Privacy policy for ERGCircle

Who is responsible for your data

The controller of the personal data described in this policy is MLJ, SASU, publisher of ERGCircle, registered in Paris under SIREN 934 769 837. The publication director, Jimenez Julien, handles privacy requests personally and can be reached at jimenezjulien42@gmail.com. This policy covers the marketing website at ergcircleapp.com. Data processed inside the ERGCircle application on behalf of an employer is governed by the data processing agreement signed with that employer, under which MLJ acts as a processor rather than a controller.

What the contact form collects

The contact form on the home page collects exactly these fields: name, email, company, role, request, size, message and consent. Two hidden fields are also submitted, subject and recipient, which route the message to the right inbox, together with a bot-field honeypot used only to discard automated spam. No other information is gathered from the form. We do not ask for a phone number, a postal address, a job grade or any demographic information, and we ask you not to include personal details about your members in the free text message.

Why we process it and on what basis

The information is processed for one purpose: to answer your request and, where you ask for it, to arrange and run a demonstration or prepare a quote. The legal basis is your consent, given by ticking the consent box before you send the form, together with our legitimate interest in responding to business enquiries addressed to us. Where a commercial relationship follows, the basis for continued processing becomes the performance of that contract. We do not use the form data to build advertising profiles, and we do not sell, rent or trade it.

How long submissions are kept

Enquiries that do not lead to a commercial relationship are deleted within twenty four months of the last exchange. Where a subscription follows, the enquiry is retained for the life of the account and then for the period required by French commercial and accounting law, which is ten years for records that support invoices. You can ask for deletion earlier at any time and we will act on it unless a legal retention duty prevents us, in which case we will tell you which duty applies and when it expires.

Processing by Netlify Forms

This site is a static site hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States. Form submissions are received, stored and made available to us through Netlify Forms, which means Netlify processes the fields listed above on our behalf as a subprocessor. Netlify also records standard server logs, including IP address, user agent and requested URL, for security and abuse prevention. Those logs are retained by Netlify under its own retention schedule and are not used by us for analytics or profiling.

Cookies, analytics and tracking

This website sets no advertising cookies, no marketing pixels and no third party analytics cookies. There is no tracking script from an advertising network, no social media tracker and no cross site identifier. The only third party request the page makes is to Google Fonts to load the two typefaces used in the design, which exposes your IP address to that service in the same way any web font request does. Nothing is stored in your browser to identify you between visits, so there is no consent banner to dismiss.

International transfers

Because our hosting provider is established in the United States, data submitted through this site is transferred to and stored in the United States. Those transfers rely on the European Commission standard contractual clauses incorporated into our agreement with the provider, supported by the technical measures described below. If you would prefer not to have your details transferred in this way, write to us directly by email instead of using the form and say so in your message.

Security measures

Traffic to and from this site is encrypted with TLS. Access to form submissions is limited to the publication director and protected by multi factor authentication. Data at rest is encrypted by the hosting provider. Within the ERGCircle application, member records are held in United States regions on SOC 2 aligned infrastructure, roles restrict who can see a roster, and pulse survey free text is anonymized and suppressed below a group size of eight so individual respondents cannot be identified.

Your rights under United States state privacy law

If you are a resident of California, Colorado, Connecticut, Utah or Virginia, you have the right to know what personal information we hold about you, to obtain a copy of it, to have it corrected, to have it deleted and to opt out of any sale or sharing of it for targeted advertising. We do not sell or share personal information for targeted advertising, so there is nothing to opt out of, and we do not use it for profiling that produces legal or similarly significant effects. California residents may also designate an authorized agent to make a request on their behalf, and we will not discriminate against anyone who exercises these rights. Send any request to jimenezjulien42@gmail.com with enough detail for us to locate your record.

Your rights under the GDPR

If you are in the European Union or the United Kingdom, you have the rights of access, rectification, erasure, restriction of processing, portability and objection, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out beforehand. You also have the right to lodge a complaint with a supervisory authority, which in France is the Commission Nationale de l'Informatique et des Libertes. We ask that you contact us first so we can resolve the matter directly.

How to exercise your rights

Write to jimenezjulien42@gmail.com stating what you want us to do and the email address you used when you contacted us. We answer within thirty days and normally much sooner. We may ask one clarifying question to confirm identity, but we will never ask for a copy of an identity document to process a simple deletion request.

Children's privacy

ERGCircle is a workplace product sold to employers and is not directed at children. We do not knowingly collect personal information from anyone under sixteen years of age. If you believe a child has submitted information through this site, tell us and we will delete the record promptly.

Changes to this policy

When this policy changes we update the date at the top of the page and describe the change in the first paragraph of the relevant section. Material changes affecting people who have already contacted us are notified by email. The current version was last updated on September 4, 2026.