Privacy policy

Who is responsible for your data

The data controller is MLJ, SASU, registered in Paris under SIREN 934 769 837, with Jimenez Julien as publication director. Every privacy question, request or complaint about this website goes to jimenezjulien42@gmail.com and is answered by a person, not by an automated queue.

What the contact form collects

The only place this website gathers personal information is the request form in the contact section of the home page. When you submit it, the following named fields are transmitted to us: name (your full name), email (your work email address), company (your farm name), role (your role on the farm, chosen from a list), request (whether you want a demo, early access or a quote), size (the number of shares you pack each week, chosen from a range), message (whatever you write about your pack day) and consent (the record that you ticked the consent box).

Three hidden technical fields travel with the submission: form-name, which routes the message, subject, which labels it, and recipient, which is the mailbox that receives it. A fourth hidden field named bot-field exists purely to catch automated spam and is always empty for a human visitor. We do not ask for a phone number, a postal address, payment details or anything about your members.

Why we hold it, and on what legal basis

We use what you send for one purpose: to answer you, to prepare and run the demo or quote you asked for, and to keep a record of that conversation if you go on to become a customer. We do not profile you, we do not score you and we do not sell, rent, trade or otherwise disclose your information to data brokers or advertisers.

Where the EU General Data Protection Regulation applies, the legal basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a commercial enquiry that you started, and where relevant the steps taken at your request before entering a contract. You may withdraw consent at any time; withdrawing it does not affect what we did lawfully before the withdrawal.

Who processes the submissions

Form submissions are received and stored by Netlify Forms, a service of Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which also hosts this website. Netlify acts as our processor for that data and stores submissions on its infrastructure so that we can read them. A notification copy is delivered by email to the address named above. No other third party receives what you send.

How long we keep it

Enquiries that do not lead anywhere are deleted from the Netlify Forms store and from the notification mailbox within twelve months of the last message exchanged. If you become a customer, the enquiry is kept for the life of the account and then for three years after it closes, which covers our commercial and accounting obligations. Spam caught by the honeypot field is discarded automatically and is never read.

Cookies, analytics and tracking

This website sets no advertising cookies and runs no third party analytics scripts. There is no tracking pixel, no remarketing tag, no social network embed and no behavioral profiling of any kind on these pages. The site loads two typefaces, Zilla Slab and Work Sans, from Google Fonts; that request reveals your IP address to Google in the same way any request for a file does, and it sets no cookie on this site. Our hosting provider keeps short lived technical logs, including IP addresses, for security and abuse prevention.

International transfers

MLJ, SASU is established in France and our hosting and form processing take place on infrastructure operated by a United States company. Where personal information is transferred out of the European Economic Area, that transfer relies on the European Commission's standard contractual clauses in Netlify's data processing agreement, along with the technical measures Netlify applies, such as encryption in transit and at rest. If you are writing to us from the United States, your submission is stored in the United States.

Your rights in the United States

Residents of California, Colorado, Connecticut, Utah and Virginia have statutory privacy rights, and we extend the same handling to everyone who writes to us regardless of where they live. Those rights include the right to know what personal information we hold about you and how it is used, the right to obtain a copy of it, the right to have it corrected, the right to have it deleted, and the right not to be discriminated against for exercising any of them. We do not sell personal information and we do not share it for cross context behavioral advertising, so there is nothing to opt out of on that front. To exercise any right, write to jimenezjulien42@gmail.com.

Your rights under the GDPR

If you are in the European Union or the United Kingdom, you have the right of access, rectification, erasure, restriction of processing, objection to processing and data portability, plus the right to withdraw consent at any time. You also have the right to lodge a complaint with your national supervisory authority; in France that is the Commission Nationale de l'Informatique et des Libertes. We answer rights requests within thirty days and we do not charge a fee for a reasonable request.

How to exercise a right

Send an email to jimenezjulien42@gmail.com from the address you used on the form, tell us what you want done, and we will confirm the action in writing once it is complete. If we cannot identify you from the address you write from, we may ask one narrow follow up question to match your request to a record. We never ask for identity documents to process a deletion request from this website.

Security

Pages and form submissions travel over HTTPS. Access to the form store and to the notification mailbox is limited to the publication director and to the small support team working under his direction, and is protected by multi factor authentication. We review who has access at the start and end of every growing season.

Children's privacy

CropShareBox is a business service for farm operators. It is not directed at children, and we do not knowingly collect information from anyone under sixteen. If you believe a child has sent us information through this website, write to us and we will delete it promptly.

Changes to this policy

If our practices change, this page is updated and the date at the top of it changes with it. Material changes affecting people who have already written to us are also notified by email to the address they used. This version was last updated on March 2, 2026.