Privacy policy

Last updated: March 2, 2026

Who is responsible for your data

The controller of the personal data described here is MLJ, SASU, a French simplified joint stock company registered under SIREN 934 769 837, publisher of ShearHold. The publication director is Jimenez Julien. You can reach a human being about anything in this policy at jimenezjulien42@gmail.com. There is no privacy team and no ticket queue between you and the person accountable for these decisions.

What the request form collects

The form in the request section of the home page is the only place on this website where you can send us personal data. When you submit it, these fields are transmitted and stored:

• name: your full name, so the reply is addressed to a person.
• email: the work address we answer at.
• company: your salon or suite name, which tells us the kind of operation you run.
• role: where you stand in the salon, chosen from a fixed list such as booth renter, colorist or salon owner.
• request: whether you want a demo, early access or a quote.
• size: how many chairs you are responsible for, chosen from a fixed list.
• message: whatever you write in the free text box, which is usually a description of how appointments fall through in your week.
• consent: the record that you ticked the consent box before sending the form.

Three hidden fields travel with the submission for routing purposes only: form-name, which identifies the form; subject, a fixed line naming the site the request came from; and recipient, the address the message is delivered to. A fourth hidden field, bot-field, is an anti spam trap that should stay empty and is discarded. The form also records the date and time of submission and the IP address seen by the form processor, which is standard abuse protection.

Why we hold it, and on what legal basis

We use these details for one purpose: to answer your request, prepare a walkthrough that reflects your real service menu, and follow up on that conversation. We do not build advertising audiences, we do not enrich your record with data bought from a broker, and we never sell or rent contact details. Under the EU General Data Protection Regulation, the legal basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a business enquiry we did not initiate. For visitors in the United States, the same handling applies whether or not your state has a comprehensive privacy statute.

Who processes it

Form submissions are processed and stored by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, through the Netlify Forms feature. Netlify also hosts this website and keeps standard server logs. A copy of each submission is delivered by email to the address named in the recipient field and is read in a standard email account. No other processor receives this data. There is no customer relationship platform behind this form and no marketing automation tool attached to it.

How long submissions are kept

Requests are kept for twenty four months from the date you send them, so that a follow up conversation months later still has context, and are then deleted from the form store and from the email account. If you ask us to delete a submission sooner, we do it within thirty days and confirm it in writing. Server logs held by our host are retained on Netlify infrastructure according to its own retention schedule, which is measured in weeks rather than years.

Cookies, trackers and analytics

This website sets no advertising cookies, no third party analytics cookies and no cross site tracking pixels. There is no Google Analytics tag, no advertising platform tag, no session recording and no fingerprinting script. The only third party requests the pages make are for the two Google Fonts families used in the design, which are loaded from the Google Fonts service and cause your browser to disclose an IP address to that service in the normal way. Nothing on this site attempts to identify you before you decide to write to us.

Your rights in the United States

If you are a resident of California, Colorado, Connecticut, Utah or Virginia, state law gives you the right to know what personal information we hold about you, to receive a copy of it, to correct it, to delete it, and to opt out of its sale or of targeted advertising. Because we neither sell personal information nor use it for targeted advertising or profiling with legal effects, there is nothing for you to opt out of, but the right to access, correct and delete applies fully and we honor it regardless of which state you live in. California residents may also designate an authorized agent to act for them, and we will not treat you differently for exercising any of these rights.

Your rights in the European Union and the United Kingdom

If the GDPR or the UK GDPR applies to you, you have the right of access, rectification, erasure, restriction of processing, objection to processing, and data portability, plus the right to withdraw consent at any time without affecting processing already carried out. You also have the right to lodge a complaint with a supervisory authority; in France that is the Commission nationale de l'informatique et des libertes.

How to exercise your rights

Send one email to jimenezjulien42@gmail.com stating what you want done. Use the address you originally wrote from where possible, because that is how we verify a request without asking you for identity documents. We answer within thirty days and usually within two business days. There is no charge for a reasonable request.

International transfers

MLJ, SASU is established in France and its host and form processor are established in the United States, so data submitted through this site is transferred across the Atlantic. Those transfers rely on the European Commission standard contractual clauses incorporated into our agreement with Netlify, together with the technical protections that provider applies. If you would rather your details stay out of a US processor entirely, write directly to the email address above instead of using the form.

Children

ShearHold is a tool for professional salon businesses and this website is not directed at children. We do not knowingly collect personal information from anyone under sixteen years of age. If you believe a child has sent us details through the form, write to us and the record will be deleted promptly.

Security

The site is served over HTTPS, submissions travel encrypted, and access to the form store and the receiving mailbox is limited to Jimenez Julien and protected by multi factor authentication. No payment card data is ever collected by this website. Card details used inside the ShearHold product are vaulted by the payment processor and never stored by us.

Changes to this policy

When this policy changes in a way that affects what we collect or how long we keep it, the date at the top of the page is updated and the previous wording is kept on file so the change can be shown. Continuing to use the site after a change means the current version applies. Material changes affecting people who already wrote to us are notified by email to the address they used.