Privacy policy
Last updated: September 4, 2026. This policy explains what polishbookapp.com collects when you contact us, why we hold it, how long we keep it and how you can have it removed.
Who is responsible
The controller of the personal data described here is MLJ, SASU, the publisher of PolishBook, registered in Paris, France under SIREN 934 769 837. The full publisher details are on the legal notice page. For any question or request about your data, write to jimenezjulien42@gmail.com. Requests are handled by Jimenez Julien personally.
What the contact form collects
The demo request form on the home page is the only place on this website where we ask you for personal information. It collects exactly these fields, and nothing else:
- name, your full name, so we can address you properly.
- email, your work email address, which is how we reply.
- company, your studio or salon name.
- role, your role in the business, chosen from a list.
- request, what you would like from us: a demo, early access or a quote.
- size, how many chairs you run, chosen from a list.
- message, your description of how you track client colors today.
- consent, the record that you ticked the consent box before sending.
- subject and recipient, two hidden technical fields that route the message to the right inbox, plus bot-field, an anti spam trap that should always be empty.
We do not ask for a phone number, a postal address, payment details or any information about your own clients. Please do not paste client names, phone numbers or health information into the message box. If you send us that kind of information anyway, we delete it as soon as we notice it.
Why we hold it, and on what legal basis
We use what you send for one purpose: to answer your request, arrange a demonstration, prepare a quote and follow up on that conversation. Under the EU General Data Protection Regulation the legal basis is your consent, given when you tick the box, together with our legitimate interest in responding to a business enquiry and taking steps at your request before entering into a contract. We do not use the form data to build advertising profiles, we do not enrich it from third party databases, and we never sell, rent or trade it.
How long submissions are kept
Form submissions are kept for 24 months from the date of the last exchange between us, then permanently deleted from both the Netlify forms store and our email inbox. If you become a paying customer, the correspondence is kept for the life of the account and for three years afterwards, which is the period we need in order to meet accounting and contractual obligations. You can ask us to delete an enquiry earlier at any time and we will do it within 30 days.
Who processes the data for us
Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, hosts this website and processes and stores every form submission through Netlify Forms. Netlify acts as our processor under a data processing agreement. Our email provider stores the copy of the message that reaches our inbox. No other company receives the contents of your enquiry.
Cookies and tracking
This website sets no advertising cookies, no third party analytics cookies and no social media pixels. There is no Google Analytics tag, no Meta pixel and no advertising network script on any page. The site loads two web fonts from Google Fonts, which means Google receives the request for the font files including your IP address, as it does for any site using that service. Server logs kept by our host record standard technical information such as IP address, browser type and requested page for security and reliability purposes, and are retained for a short period by the host.
Your rights
If you are in the European Union or the United Kingdom, the GDPR gives you the right to access the personal data we hold about you, to have inaccurate data corrected, to have it erased, to restrict or object to processing, to withdraw your consent at any time, to receive your data in a portable format and to lodge a complaint with a supervisory authority such as the CNIL in France.
If you are a resident of California, Colorado, Connecticut, Utah or Virginia, your state privacy law gives you the right to know what personal information we have collected about you and why, to obtain a copy of it, to have it corrected, to have it deleted, and to opt out of sale, targeted advertising and profiling. We do not sell personal information, we do not share it for cross context behavioral advertising, and we do not profile anyone, so there is nothing to opt out of, but the right still stands. We will not discriminate against you for exercising any of these rights. Residents of California may also designate an authorized agent to make a request on their behalf, and residents of Colorado, Connecticut and Virginia may appeal a refused request by replying to our decision email.
How to exercise your rights
Send a message to jimenezjulien42@gmail.com describing what you want done. Use the email address you contacted us from where possible, so we can match the request to a record without asking you for extra identity documents. We answer within 30 days, and we tell you what we found, what we changed and what we deleted. There is no charge for a reasonable request.
Children's privacy
PolishBook is a business tool sold to professional studios and to independent technicians. The service and this website are not directed at children, and we do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has sent us information through this site, write to us and we will delete it promptly.
International transfers
MLJ, SASU is established in France and our host, Netlify, is established in the United States, so data submitted through this site is transferred to and stored in the United States. Those transfers are covered by the European Commission standard contractual clauses included in our agreement with the processor, together with the technical measures described above. Application data created by paying customers inside the PolishBook product is stored on encrypted servers located in the United States.
Security and changes to this policy
Traffic to this site is encrypted with TLS, access to form submissions is limited to Jimenez Julien and protected by two factor authentication, and we review that access twice a year. If we change this policy we update the date at the top of the page, and if the change is significant we tell active customers by email before it takes effect.