Privacy policy for the PracticeSheet website

Who is responsible for your data

The controller of the personal data described here is MLJ, SASU, publisher of PracticeSheet, represented by its publication director Jimenez Julien. Every question, request or complaint about this policy goes to jimenezjulien42@gmail.com and is answered by a person, normally within one business day and always within thirty days.

This policy covers the public marketing website at practicesheetapp.com. Data that a studio enters inside the PracticeSheet application, such as student rosters and practice records, is handled under the separate data processing terms that form part of the terms of service, where the studio is the controller and MLJ, SASU acts as processor.

What the contact form collects

The only place this website gathers personal data is the contact form on the home page. When you submit it, the following named fields are transmitted and stored: name, your full name; email, your work email address; company, the name of your studio; role, your role in that studio; request, the kind of reply you are asking for; size, the roster band you selected; message, the free text you wrote; and consent, the record that you ticked the consent box.

Three technical fields travel with the submission and hold no information about you: form-name, which routes the message; subject, a fixed line identifying the site; and recipient, the fixed address the message is delivered to. A hidden field named bot-field exists only to catch automated spam. If it is completed, the submission is discarded without being read. Our form handler also records the time of submission and the source page.

Why we are allowed to hold it

We rely on two legal bases. For messages sent through the contact form, the basis is your consent, given by ticking the box before submitting, and you may withdraw it at any time by writing to us. Where you contact us about a service you already buy from us, the basis is the performance of that contract. We also have a legitimate interest in keeping a short record of business correspondence in order to answer follow-up questions and to defend a claim if one is ever made.

We never use the details you provide for automated decision making, and we do not profile you. We do not sell, rent, or share your personal data with advertisers, data brokers or list vendors, and we never will.

How long submissions are kept

Contact form submissions are kept for twenty-four months from the date of the last exchange between us, then permanently deleted from the form store and from the mailbox. If you become a customer, correspondence relating to your account is kept for the life of the contract and for three further years, and accounting records are kept for ten years as French commercial law requires. You can ask us to delete an enquiry earlier, and unless a legal retention rule applies we will do it and confirm in writing.

Who processes the data

The website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States. Netlify Forms receives, processes and stores the contact form submissions on our behalf, under a data processing agreement. Netlify also keeps standard server logs, which include the IP address of visitors, for security and abuse prevention. Delivered messages are read in a Google Workspace mailbox operated for MLJ, SASU. Those three providers are the only third parties with access to what you send us.

Cookies, analytics and tracking

This website sets no advertising cookies, no third party analytics cookies and no social media pixels. There is no cookie banner because there is nothing to consent to. We do not use Google Analytics, we do not embed tracking pixels from social networks, and we do not fingerprint your browser. Web fonts are requested from Google Fonts, which means your browser contacts that service to download the font files; no cookie is set by that request.

International transfers

Because our hosting and mail providers are established in the United States, personal data you send through this site is transferred outside the European Economic Area. Those transfers are covered by the European Commission standard contractual clauses incorporated into our agreements with those providers, together with the supplementary technical measures they publish, including encryption in transit and at rest.

Your rights in the United States

If you live in California, Colorado, Connecticut, Utah or Virginia, state privacy law gives you the right to know what personal information we hold about you, to obtain a copy of it, to correct it, to delete it, and to opt out of sale or targeted advertising. We do not sell personal information and we do not use it for targeted advertising, so there is nothing to opt out of, but the request will be honored and confirmed in writing anyway. California residents may also designate an authorized agent to act for them. We will never charge you for exercising a right, and we will never treat you differently because you did.

Your rights under the GDPR

If you are in the European Union, the United Kingdom or Switzerland, you have the right of access, rectification, erasure, restriction of processing, data portability and objection, plus the right to withdraw consent at any time without affecting processing already carried out. Send the request to jimenezjulien42@gmail.com with enough detail for us to find your records. You also have the right to lodge a complaint with your supervisory authority; in France that authority is the CNIL.

Children's privacy

This website is written for professional music teachers and studio owners, and it is not directed at children. We do not knowingly collect personal data from anyone under sixteen through this site, and we ask children not to submit the contact form. Inside the PracticeSheet application, student records concerning minors are entered by the studio that teaches them, on the instruction of that studio and its parent agreements. If you believe a child has sent us personal data through this website, write to us and we will delete it promptly.

Security

The site is served over HTTPS, form submissions travel encrypted, access to the form store and the mailbox is protected by two factor authentication, and only the publication director holds those credentials. No system is perfect, and if a breach ever affects your data we will tell you and the relevant authority within the deadlines the law sets.

Changes to this policy

When this policy changes, the date at the top of the page changes with it and the previous wording is replaced rather than quietly edited. Material changes affecting people who have already written to us are announced by email to the address they used. This version has been in force since March 2, 2026.