Privacy
Privacy policy for QuiltCounter
Last updated: September 4, 2026. This policy explains exactly what we collect through this website, why, and how you get it back or removed.
Who is responsible for your data
QuiltCounter is published and operated by MLJ, SASU, a company registered in Paris, France under SIREN 934 769 837. For the information described here, MLJ, SASU acts as the data controller. The publication director is Jimenez Julien, who also answers privacy requests personally. You can reach us at any time at jimenezjulien42@gmail.com, and we treat every request as a formal one whether or not it uses legal language.
What the contact form collects
This website has exactly one place where you can send us personal information: the request form in the contact section of the home page. When you submit it, we receive the following fields, and nothing else: name, email, company, role, request, size, message and consent. Two hidden fields, subject and recipient, are attached so that your message is routed to the correct inbox, and a honeypot field named bot-field is used only to detect automated spam. We do not ask for a phone number, a mailing address, a card number or any financial detail on this website.
Our hosting provider records standard technical information when a page is served, including the requesting IP address, the browser user agent and the time of the request. These server logs exist to keep the site available and to defend against abuse. They are not combined with form submissions to build a profile of any individual visitor.
Why we process it, and the legal basis
We use what you send for one purpose: to answer you, to prepare a walkthrough of the software if you asked for one, and to keep a record of the commercial conversation that follows. Under the European General Data Protection Regulation, the legal basis is your consent, given when you tick the consent box, together with our legitimate interest in responding to a business enquiry and in keeping proportionate records of our commercial exchanges. Where a contract follows, the processing necessary to perform that contract has its own basis. We never use enquiry data for automated decision making or profiling.
How long we keep submissions
Form submissions that do not lead to a customer relationship are deleted within twenty four months of the last exchange. Submissions that become customer records are kept for the life of the account and for the period after it that French commercial and accounting law requires, which is ten years for invoicing records. If you ask us to delete an enquiry earlier, we do so within thirty days and confirm by email unless you tell us not to write back.
Netlify Forms and other processors
Form submissions are processed and stored by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which hosts this website and provides the form handling service. Netlify stores the submission and forwards a notification to our inbox. Our email is handled by a standard business mail provider. These are the only third parties that see the contents of what you send. We do not sell personal information, we do not share it with fabric manufacturers, distributors or any data broker, and we do not exchange it for anything of value.
Cookies and tracking
This website sets no advertising cookies and runs no third party analytics. There is no Google Analytics tag, no advertising pixel, no social media tracker and no session recording tool anywhere on these pages. The only scripts loaded are our own small JavaScript file, served from this domain, and the Google Fonts stylesheet used to load the two typefaces the design depends on. Because there is no tracking, there is no consent banner to dismiss.
International transfers
MLJ, SASU is established in France, and our hosting and form processing take place in the United States with Netlify, Inc. When personal data moves from the European Economic Area to the United States, the transfer is covered by the standard contractual clauses adopted by the European Commission, together with the supplementary technical measures our providers apply, including encryption in transit and at rest. If you are located in the United States, your data is processed where the hosting infrastructure sits and may be accessed by our team in France in order to reply to you.
Your rights
If you are in the European Economic Area or the United Kingdom, the GDPR gives you the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time without affecting the lawfulness of processing carried out before you withdrew it. You may also lodge a complaint with a supervisory authority, which in France is the CNIL.
If you are a resident of California, Colorado, Connecticut, Utah or Virginia, your state privacy law gives you the right to confirm whether we process personal information about you, to access it, to correct inaccuracies, to delete it, to obtain a portable copy, and to opt out of sale or targeted advertising. We do not sell personal information and we do not conduct targeted advertising, so there is nothing to opt out of, but the right stands and we will confirm it in writing if you ask. California residents may also designate an authorized agent to make a request, and we will not treat you differently for exercising any of these rights.
How to exercise a right
Send an email to jimenezjulien42@gmail.com describing what you want. Please use the address you originally wrote from where possible, since that is how we locate a submission quickly. We reply within thirty days and, if a request is complex enough to need longer, we tell you why before that deadline passes. There is no charge for a reasonable request. If we cannot identify you from what you send, we may ask one clarifying question rather than refuse outright.
Security
The site is served over HTTPS only, with strict transport and content type headers. Access to form submissions is limited to the publication director and the two people responsible for shop onboarding, each with individual credentials and multi factor authentication. Customer records inside the QuiltCounter application are encrypted at rest, backed up nightly, and restorable by the account owner. We review access rights every quarter and remove any that are no longer needed.
Children
QuiltCounter is a business product sold to retail shops and it is not directed at children. We do not knowingly collect personal information from anyone under sixteen years of age. If you believe a child has sent us information through this website, write to jimenezjulien42@gmail.com and we will delete it promptly and confirm that it is gone.
Changes to this policy
If this policy changes we update the date at the top of the page and, where the change is significant, we tell active customers by email before it takes effect. Previous versions are available on request. This version is effective from September 4, 2026.