- Home
- Privacy policy
Privacy policy
Written in plain language, because school staff already read enough compliance documents. Last updated March 2, 2026.
Who is responsible for your data
The data controller is MLJ, SASU, the company that publishes ChalkHandoff, with its registered office in Paris, France. Full company details are on the legal notice. The publication director, Jimenez Julien, handles privacy requests personally at jimenezjulien42@gmail.com. There is no separate privacy department, and no ticketing system between you and a person who can act on your request.
What the contact form collects
The request form in the contact section of the home page is the only place on this website where you can send us information. It collects exactly these fields, and nothing else:
- name: your full name, so we know who we are writing back to.
- email: your work email address, which is where the reply goes.
- company: your school or district name, so we can prepare a relevant example.
- role: your role in the building, chosen from a fixed list such as classroom teacher, school office manager or principal.
- request: what you are asking for, chosen from a fixed list of a demo, early access or a quote.
- size: how many classrooms are involved, chosen from a fixed list of ranges.
- message: your free text description of how sub days currently run in your building.
- consent: the record that you ticked the consent box before sending.
Four hidden fields travel with the submission for technical reasons: form-name identifies which form was used, subject labels the notification email, recipient routes it to the address that receives requests, and bot-field is an empty trap that automated spam scripts complete without noticing. If bot-field arrives with content, the submission is discarded and never reaches a human.
Please do not put student names, student identification numbers, health information or individualized education program details in the message box. We do not need them to run a demo, and we build every sample classroom with invented names.
Why we process it, and on what legal basis
We process your submission for one purpose: to answer your request and, where relevant, to prepare and hold a walkthrough of the product. Under the European General Data Protection Regulation, the legal basis is your consent, given by ticking the consent box, and our legitimate interest in responding to an inquiry that you initiated. We do not use your submission to build advertising profiles, we do not enrich it with data bought from a third party, and we do not sell or share it for cross context behavioral advertising as those terms are defined in United States state privacy laws.
Who processes the data with us
Form submissions are processed and stored by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, through the Netlify Forms feature, and are also delivered to us by email. Netlify acts as our hosting and form processing provider under a data processing agreement. Netlify additionally records standard technical logs for the delivery of these pages, which may include an IP address, a timestamp and a browser user agent string, for security and performance reasons.
No other company receives your submission. There is no customer relationship management platform in the loop, no email marketing tool, and no lead enrichment service.
Cookies, analytics and trackers
This website sets no advertising cookies, runs no third party analytics scripts, and loads no social media tracking pixels. The only external resource the pages request is the two Google Fonts stylesheets that render the typefaces used across the site. Nothing on this domain follows you to another website, and there is no consent banner because there is nothing to consent to beyond the form you choose to send.
How long we keep it
Messages that lead to an ongoing conversation or a subscription are kept for the duration of that relationship and for three years after the last contact, which matches the commercial limitation period we work to. Messages that do not lead anywhere are deleted within twelve months. You can ask for deletion earlier at any time and we will confirm in writing once it is done, normally within a few working days.
International transfers
MLJ, SASU is established in France and our hosting and form provider is established in the United States, so a submission sent from a school in the United States is stored in the United States and read by a publisher in the European Union. Transfers between the two are covered by the European Commission's standard contractual clauses included in our agreement with Netlify, together with the technical measures that provider applies to data in transit and at rest.
Your rights in the United States
If you are a resident of California, Colorado, Connecticut, Utah or Virginia, state privacy law gives you the right to know what personal information we hold about you, to obtain a copy of it, to correct it, to delete it, and to opt out of any sale or share of it. We do not sell or share personal information, and we do not use it for targeted advertising or for profiling that produces legal effects, so there is nothing you need to opt out of. California residents also have the right not to be treated differently for exercising these rights, which we honor: your request will be answered at the same speed either way. You may use an authorized agent, and we will ask for reasonable proof of that authority.
Your rights in the European Union and the United Kingdom
If you are covered by the General Data Protection Regulation or the United Kingdom equivalent, you have the right of access, rectification, erasure, restriction of processing, portability and objection, and the right to withdraw consent at any time without affecting processing already carried out. You also have the right to lodge a complaint with a supervisory authority. In France, that authority is the Commission Nationale de l'Informatique et des Libertes.
How to exercise any of these rights
Write to jimenezjulien42@gmail.com from the address you used on the form, or tell us which address to look for, and say plainly what you want done. We answer within thirty days and usually inside a week. We may ask one clarifying question to make sure we are acting on the right record, but we will not put you through an identity verification process that collects more data than we already hold.
Children's privacy
This website is intended for adults working in schools: teachers, office staff, school leaders and district administrators. We do not knowingly collect personal information from children through this site, and the contact form asks only for professional details. Student information handled inside the ChalkHandoff application belongs to the school or district, is processed only on their documented instructions under FERPA, and is never collected through this public website. If you believe a child has sent us information through this form, write to the address above and we will delete it promptly.
Security
Pages and form submissions are served over encrypted connections. Access to submitted messages is limited to the publication director. We keep the number of systems that touch your message deliberately small, because every additional tool is another place a message can leak from.
Changes to this policy
If this policy changes, the revised version is published on this page with a new update date. Material changes that affect how we handle existing submissions will also be sent by email to anyone with an open conversation. The current version was last updated on March 2, 2026.