in the site's form dashboard and sends a notification to our mailbox. Netlify acts as our processor for that activity and is bound by its own data processing terms. Our reply and any follow up conversation live in an email mailbox operated by our email provider. No other company receives your submission, and we never sell, rent or trade it.

How long we keep it

Form submissions are kept for twenty four months from the date you send them, so that we can pick up a conversation that pauses for a season, which is common in this trade. After that period the submission is deleted from the form dashboard. Email threads that turn into a customer relationship are kept for the life of the subscription and for the accounting period that French law requires afterwards. If you ask us to delete your enquiry sooner, we do it within thirty days and confirm by email.

Cookies, analytics and tracking

This website sets no advertising cookies, no third party analytics cookies and no cross site trackers. There is no advertising pixel, no remarketing tag and no session recording tool on any page. Web fonts are requested from Google Fonts, which means your browser contacts fonts.googleapis.com and fonts.gstatic.com to download the two typefaces this site uses, and Google receives your internet protocol address as part of that ordinary request. Netlify keeps standard server logs of page requests for security and reliability, and those logs are retained for a short period by Netlify itself.

Your rights in the United States

If you live in California, Colorado, Connecticut, Utah or Virginia, state privacy law gives you the right to know what personal information we hold about you, to obtain a copy of it, to correct it, and to have it deleted. California residents may also ask about the categories of personal information collected and disclosed in the past twelve months, and may not be treated differently for exercising a right. We do not sell personal information and we do not share it for cross context behavioral advertising, so there is nothing to opt out of on that front, but you may still send the request and we will confirm it in writing. Residents of other states are given the same treatment as a matter of policy.

Your rights under the GDPR

If you are in the European Union or the United Kingdom you have the right to access your data, to have it corrected, to have it erased, to restrict or object to processing, to withdraw consent at any time, and to receive your data in a portable format. Withdrawing consent does not affect processing that already took place lawfully. You also have the right to lodge a complaint with a supervisory authority, which in France is the Commission Nationale de l'Informatique et des Libertes.

How to exercise a right

Send one email to jimenezjulien42@gmail.com with the address you used on the form and a short description of what you want us to do. We answer within thirty days and usually within three business days. We may ask one question to confirm you are the person the data belongs to, and we will not ask for identity documents unless a request is unusual. There is no charge for a request unless it is repetitive or clearly excessive.

Children

StencilIntake is a business tool sold to tattoo artists and studios, and this website is not directed at children. We do not knowingly collect personal information from anyone under sixteen years old through this site. If you believe a child has sent us information through the contact form, write to us and we will delete it promptly. Studios remain responsible for verifying the age of their own clients under the law of their state.

International transfers

MLJ, SASU is established in France and our form processor and host, Netlify, Inc., is established in the United States. That means a submission sent from Europe is transferred to the United States. Netlify relies on the European Commission's standard contractual clauses for those transfers, and we have entered into the corresponding data processing terms. If you would rather not use the form at all, email us directly and your message stays in ordinary email.

Security

The site is served only over an encrypted connection, submissions travel over that same encrypted connection, and access to the form dashboard is limited to accounts protected by multi factor authentication. We keep the number of people who can read submissions to the smallest workable group.

Changes to this policy

If this policy changes we update the date at the top of the page and describe the change in the release notes we publish each month. Material changes that affect how we use information already collected will be sent by email to anyone who has an open conversation with us.