Who is responsible for your data

The controller of the personal data described here is MLJ, SASU, the French company that publishes HerbalCounter and this website. The publication director is Jimenez Julien. For any question about this policy, or to exercise any right described below, write to jimenezjulien42@gmail.com. Messages about privacy are answered by a person, not by an automated queue.

What the contact form collects

This website has one form, the request form in the contact section of the home page. When you submit it, the following fields are transmitted and stored: name (your full name), email (your work email address), company (your practice or shop name), role (your job title, chosen from a list), request (what you are asking for: a demo, early access or a quote), size (an approximate yearly bottle volume, chosen from a list), message (your free text description of where your record keeping breaks down), and consent (your confirmation that you agree to be contacted).

Three hidden fields accompany every submission for routing and spam control: form-name, subject and recipient. A honeypot field named bot-field is present but invisible to people; if it is filled in, the submission is treated as automated and discarded. Netlify also records technical metadata with each submission, including the date and time and the originating IP address, as part of its spam filtering.

No other personal data is gathered on this site. There is no account creation on this website, no newsletter signup, no comment system and no upload facility.

Why we process it, and on what legal basis

Your submission is used for one purpose: to answer you and, if you asked for one, to arrange a demonstration or prepare a quote. The legal basis is the steps taken at your request before entering into a contract, together with our legitimate interest in responding to commercial enquiries about our own product. Your consent checkbox records that you understood and agreed to this at the time you wrote to us. We do not use form submissions for advertising, profiling or automated decision making, and we do not build behavioral profiles of visitors.

How long submissions are kept

Enquiries that do not lead to a customer relationship are kept for twenty four months from the date of the last exchange, then deleted from the form store and from the mailbox. Enquiries that become customer relationships are retained for the life of the account and for the periods required by French commercial and accounting law after it closes. You can ask for earlier deletion at any time and we will act on that request within thirty days unless a legal obligation requires us to keep a specific record.

Who processes and stores your submission

Submissions are processed and stored by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which hosts this website and operates Netlify Forms. Netlify acts as our processor under a data processing agreement and stores the submission so that we can retrieve it. A notification of your submission is also delivered to the publisher's email account so that a human being sees it and replies. No other company receives the contents of your message. We do not sell, rent, trade or share personal data with data brokers, advertisers or list vendors, and we never will.

Cookies and analytics

This website sets no advertising cookies, no third party analytics cookies and no cross site trackers. There is no Google Analytics tag, no advertising pixel and no social network tracking script on any page. The only third party resource loaded is the Google Fonts stylesheet used for the two typefaces on this site, which is requested by your browser when the page loads. Netlify keeps standard server access logs for security and for troubleshooting. Because no tracking cookies are used, no cookie consent banner is shown; there is nothing to consent to.

Data stored inside the HerbalCounter application

This policy covers the public website. Customer records held inside the HerbalCounter application, including client formula records, batch logs, ingredient lots and any documents a customer uploads, belong to the customer. In that context MLJ, SASU acts as a processor on the customer's instructions, under the data processing terms attached to the subscription agreement. Application data is encrypted in transit and at rest, hosted in the United States, and backed up nightly with a thirty day retention window. It is exportable in full at any time and is deleted sixty days after an account closes.

International transfers

The publisher is established in France and the hosting and form processing take place in the United States. Where personal data is transferred from the European Economic Area to the United States, the transfer relies on the European Commission's standard contractual clauses concluded with the processor, together with the supplementary technical measures described above, principally encryption in transit and at rest and strict access limitation.

Your rights

If you are in the European Union, the United Kingdom or the European Economic Area, the General Data Protection Regulation gives you the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent at any time without affecting processing already carried out. You also have the right to lodge a complaint with your national supervisory authority, which in France is the CNIL.

If you live in California, Colorado, Connecticut, Utah or Virginia, your state privacy law gives you the right to know what personal information has been collected about you, to obtain a copy of it, to have it corrected, to have it deleted, and to opt out of sale or of targeted advertising. We do not sell personal information as those laws define it, we do not share it for cross context behavioral advertising, and we do not use it for profiling with legal effects. You will never be treated differently for exercising a right. California residents may also designate an authorized agent to make a request on their behalf.

To exercise any right, email jimenezjulien42@gmail.com with the email address you used when you wrote to us and a short description of what you want. We acknowledge requests within five business days and complete them within thirty days. If we need to verify your identity we will ask only for what is strictly necessary, and we will not use verification information for anything else.

Children's privacy

HerbalCounter is a business tool sold to professional operators. This website is not directed to children, and we do not knowingly collect personal data from anyone under the age of sixteen. If you believe a child has sent us personal data through the contact form, write to the address above and we will delete it promptly.

Security

Traffic to this site is served over HTTPS. Security headers restrict framing, block content type sniffing and deny camera, microphone and geolocation access. Access to form submissions is limited to the publication director and protected by multi factor authentication. No system is perfect, and if a breach were ever to affect your data we would notify you and the competent authority within the deadlines the law sets.

Changes to this policy

When this policy changes, the updated version is published on this page with a new date at the top. Material changes affecting how enquiries are handled are also announced on the home page for at least thirty days. This version is dated September 4, 2026. Questions about it go to jimenezjulien42@gmail.com.