Privacy policy

Who is responsible for your data

The data controller for this website is MLJ, SASU, the company that publishes ChairGap, registered in Paris, France, and represented by its publication director Jimenez Julien. Every question, correction request or deletion request covered by this policy should be sent to jimenezjulien42@gmail.com. There is no separate privacy department to route your message through, and messages are answered by a person.

This policy covers chairgap.com, the public marketing site you are reading now. Patient information processed inside the ChairGap application on behalf of a subscribing dental practice is covered by a separate business associate agreement signed with that practice, under which MLJ, SASU acts as a service provider and processor rather than as a controller. This page is about the website, not about your patients.

What the contact form collects

The contact form on the home page collects exactly the following fields, and nothing else: name (your full name), email (your work email address), company (your practice name), role (your job title at the practice, chosen from a list), request (whether you want a demo, early access or a quote), size (how many hygiene chairs you run), message (the free text you write about your schedule) and consent (your confirmation that we may store the request in order to answer it).

Three hidden fields travel with the submission for routing purposes: a form name that identifies which site the message came from, a subject line, and the recipient address. A honeypot field named bot-field is included and is never filled by a human visitor. If it arrives with content, the submission is discarded as automated spam.

Please do not put patient names, chart numbers, dates of birth or any other protected health information into the message box. Nothing on this marketing site is designed to receive clinical data. If you need to show us a schedule, we will arrange a screen share where nothing is transmitted or stored.

Why we process it, and on what legal basis

We use what you send for one purpose: to answer your request and, if it goes somewhere, to arrange and prepare a demonstration and a commercial proposal. Under the EU General Data Protection Regulation the legal basis is your consent, which you give by ticking the consent box, together with our legitimate interest in responding to a business enquiry addressed to us. Under United States state privacy law the processing is a business purpose disclosed at the point of collection.

We do not sell your information. We do not share it with advertising networks, data brokers or affiliate partners. We do not use it to build a profile of you, and we do not add you to a marketing list unless you ask us to. There is no automated decision making and no profiling that produces a legal or similarly significant effect.

How long submissions are kept

Contact form submissions are kept for 24 months from the date they arrive, then deleted. If the conversation turns into a subscription, the enquiry is retained for the life of the account and for three years after it closes, because it forms part of the commercial record we are required to keep. You can ask for earlier deletion at any point and we will act on it within 30 days.

Who processes the data with us

Submissions are processed and stored by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which provides the hosting for this site and the Netlify Forms service that receives the messages. Netlify acts as our processor under its own data processing terms. A copy of each submission is also forwarded to the publisher's email inbox so that a human can reply. No other third party receives the contents of your message.

Cookies and analytics

This site sets no advertising cookies, no third party analytics cookies and no cross site tracking pixels. There is no Google Analytics tag, no advertising remarketing tag and no social network embed on any page. Your browser may store nothing at all beyond the standard cache. Because no tracking technology is in use, there is no consent banner to click through, which is how we think a marketing site should behave.

Netlify records ordinary server logs, including the IP address that requested a page, the time of the request and the user agent string. Those logs exist to keep the service running and to defend against abuse. They are held for a short retention period by the host and are not used by us to identify individual visitors.

International transfers

MLJ, SASU is established in France and the hosting and form processing take place on infrastructure operated by a United States company. Where personal data collected through this site is transferred from the European Economic Area to the United States, that transfer relies on the standard contractual clauses adopted by the European Commission, together with the supplementary technical measures applied by the host, including encryption in transit and at rest. You can ask us for the details of these safeguards at the contact address above.

Your rights in the United States

Depending on where you live, state privacy law gives you specific rights over the personal information we hold. Residents of California under the California Consumer Privacy Act as amended, and residents of Colorado, Connecticut, Utah and Virginia under their respective state statutes, may request access to the personal information collected about them, request a copy of it in a portable format, request its correction, and request its deletion. You may also opt out of any sale or sharing of personal information for targeted advertising, although we carry out neither.

We will never charge you for making a request, and we will never treat you differently because you made one. Verification is intentionally light: we reply to the email address the request comes from, and for a request made about a form submission we check the address against the message on file. Where state law provides a right to appeal a refused request, you may appeal by replying to our decision, and we will respond to the appeal within 45 days.

Your rights under the GDPR

If you are in the European Union, the European Economic Area or the United Kingdom, you have the right to access your data, to have inaccurate data corrected, to have your data erased, to restrict or object to processing, to receive your data in a machine readable format, and to withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To exercise any of these rights, write to jimenezjulien42@gmail.com and say plainly what you want. We answer within 30 days.

If you believe we have handled your data badly, you may complain to your national supervisory authority. In France that is the Commission Nationale de l'Informatique et des Libertes. We would rather hear from you first so that we can fix the problem directly, but the right to complain is yours regardless.

Children's privacy

ChairGap is a business tool sold to dental practices and this website is not directed at children. We do not knowingly collect personal information from anyone under 16 years of age through this site. If you believe a child has submitted information through the contact form, write to us and we will delete the record without asking for anything further. Note that patient records processed inside the application on behalf of a practice, which can include minors, fall under the business associate agreement and the practice's own consent framework rather than under this policy.

Security

Traffic to this site is served over HTTPS with modern transport encryption. Form submissions are stored encrypted by the processor. Access to submissions is limited to the publication director. We apply security headers on every response, including strict content type handling, a restrictive referrer policy and a permissions policy that denies camera, microphone and geolocation access outright.

Changes to this policy

If this policy changes in a way that affects what we collect or why, we will update the date at the top of the page and, where the change is material, we will email the people who have an open enquiry or an active account. The current version is the one published here. Previous versions are available on request.