Privacy policy

Who is responsible

InjectConsent is published by MLJ, SASU, a French company registered in Paris under SIREN 934 769 837, acting as the data controller for the information described on this page. The publication director is Jimenez Julien. You can reach the person accountable for this policy at jimenezjulien42@gmail.com. This policy covers this website, injectconsent.com. It does not cover the clinical records that subscribing practices store inside the software, which are governed by the business associate agreement and the data processing agreement signed with each practice.

What the contact form collects

The only place this website gathers personal information is the request form on the home page. When you submit it, the following named fields are transmitted and stored:

• name, your full name, so we know who we are replying to.
• email, your work email address, which is the address we reply to.
• company, your practice name, so we can prepare for the call with context.
• role, your role in the practice, chosen from a fixed list.
• request, what you are asking for: a demo, early access, or a quote.
• size, how many injecting providers you have, chosen from a fixed list.
• message, your free text description of where your treatment record breaks down.
• consent, the checkbox recording that you agreed to this policy.
• subject and recipient, two hidden routing fields that direct your message to the right inbox.
• bot-field, an empty honeypot field used only to discard automated spam.

Please do not enter patient names, patient photographs, clinical details or any protected health information into the message box. It is a sales and support channel, not a clinical one. If you send us protected health information by mistake, write to us and we will delete it.

Why we process it and on what legal basis

We process these details to answer your request, to prepare and run the demonstration you asked for, and to send you a quote where you asked for one. Under the EU General Data Protection Regulation the legal basis is your consent, given by ticking the consent checkbox, together with our legitimate interest in responding to business enquiries addressed to us. Under United States state privacy laws, this is processing for the purpose you provided the information for. We do not sell personal information, we do not share it for cross context behavioural advertising, and we do not use it to build profiles or to make automated decisions about you.

Who processes and stores submissions

Form submissions are received and stored by Netlify Forms, operated by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States. Netlify acts as our processor: it hosts this website, receives the form payload, stores it in the site administration area and forwards a notification to us by email. Netlify processes submissions only on our instructions. No other third party receives your submission. We do not run advertising trackers, remarketing pixels, heat mapping tools or third party analytics cookies on this website, and there is no cookie banner because there are no non essential cookies to consent to.

How long it is kept

Enquiries that do not lead to a subscription are deleted from the Netlify Forms store and from our mailbox within twenty four months of the last message exchanged. Enquiries that become customer accounts are retained for the life of the account and for the period required by French accounting and commercial law afterward, which is ten years for invoicing records. Spam caught by the honeypot is discarded automatically and never reaches a human inbox.

International transfers

Because our hosting and form processor are based in the United States, submissions sent from outside the United States are transferred there. Netlify contracts on the European Commission standard contractual clauses, and our agreement with Netlify incorporates them. If you would rather not have your details transferred, write to us by email instead of using the form and tell us to keep the exchange to email alone.

Your rights

If you live in California, Colorado, Connecticut, Utah or Virginia, you have the right to know what personal information we hold about you, to obtain a copy of it, to have it corrected, to have it deleted, and to opt out of any sale or sharing of it. We do not sell or share personal information, so there is nothing to opt out of, but the request will be honored and confirmed in writing. California residents also have the right not to receive discriminatory treatment for exercising these rights. Residents of the European Union and the United Kingdom have rights of access, rectification, erasure, restriction, portability and objection under the General Data Protection Regulation, together with the right to withdraw consent at any time and the right to lodge a complaint with a supervisory authority, which in France is the CNIL.

To exercise any of these rights, email jimenezjulien42@gmail.com with the address you used on the form. We answer within thirty days, usually far sooner, and we may ask one question to confirm that the request comes from you. An authorized agent may act on your behalf if you say so in writing.

Children

This website is aimed at professionals working in medical aesthetics and is not directed at children. We do not knowingly collect information from anyone under sixteen years old. If you believe a minor has submitted the form, write to us and we will delete the record promptly.

Security

Traffic to this site is encrypted with TLS. Access to the form submission store is limited to named accounts protected by two factor authentication, and we review that access list every quarter. No system is perfect, and if a breach affects your information we will notify you and the relevant authority within the timeframes the law requires.

Changes to this policy

If this policy changes, the updated version replaces this one on this page and the date at the top changes with it. Material changes affecting people who have already written to us are announced by email to the address they used. The legal notice and the terms of service complete the framework covering this site.

Maintained by Jimenez Julien, publication director at MLJ, SASU. Questions to jimenezjulien42@gmail.com.