Privacy policy

Who is responsible for your data

The data controller for this website is MLJ, SASU, the company that publishes StallDeck, with its registered office in Paris, France and the registration details set out in the legal notice. The publication director, Jimenez Julien, handles privacy requests personally. You can reach him at jimenezjulien42@gmail.com for any question about this policy or about information you have already sent us.

What the contact form collects

This site has one form, the walkthrough request in the contact section of the home page. When you submit it, the following named fields are transmitted and stored:

• name: your full name, so we know who we are writing back to.
• email: your work email address, which is where the reply goes.
• company: the name of your market or association.
• role: your role, chosen from a short list such as Market Manager or Executive Director.
• request: what you are asking for, such as a demo or a quote.
• size: the size band of your market in stalls.
• message: the free text you write about how you assign stalls and collect fees today.
• consent: the record that you ticked the consent box before sending.
• form-name, subject and recipient: three hidden technical fields that route the message to the right inbox.
• bot-field: an empty anti spam field that human visitors never see and never complete.

Nothing else is collected on this website. There is no account creation here, no newsletter signup, no chat widget and no comment section. Browsing the pages of stalldeck.com does not require you to identify yourself.

Legal basis for processing

We process your form submission on the basis of your consent, given by ticking the consent box, and on the basis of our legitimate interest in answering a commercial enquiry that you started. If you later withdraw consent, we stop processing and delete what you sent. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

How long submissions are kept

Form submissions are kept for twenty four months from the date you send them, then deleted from both the Netlify Forms store and the email inbox. If you become a paying customer, the enquiry is retained for the duration of the commercial relationship and for the accounting retention period required by French law, which is ten years for the invoice records themselves. If you ask us to delete an enquiry sooner, we do it within thirty days and confirm in writing.

Who processes and stores submissions

Form submissions are processed and stored by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which hosts this site and operates Netlify Forms. Netlify acts as our processor under a data processing agreement. A copy of each submission is also delivered by email to the publisher's inbox at Google, which acts as our email provider. No other company receives your submission, and we do not sell, rent or trade contact details with anyone, ever.

Cookies, analytics and advertising

This site sets no advertising cookies, no third party analytics cookies and no marketing pixels. There is no Google Analytics tag, no Meta pixel, no session recording and no cross site tracking of any kind. Netlify records standard server request logs, including IP address and user agent, for security and traffic reporting, and those logs are retained on a short rolling window. Web fonts are requested from Google Fonts, which receives the request to serve the font file. If you prefer to avoid that request, browser settings and content blockers can stop it and the site remains fully readable with the fallback typefaces.

International transfers

Because our host is a United States company, personal data submitted through the form is transferred to and stored in the United States. The transfer is covered by the standard contractual clauses adopted by the European Commission and by our processor's participation in the applicable transatlantic data privacy framework. You can request a copy of the safeguards in place by writing to the contact address.

Your rights in the United States

If you live in California, Colorado, Connecticut, Utah or Virginia, state privacy law gives you the right to know what personal information we hold about you, the right to obtain a copy of it, the right to correct it, and the right to have it deleted. You also have the right not to be discriminated against for exercising those rights. We do not sell personal information and we do not share it for cross context behavioral advertising, so there is nothing to opt out of on that front, but you may still ask us to confirm this in writing. California residents may designate an authorized agent to make a request on their behalf. We answer all state privacy requests within forty five days.

Your rights under GDPR

If you are in the European Union, the United Kingdom or Switzerland, you have the right of access, rectification, erasure, restriction of processing, objection to processing and data portability, together with the right to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority. In France that authority is the CNIL. We would rather hear from you first so we can fix the problem directly.

How to exercise your rights

Send a message to jimenezjulien42@gmail.com stating what you want: a copy, a correction, or a deletion. Use the email address you originally wrote from where possible, since that is how we locate the record. We may ask one clarifying question to confirm identity, and we never ask for a document scan or a government identifier to process a routine request. Requests are answered within thirty days and free of charge.

Children's privacy

StallDeck is a business product for market managers and association staff. This site is not directed at children, and the contact form is not intended for anyone under sixteen. We do not knowingly collect personal information from children. If you believe a child has sent us information through this form, write to the contact address and we will delete it promptly.

Security

The site is served over HTTPS. Form submissions travel encrypted and are stored on our processor's infrastructure with access limited to the publication director. We keep the number of people who can read submissions at one, and we review the stored list twice a year to delete anything past its retention window.

Changes to this policy

If this policy changes, the revised version is published on this page with a new update date at the top. Material changes affecting people who have already written to us are also announced by email to the address they used. This version is dated March 2, 2026.