Privacy policy

Who is responsible for your data

This website is published by MLJ, SASU, a French company whose full registration details appear on the legal notice. The publication director, Jimenez Julien, is the person responsible for how personal data submitted through this site is handled. Any question about this policy can be sent to jimenezjulien42@gmail.com and will be answered by a person, not an automated system.

This policy covers the marketing website at cellarship.com. It does not cover the CellarShip application itself, where a winery is the controller of its own club member records and MLJ, SASU acts as a processor under a separate written agreement.

What the contact form collects

The contact form on the home page is the only place on this website where you can submit personal data. When you send it, the following named fields are transmitted and stored:

• name, your full name, so that a reply can be addressed to you correctly.
• email, your work email address, which is the only channel we use to answer you.
• company, your winery name, so we can look at the shape of your club before the call.
• role, your job title from a fixed list, which tells us whether to talk about the pack line or the balance sheet.
• request, the kind of contact you are asking for, chosen from a fixed list.
• size, an approximate club member count band, used to suggest a suitable plan.
• message, whatever you choose to write about your next release.
• consent, a record that you ticked the consent box, together with the time of submission.
• bot-field, a hidden anti spam field that legitimate visitors never fill.
• subject and recipient, two fixed hidden values that route the message internally.

Please do not send club member lists, cardholder data or any other person's details through this form. If you need to share a member export before a walkthrough, ask us and we will arrange a secure transfer instead.

Legal basis for processing

For visitors in the European Economic Area and the United Kingdom, the processing rests on your consent, given by ticking the consent box, and on our legitimate interest in answering a commercial enquiry that you started. You can withdraw consent at any time, and withdrawing it does not affect the lawfulness of anything done before you withdrew. For visitors in the United States, the processing rests on the fact that you voluntarily provided the information in order to receive a reply.

How long submissions are kept

A form submission is kept for twenty four months from the day it arrives, then deleted from both the form store and the mailbox. If the exchange leads to a paid subscription, the correspondence moves into the customer record and is kept for the life of the contract plus the retention period required by French commercial and tax law. If you ask us to delete a submission earlier, we do it within thirty days and confirm by email.

Who processes the data

Form submissions are received and stored by Netlify Forms, operated by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which also hosts this website. Netlify acts as our processor for that storage and for forwarding the message to us. The forwarded copy arrives in an email mailbox operated by our email provider. No other company receives your submission, and it is never sold, rented, exchanged or used to build an advertising audience.

Cookies and measurement

This website sets no advertising cookies, no cross site tracking pixels and no third party analytics scripts. There is no consent banner because there is nothing to consent to beyond the form itself. Your browser may store the fonts and stylesheets needed to display the page, and the host keeps standard server logs containing IP addresses and request lines for security and abuse prevention, which are retained for a short technical period and are not combined with form submissions to profile you.

International transfers

Because our host is a United States company, a submission made from Europe is transferred to the United States. That transfer is covered by the standard contractual clauses adopted by the European Commission, together with the technical measures our host applies in transit and at rest. If you would rather not have your details transferred in this way, write to us directly by email and we will handle your enquiry outside the form.

Your rights in the United States

Depending on where you live, state privacy law gives you rights over the information described above. Residents of California, Colorado, Connecticut, Utah and Virginia may request access to the personal information we hold, request its correction, request its deletion, and receive a portable copy. California residents may also ask what categories of information were collected and to whom they were disclosed, and may not be treated differently for exercising a right. We do not sell personal information, we do not share it for cross context behavioral advertising, and we do not use it for profiling that produces legal effects, so there is nothing to opt out of on those grounds. To use any of these rights, email us and say which right you want to exercise.

Your rights in Europe

If the General Data Protection Regulation applies to you, you hold the rights of access, rectification, erasure, restriction of processing, objection to processing, and data portability, along with the right to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority. In France that authority is the Commission Nationale de l'Informatique et des Libertes, and you may equally complain to the authority in your own country of residence.

How to exercise your rights

Send an email to jimenezjulien42@gmail.com stating what you want and the email address you used on the form, so we can find the record. We answer within thirty days. If a request is unusually broad or repeated, we may ask you for a little more detail before acting, and we will explain why. We do not charge a fee for handling a request.

Children

This site sells business software to licensed alcohol producers and is not directed at children. We do not knowingly collect personal information from anyone under sixteen, and the contact form is intended for people acting in a professional capacity. If you believe a child has submitted information through this site, write to us and we will delete it without delay.

Security

The site is served over HTTPS only, form storage is access controlled, and the mailbox that receives submissions is protected by multi factor authentication. Access to submissions is limited to the publication director. No system is perfect, and if a breach ever affects data collected through this website we will notify affected people and the relevant authority within the time limits the law sets.

Changes to this policy

When this policy changes, the date at the top of the page changes with it and the previous version is retained internally. Substantive changes that affect how we use existing submissions are announced by email to anyone whose submission is still within the retention window. The person accountable for this page is named on the author page.