Privacy policy
This page explains, in plain language, what naplogapp.com collects when you write to us, why it is kept, how long it stays and what you can ask us to do with it. Nothing here is boilerplate copied from another site.
Who is responsible
The controller of the personal data described on this page is MLJ, SASU, a company registered in Paris, France under SIREN 934 769 837, publisher of the NapLog service and of the website naplogapp.com. The publication director is Jimenez Julien. Every privacy question, request or complaint can be sent directly to jimenezjulien42@gmail.com and is read by a person, not a ticketing robot.
What this policy covers
This policy covers the public marketing website at naplogapp.com. It describes the contact form on the home page and the technical logs created when a browser loads a page. It does not describe the child records that a subscribing program enters inside the NapLog application, which are processed on that program's instructions under a separate data processing agreement. If you are a parent whose child attends a program that uses NapLog, the program is the controller of your child's record, and you should address requests to that program first.
What the contact form collects
The form in the "Talk to us" section of the home page collects exactly these fields, and nothing else: name (your full name), email (your work email address), company (the name of your childcare program), role (your job title, chosen from a list), request (what you would like from us, chosen from a list), size (the number of children on your roster, chosen from a range), message (whatever you choose to write) and consent (your tick confirming we may store the message in order to reply).
The form also carries four technical fields that you never see or complete: form-name, which routes the submission, subject and recipient, which address the notification email, and bot-field, an empty honeypot used to discard automated spam. Please do not send children's names, health details, social security numbers or any other sensitive information through this form. There is no reason to, and we would delete it on sight.
Why we keep it and on what legal basis
We process the form fields for one purpose: to understand your program well enough to answer you usefully and, if you ask for one, to arrange a walkthrough. Under the EU General Data Protection Regulation the legal basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a business enquiry we did not solicit. Under United States state privacy laws the processing is limited to the purpose you submitted the message for, which is a compatible and disclosed use. We do not use these details for advertising, we do not build a profile from them, and we do not sell or share them for cross context behavioral advertising, as those terms are defined in California law.
Who processes submissions
Submissions are handled by Netlify Forms, operated by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States. Netlify hosts this website, receives the form submission, stores it in the site's form dashboard and sends a notification email to the address configured for this site. Netlify acts as our processor and is bound by its own data processing terms. Aside from Netlify and the email provider that delivers the notification message, no third party receives what you send.
How long submissions are kept
Form submissions are kept in the Netlify dashboard and in our email inbox for twenty four months from the date you send them, so that we can pick up a conversation that started a year earlier when a program comes back at renewal time. After that they are deleted. If you become a NapLog customer, the enquiry is retained for the life of the account and for three years afterward as part of the commercial record. You can ask us to delete a submission sooner at any time, and we will do it within thirty days.
Cookies, analytics and trackers
This website sets no advertising cookies, no third party analytics cookies and no cross site tracking pixels. There is no Google Analytics tag, no advertising network script and no social media tracking widget on any page. The only external resource the site loads is the Google Fonts stylesheet that serves the two typefaces used in the design, which involves a request to Google's font servers and exposes your IP address to Google for that request. Netlify keeps standard server access logs, including IP address, timestamp, requested page and user agent, for security and abuse prevention, and those logs are retained for a short technical period by Netlify.
International transfers
MLJ, SASU is established in France and Netlify is established in the United States, so submissions sent from the European Economic Area are transferred to the United States. Those transfers rely on the European Commission's standard contractual clauses included in Netlify's data processing terms, together with the technical measures Netlify applies, including encryption in transit. If you would prefer that your enquiry never leave your own jurisdiction, write to us by email instead of using the form.
Your rights in the United States
If you are a resident of California, Colorado, Connecticut, Utah or Virginia, you have the right to know what personal information we hold about you and why, the right to obtain a copy of it, the right to correct inaccurate information, and the right to have it deleted. You also have the right not to be discriminated against for exercising any of these rights, which in practice means nothing about your price or your service changes if you make a request. We do not sell personal information and we do not share it for targeted advertising, so there is nothing to opt out of, but you may still send an opt out and we will confirm it in writing. California residents may also designate an authorized agent to make a request on their behalf, with written proof of that authorization.
Your rights under the GDPR
If you are in the European Economic Area or the United Kingdom, you have the rights of access, rectification, erasure, restriction of processing, objection to processing based on legitimate interest, and data portability. Where processing rests on consent, you may withdraw that consent at any time without affecting the lawfulness of what happened before. You also have the right to lodge a complaint with a supervisory authority, which in France is the Commission Nationale de l'Informatique et des Libertes.
How to exercise your rights
Send one email to jimenezjulien42@gmail.com with the word "privacy" in the subject line and tell us what you want done. There is no form to complete and no account to create. We answer within thirty days, and usually within two business days, and we will ask you for one piece of information that only you would know, such as the exact email address used on the form, so that we do not hand your data to somebody else.
Children's privacy
This website is aimed at professionals who operate childcare programs. It is not directed at children, and we do not knowingly collect personal information from anyone under thirteen through this website. Child records held inside the NapLog application belong to the subscribing program, which collects them from parents under its own agreements and its own licensing obligations. If you believe a child's information reached us through this website by mistake, tell us and we will delete it immediately and confirm the deletion.
Security and changes to this policy
The site is served over HTTPS, form submissions travel encrypted, and access to the submission dashboard is limited to the publication director. No system is perfect, and if a breach ever affected data collected through this site we would tell affected people and the relevant authorities within the deadlines the law sets. When this policy changes we update the date below and, for a material change, we say what changed at the top of the page for thirty days.