Privacy policy

Who is responsible for your data

The controller of the personal data described here is MLJ, SASU, the company that publishes BoothInventory, whose full registration details appear on the legal notice page. The publication director, Jimenez Julien, handles privacy requests personally. You can reach him at jimenezjulien42@gmail.com, and that single address is the route for every request described on this page.

What the contact form collects

This website has one form, the demand request form in the contact section of the home page. When you complete it, the following named fields are transmitted and stored:

• name: your full name, so a reply can address a person rather than a studio.
• email: the work email address we answer to.
• company: your studio or shop name.
• role: the role you selected, such as maker and owner, studio manager, booth manager, production and wholesale lead, market or guild organizer, or bookkeeper for the studio.
• request: what you asked for, meaning a demo, early access or a quote.
• size: the number of shows you work in a year, which tells us which plan to discuss.
• message: the free text you write about your season and your current counting method.
• consent: the record that you ticked the consent box before sending.

Three hidden technical fields travel with the submission: form-name, which routes the message; subject, which labels it; and recipient, which sets the mailbox that receives it. A fourth hidden field named bot-field exists only to catch automated spam and is left empty by human visitors. The form processor also records the date and time of the submission and the IP address the message came from, as an anti abuse measure.

We do not ask for and do not want payment card numbers, bank details, government identifiers, health information or any special category data. Please do not include such information in the message field.

Why we hold it, and on what legal basis

Your submission is used for one purpose: to answer you, to arrange a walkthrough if you asked for one, and to keep a record of that exchange. Under the EU General Data Protection Regulation the legal basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a business request that you initiated. You may withdraw consent at any time, and doing so does not affect the lawfulness of what happened before you withdrew it.

We do not build advertising profiles, we do not use your details for automated decision making, and we do not add you to a marketing list because you asked a question. If a newsletter is ever offered it will be a separate, clearly labelled opt in.

How long submissions are kept

Form submissions are retained for 24 months from the date you send them, then deleted. If your enquiry turns into a paying account, the related correspondence is kept for the life of the account and for the period required by French commercial and tax law afterward. If you ask us to delete your submission earlier, we do it within 30 days and confirm by email.

Who processes the data

Netlify, Inc. hosts this website and operates Netlify Forms, which receives, stores and forwards submissions from the contact form. Netlify acts as our processor and stores submission records on its infrastructure. Email replies are sent and stored through our ordinary business mailbox. No other company receives your form data. We do not sell, rent, trade or share maker data with craft fair promoters, suppliers, list brokers or advertisers, and we never will.

Cookies and tracking

This site sets no advertising cookies, runs no third party analytics scripts and contains no social media tracking pixels. There is no cookie banner because there is nothing to consent to. The only external request the page makes is to Google Fonts, which serves the two typefaces used in the design; that request exposes your IP address to the font provider in the ordinary course of loading a web page. The small amount of JavaScript on this site runs entirely in your browser and sends nothing anywhere.

International transfers

MLJ, SASU is established in France. Netlify, Inc. is established in the United States, so a form submission sent from Europe is transferred to the United States. That transfer relies on the European Commission's standard contractual clauses as incorporated in Netlify's data processing agreement, together with the technical measures Netlify applies, including encryption in transit. If you would rather not use the form at all, write directly to jimenezjulien42@gmail.com instead.

Your rights in the United States

Residents of California may request to know the categories and specific pieces of personal information collected, request deletion, request correction, and opt out of any sale or sharing of personal information. We do not sell or share personal information as those terms are defined in the California Consumer Privacy Act, and we do not use it for cross context behavioral advertising. Residents of Colorado, Connecticut, Utah and Virginia have comparable rights of access, correction, deletion, portability and opt out under their own state statutes. You will never be treated differently, charged more or offered less because you exercised a privacy right. To make a request, email us with the address you used on the form so we can match the record; if we cannot verify the request we will tell you why.

Your rights in the European Union and the United Kingdom

If the GDPR or the UK GDPR applies to you, you have the right of access, rectification, erasure, restriction of processing, objection to processing and data portability, plus the right to withdraw consent at any time. Requests are answered within one month. If you believe your data has been handled improperly, you may lodge a complaint with your national supervisory authority, which in France is the Commission Nationale de l'Informatique et des Libertes.

Security

Traffic to this site is encrypted with HTTPS. Form submissions are stored inside Netlify's authenticated dashboard, access to which is limited to the publication director and protected by a strong unique credential and multi factor authentication. Access to the reply mailbox is protected the same way. No system is perfect, so if a breach ever affected your data we would notify you and the relevant supervisory authority within the deadlines the law sets.

Children

BoothInventory is a business tool sold to adults who run a craft or maker business. The service is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information through this form, write to us and we will delete it promptly.

Changes to this policy

If this policy changes we will update the date at the top of the page and describe the change in the first paragraph of the affected section. Material changes that affect how existing submissions are handled will also be sent by email to the address that made the submission. The current version was published on March 2, 2026.