Privacy policy

Who is responsible for your data

The data controller for this website is MLJ, SASU, publisher of VeilFittings, represented by Jimenez Julien, publication director. You can reach the controller at any time at jimenezjulien42@gmail.com. Company registration details are published on the legal notice page.

What this website collects

This website is a static marketing site. It has no user accounts, no login and no shopping basket. The only place where personal data is collected is the walkthrough request form on the home page. When you submit that form, the following named fields are sent to us:

• name: your full name, so we can address you properly.
• email: the work email address we reply to.
• company: the name of your bridal shop.
• role: your role in the shop, chosen from a list.
• request: whether you want a demo, early access or a quote.
• size: how many fitting rooms you run.
• message: your description of where the schedule breaks down in your shop.
• consent: the record that you agreed to be contacted about this request.
• subject and recipient: two hidden fields that route the message to the right inbox.
• bot-field: an empty honeypot field used to filter automated spam. A real person never fills it.

Please do not include the personal details of your brides, your staff or any payment card information in the message field. That information is not needed to arrange a walkthrough and we would rather never receive it.

Why we process it and on what legal basis

We process these details for one purpose only: to answer your request, arrange a walkthrough or send you a quote. Under the EU General Data Protection Regulation the legal basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a business enquiry addressed to us. We do not use the form data for profiling, for automated decision making, or for any marketing message you did not ask for. We never sell it and we never rent it.

Who processes and stores submissions

Form submissions are handled by Netlify Forms, a service of Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States. Netlify receives the submission, stores it in the site dashboard and forwards a copy by email to the publisher. Netlify acts as a processor on our instructions and is bound by its own data processing terms. A copy of the message also sits in the publisher's email account for as long as the correspondence is open.

Cookies and analytics

This website sets no advertising cookies, no third party analytics cookies and no cross site tracking pixels. There is no Google Analytics tag, no advertising network script and no social media tracker on any page. The only third party requests your browser makes are to Google Fonts, in order to load the two typefaces used in the design, and Google may log the request as part of serving those files. Server logs held by Netlify may record an IP address, a timestamp and a browser string for security and abuse prevention. Nothing on these pages follows you to another website.

How long submissions are kept

An enquiry that does not become a customer relationship is deleted from the Netlify Forms dashboard and from the publisher's inbox within twelve months of the last message exchanged. If your shop becomes a customer, the correspondence is kept for the life of the subscription and for three years afterwards, which is the period we may need it for accounting and contractual purposes. You can ask for earlier deletion at any point and we will act on it.

International transfers

The publisher is established in France and the hosting and form processing are provided by a company established in the United States. Sending your enquiry therefore involves a transfer of personal data outside the European Economic Area. That transfer relies on the standard contractual clauses adopted by the European Commission and included in Netlify's data processing agreement, together with the technical safeguards described in this policy, including encryption in transit.

Security

The site is served over HTTPS with a valid certificate, and security headers are applied to every response, including content type protection, a strict referrer policy and a permissions policy that denies camera, microphone and geolocation access. Access to the form dashboard and to the publisher's inbox is protected by strong, unique credentials and two factor authentication. No system is perfect, and if a breach ever affects your data we will tell you and the competent supervisory authority without undue delay.

Your rights in the United States

If you live in California, Colorado, Connecticut, Utah or Virginia, state privacy law gives you the right to know what personal information has been collected about you, the right to obtain a copy of it, the right to correct inaccuracies and the right to have it deleted. You also have the right not to be discriminated against for exercising those rights. We do not sell personal information and we do not share it for cross context behavioral advertising, so there is nothing to opt out of, but you may still make that request and we will confirm it in writing. California residents may designate an authorized agent to act for them, and we may ask for reasonable proof of that authorization.

Your rights in the European Union and the United Kingdom

Under the GDPR and the UK data protection regime you have the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object to processing based on legitimate interest, and the right to withdraw consent at any time without affecting the lawfulness of processing already carried out. You also have the right to lodge a complaint with a supervisory authority. In France that authority is the Commission Nationale de l'Informatique et des Libertes.

How to exercise your rights

Write to jimenezjulien42@gmail.com from the address you used on the form, or tell us which address you used. Say plainly what you want: a copy, a correction or a deletion. We answer within thirty days and usually much sooner. There is no charge unless a request is manifestly excessive or repetitive, in which case we will say so before doing anything.

Children's privacy

This website and the VeilFittings service are business tools intended for shop owners and their staff. They are not directed at children, and we do not knowingly collect personal information from anyone under sixteen years of age. If you believe a child has sent us information through this site, write to us and we will delete the record promptly.

Changes to this policy

If the way this site collects or handles data changes, this page is updated and the date at the top of the page changes with it. Material changes affecting people who have already written to us are also sent by email to the address used on the form. Continuing to use the site after a change means the current version applies.

Policy written and maintained by Jimenez Julien for MLJ, SASU. See also the terms of service and the legal notice.