Privacy policy

Who is responsible for your data

BarnBooked is published by MLJ, SASU, a company registered in Paris, France, with Jimenez Julien as publication director. MLJ, SASU is the controller of the personal data described in this policy. You can reach the controller at any time at jimenezjulien42@gmail.com. This policy covers the marketing website at barnbooked.com. Data handled inside a subscribed barn account, such as rider records and horse files, is covered by the data protection terms in our subscription agreement, where the barn is the controller and MLJ, SASU acts as processor on its instructions.

What the contact form collects

The contact form on the home page collects exactly these fields, and nothing else: name, your full name; email, your work email address; company, the name of your barn; role, your role at the barn chosen from a list; request, the kind of contact you are asking for; size, the size of your school string chosen from a list; message, your free text answer to the question we ask; and consent, the checkbox confirming you agree to be contacted. The form also carries three hidden values that never contain anything you type: form-name, subject and recipient. A hidden bot-field is present to catch automated submissions and should always be left empty.

Our hosting provider records the technical details of the submission, including the time it was sent and the IP address it came from, as part of ordinary spam protection. We do not ask for a phone number, a payment card, a home address or any information about your riders on this form.

Why we process it and on what legal basis

We use what you send for one purpose: to answer your request, prepare a demonstration of the product for your barn, and follow up on that conversation. Under the EU General Data Protection Regulation the legal basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a business enquiry that you initiated. We do not use your details for unrelated marketing, we do not build advertising profiles and we never sell, rent or trade contact information.

Who processes submissions

This site is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States. Form submissions are received, processed and stored by Netlify Forms, and a copy is delivered by email to jimenezjulien42@gmail.com. Netlify acts as our processor under a data processing agreement. Beyond Netlify and the email provider that delivers that message, no third party receives your submission. We do not run third party analytics, advertising pixels, session recording, heat mapping or social tracking scripts on this website.

Cookies

This website sets no advertising cookies and no analytics cookies. Nothing on these pages tracks you between sites. Your browser may store standard technical items required to deliver the page, and the web fonts used here are requested from Google Fonts, which receives the request as part of serving the font files. If you would rather avoid that request entirely, most browsers allow you to block third party font loading, and the site remains fully readable with the fallback typefaces.

How long we keep it

Contact form submissions are kept for twenty four months from the date you send them, so that we can pick up a conversation that pauses for a season, which is common in a business with a quiet winter. After twenty four months the submission and the email copy are deleted. If you ask us to delete your message sooner, we do so within thirty days and confirm by email. Records we are legally required to retain, such as invoices for a paid subscription, are kept for the statutory period that applies to them.

Your rights in the United States

If you live in California, Colorado, Connecticut, Utah or Virginia, state privacy law gives you the right to know what personal information we hold about you, to obtain a copy of it, to correct inaccurate information, to delete it, and to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell or share personal information and we do not run targeted advertising, so there is nothing to opt out of, but you can still exercise the other rights at any time. California residents also have the right not to be discriminated against for exercising these rights, and may use an authorized agent to make a request on their behalf. If we decline a request you may appeal by replying to our response, and we will review the appeal within forty five days.

Your rights under the GDPR

If you are in the European Union or the United Kingdom you have the right of access, rectification, erasure, restriction of processing, objection to processing, and data portability, and the right to withdraw consent at any time without affecting processing already carried out. You also have the right to lodge a complaint with a supervisory authority, which in France is the Commission Nationale de l'Informatique et des Libertes.

How to exercise your rights

Send one email to jimenezjulien42@gmail.com describing what you want. Please use the address you originally wrote from where possible, since it helps us find your record without asking for further identification. We answer every request within thirty days and in most cases within two business days. There is no charge for a request unless it is manifestly excessive or repetitive, in which case we will tell you before doing anything.

International transfers

MLJ, SASU is established in France and our hosting provider is established in the United States, so data submitted through this website is transferred across borders. Transfers to Netlify are covered by the European Commission standard contractual clauses together with supplementary technical measures, including encryption in transit and at rest. Where you are in the United States, your submission is stored in United States infrastructure.

Children's privacy

This website is aimed at people who own or work in a riding business, and it is not directed at children. We do not knowingly collect personal information from anyone under sixteen through this site. If you believe a minor has submitted the contact form, write to jimenezjulien42@gmail.com and we will delete the record promptly. Inside a barn's own BarnBooked account, information about minor riders is entered by the barn under its own responsibility, with parental consent handled by the barn as part of its release process.

Security

Traffic to this site is encrypted with TLS. Access to form submissions is limited to the publication director. Backups are encrypted and access to the production environment requires multi factor authentication. No system is perfect, and if a breach affects your data we will notify you and the relevant authority within the timeframes the law requires.

Changes to this policy

If this policy changes we update the date at the top of the page and, when the change is material, we contact people whose data we are currently holding. The version in force is always the one published here.