Privacy policy for MastermindSeats

Who is responsible for your data

MLJ, SASU, a French simplified joint stock company with share capital of 500.00 euros, registered under SIREN 934 769 837, publishes MastermindSeats and acts as the controller of the personal data described in this policy. The publication director is Jimenez Julien. You can reach the controller at any time at jimenezjulien42@gmail.com. This policy covers the public marketing website at mastermindseats.com. Data that a coach stores about her own cohort members inside the software product is processed on that coach's instructions, and in that case the coach is the controller and MLJ, SASU acts as a processor under a separate data processing agreement.

What the contact form collects

The only place this website collects personal data is the walkthrough request form on the home page. The fields submitted are: name, email, company, role, request, size, message and consent. Two hidden fields, subject and recipient, are attached to route the message, and a honeypot field called bot-field exists solely to catch automated spam. We do not ask for a postal address, a phone number, a payment card or any special category data, and you should not include member names or other confidential information about your cohort in the message field.

Why we process it and on what legal basis

Your submission is used to answer your question, to prepare and run the walkthrough you asked for, and to send you the quote or setup information you requested. Under the EU General Data Protection Regulation the legal basis is your consent, which you give by ticking the consent box, together with our legitimate interest in responding to a business enquiry and taking steps at your request before entering into a contract. We do not use your submission to build an advertising profile, we do not enrich it with data bought from third parties, and we do not add you to a marketing newsletter without a separate, explicit opt in.

Who processes and stores submissions

Form submissions are processed and stored by Netlify Forms, operated by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which also hosts this website. Netlify stores the submission and forwards a copy by email to the publisher. Email delivery is handled by our email provider. These providers act as processors and are bound by contractual confidentiality and security obligations. No other third party receives your submission, and we never sell, rent or trade personal data.

How long submissions are kept

Enquiries that do not lead to a business relationship are deleted from the Netlify Forms inbox and from our email account within twenty four months of the last exchange. Enquiries that become customer accounts are retained for the life of the account and then for the periods required by French commercial and tax law, which are generally ten years for accounting records. You can ask us to delete your submission earlier at any time and we will do so unless we are legally required to keep a specific record.

Cookies and analytics

This website sets no advertising cookie, no cross site tracking pixel and no third party analytics cookie. There is no Google Analytics tag, no advertising network tag and no social media tracking script on these pages. Netlify records standard server logs, including the requesting IP address and the user agent, for security and traffic integrity purposes; those logs are kept for a short technical retention period by the host. Web fonts are loaded from Google Fonts, which means your browser makes a request to fonts.googleapis.com and fonts.gstatic.com and your IP address is visible to that service for the duration of the request.

International transfers

Because our host is based in the United States, personal data submitted through this site is transferred outside the European Economic Area. These transfers are covered by the European Commission standard contractual clauses incorporated into the agreements with our providers, together with the technical safeguards those providers apply, including encryption in transit and at rest and access controls limited to staff who need the data to operate the service.

Your rights in the United States

If you are a resident of California, Colorado, Connecticut, Utah or Virginia, state privacy law gives you the right to know what personal information we have collected about you, the right to access a copy of it, the right to correct inaccurate information, the right to request deletion, and the right to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell or share personal information and we do not conduct targeted advertising, so there is nothing to opt out of, but you may still exercise every other right. California residents additionally have the right not to receive discriminatory treatment for exercising these rights. To make a request, write to jimenezjulien42@gmail.com from the address you used on the form and describe what you want. We reply within forty five days and may ask for one additional piece of information to verify that the request is yours. You may authorize an agent to act for you, in which case we will ask for written proof of that authorization.

Your rights in the European Union and the United Kingdom

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest. Where processing rests on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Requests go to the same address, jimenezjulien42@gmail.com, and are answered within one month. If you believe your data has been handled unlawfully you can lodge a complaint with your national supervisory authority; in France that authority is the CNIL.

Children's privacy

MastermindSeats is a business tool sold to professional coaching practices. This website is not directed to children, and we do not knowingly collect personal information from anyone under sixteen years of age. If you believe a child has submitted information through the contact form, write to jimenezjulien42@gmail.com and we will delete the record promptly.

Security

The site is served over HTTPS only. Access to the form inbox is protected by strong, unique credentials and two factor authentication, and it is limited to the publication director. The product itself encrypts customer data in transit and at rest, applies role based access so a co facilitator sees only assigned cohorts, and logs administrative actions. No system is perfect; if we ever become aware of a breach affecting personal data submitted through this website, we will notify affected people and the relevant authority within the deadlines set by law.

Changes to this policy

If this policy changes in a way that affects how your data is used, we will update the date at the top of this page and, where the change is material and we hold your contact details, we will tell you by email. The current version is dated September 4, 2026.