Privacy policy

Who is responsible for your data

The data controller for this website is MLJ, SASU, a French simplified joint stock company registered in Paris under SIREN 934 769 837, publisher of KilnSeat. The publication director is Jimenez Julien. Any question about this policy, and any request to exercise your rights, can be sent to jimenezjulien42@gmail.com. There is no separate privacy team: the founder reads and answers these messages himself.

What the contact form collects

The only place this website collects personal information is the walkthrough request form in the contact section of the home page. When you submit that form, these named fields are transmitted and stored:

• name, your full name, so we can address a reply to you
• email, your work email address, which is where the reply goes
• company, the name of your studio, so we can prepare a relevant walkthrough
• role, your role at the studio, chosen from a list
• request, whether you want a demo, early access or a quote
• size, an approximate member and kiln count for your studio
• message, your free text answer describing how your kiln queue is recorded today
• consent, the record that you ticked the consent box before sending
• subject and recipient, two hidden routing fields that direct the message to the correct mailbox
• bot-field, an empty honeypot field used to discard automated spam submissions

Netlify also records technical metadata with each submission, including the date and time and the originating IP address, as part of its spam filtering. Please do not include member names, student records, health information or payment card details in the message field. If you need to discuss specific member data, we will arrange a secure channel first.

Why we process it, and on what legal basis

Your submission is used for one purpose only: to answer your enquiry, prepare a walkthrough of KilnSeat against your situation, and follow up on that conversation. Where the General Data Protection Regulation applies, our legal basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a business enquiry that you initiated. Where United States state privacy law applies, the processing is limited to the purpose you submitted the form for. We do not use your submission to build a marketing list, we do not send newsletters to addresses collected this way, and we do not sell or share your information with any third party for advertising or for their own purposes.

Who processes and stores submissions

Submissions are processed and stored by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which hosts this site and operates the Netlify Forms service. Netlify acts as our processor and stores the submission in our account dashboard, from where it is forwarded to the publisher's email inbox. Netlify's own security and privacy commitments apply to that storage. No other analytics platform, advertising network, customer data platform or data broker receives your submission.

Cookies and tracking

This website sets no advertising cookies, no third party analytics cookies and no cross site tracking pixels. There is no Google Analytics tag, no advertising platform tag, no session recording and no fingerprinting script on any page. The only third party requests the pages make are to Google Fonts for the two typefaces used in the design, which serves the font files and receives the standard request information any file download involves. Because nothing on this site requires consent for cookies, you will not see a consent banner here.

How long submissions are kept

Enquiry submissions are kept for twenty four months from the date you send them, so that we can pick up a conversation you started last season and honor any commitment made during it. After twenty four months the submission is deleted from the Netlify Forms dashboard and from the publisher's mailbox. If you ask us to delete your submission sooner, we do so within thirty days and confirm by email. Where an enquiry becomes a paying customer relationship, the relevant records move under the retention terms of the customer agreement instead of this policy.

International transfers

MLJ, SASU is established in France and Netlify is established in the United States, so a submission made from the European Economic Area is transferred to the United States. That transfer relies on the European Commission's standard contractual clauses incorporated into Netlify's data processing agreement, together with the supplementary technical measures Netlify applies, including encryption in transit and access control on the forms dashboard. A submission made from within the United States is processed and stored in the United States.

Your rights

If you are a resident of California, Colorado, Connecticut, Utah or Virginia, you have the right to know what personal information we have collected about you, the right to obtain a copy of it, the right to have it corrected, and the right to have it deleted. You also have the right not to face discriminatory treatment for exercising those rights. We do not sell personal information and we do not share it for cross context behavioral advertising, so there is nothing to opt out of, but you may still send an opt out request and we will record it. California residents may designate an authorized agent to make a request on their behalf.

If the General Data Protection Regulation applies to you, you have the rights of access, rectification, erasure, restriction of processing, objection to processing, and data portability, and you may withdraw your consent at any time without affecting the lawfulness of processing carried out before you withdrew it. You may also lodge a complaint with your national supervisory authority, which in France is the Commission Nationale de l'Informatique et des Libertes.

How to exercise your rights

Send your request to jimenezjulien42@gmail.com with enough detail to locate your submission, normally the email address you used and the approximate date you wrote in. We answer within thirty days. If a request is unusually complex we will tell you within those thirty days and explain how much longer we need. We may ask one verification question before acting on a deletion request, in order to avoid deleting somebody else's record on a stranger's instruction. There is no charge for making a request.

Children's privacy

KilnSeat is business software sold to studio operators and this website is not directed at children. We do not knowingly collect personal information from anyone under sixteen years of age through this site. Studios that run kids' camps enter student records inside the application under their own customer agreement, acting as the controller of that information, and this website policy does not cover those records. If you believe a child has submitted personal information through the form on this site, write to us and we will delete it promptly.

Security

Pages are served over HTTPS with strict transport security, and the site sends content type, referrer policy, frame and permissions headers on every response. Access to the forms dashboard and the publisher mailbox is protected by strong unique credentials and two factor authentication. No system is perfect, and if a breach ever affects information you sent through this form we will notify affected people and the relevant authority within the deadlines the law sets.

Changes to this policy

If this policy changes, the revised version is published on this page with a new last updated date at the top. Material changes affecting how existing submissions are used will also be sent by email to the address in the affected submissions. The version published here is always the version in force.