Privacy

Privacy policy

What PaperKeepsake collects, why it is collected, how long it is kept and how to have it removed. Last updated September 4, 2026.

Who is responsible for your data

PaperKeepsake is published by MLJ, SASU, a French company registered under SIREN 934 769 837, acting as the data controller for this website. You can reach the publication director, Jimenez Julien, at jimenezjulien42@gmail.com for any question about this policy or about the information held on you. This policy covers the marketing website at paperkeepsakeapp.com. Client archive material processed inside a customer account is handled under the separate data processing terms attached to the subscription, where the organizing practice is the controller and PaperKeepsake acts as processor.

What the enquiry form collects

The contact form on the home page collects exactly these fields: name, email, company, role, request, size, message and consent. Two hidden fields travel with the submission, subject and recipient, so the message can be routed and identified. A honeypot field named bot-field is present to catch automated submissions and is expected to remain empty. No other information is gathered from the form, and there is no hidden profiling, scoring or enrichment of the details you send.

The web server that delivers this site records standard technical request data such as an abbreviated IP address, the requested page and the user agent string. That log exists for security and for capacity planning, it is generated by the hosting provider, and it is not combined with form submissions to build a profile of you.

Why we process it, and on what legal basis

The details you enter are used for one purpose: to answer your enquiry, prepare a walkthrough of the product on your own material, and follow up on that conversation. Under the European General Data Protection Regulation the legal basis is your consent, given by ticking the consent box, together with the legitimate interest of the publisher in responding to a business enquiry and in taking steps at your request before entering into a contract. There is no automated decision making and no profiling that produces legal effects for you.

We do not sell, rent, share or trade your details. Your information is never passed to advertising networks, data brokers or affiliate partners. We do not send unsolicited marketing campaigns, and any product update email is optional, requested separately and unsubscribable in one click.

Who processes and stores submissions

Form submissions are processed and stored by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which also hosts this website. Netlify acts as a processor on our instructions and applies its own security and confidentiality commitments. A copy of each submission is forwarded by email to jimenezjulien42@gmail.com so that it can be answered. Beyond the hosting provider and the mailbox provider, no third party receives the content of your message.

Cookies and analytics

This site sets no advertising cookies, no third party analytics cookies and no cross site tracking pixels. There is no Google Analytics tag, no advertising remarketing script and no social network tracker embedded in these pages. Web fonts are requested from Google Fonts so the typefaces render correctly, which involves a request to a Google server carrying your IP address and user agent. If you prefer to avoid that request entirely, blocking third party font loading in your browser leaves the site fully readable in its fallback typefaces.

How long submissions are kept

Enquiry messages and the details attached to them are kept for twenty four months from the last exchange we had with you, then deleted from the form store and from the mailbox. If the enquiry becomes a subscription, the commercial record is kept for the duration of the contract and then for the accounting retention period required by French law, which is ten years for invoices and supporting documents. Server logs are rotated by the hosting provider within thirty days. You can ask for earlier deletion at any point and we will act on it.

International transfers

Because the hosting provider is established in the United States, your submission is transferred outside the European Economic Area. Those transfers rely on the European Commission Standard Contractual Clauses together with the supplementary technical measures applied by the provider, including encryption in transit and at rest. You may request a copy of the transfer mechanism documentation by writing to the contact address in this policy.

Your rights

If you are in the European Union or the United Kingdom you have the right to access the personal data held about you, to have inaccurate data corrected, to have it erased, to restrict or object to processing, to withdraw consent at any time without affecting processing already carried out, and to receive your data in a portable format. You also have the right to lodge a complaint with a supervisory authority, in France the Commission Nationale de l'Informatique et des Libertes.

If you are a resident of California, Colorado, Connecticut, Utah or Virginia, you have the right to know what personal information is collected and how it is used, the right to request deletion, the right to correct inaccurate information and the right to opt out of any sale or sharing of personal information for targeted advertising. PaperKeepsake does not sell or share personal information for targeted advertising, so there is nothing to opt out of, and we do not discriminate against anyone who exercises a privacy right. California residents may designate an authorized agent to make a request on their behalf, and we may ask for reasonable proof of that authorization.

To exercise any of these rights, write to jimenezjulien42@gmail.com with the email address you used on the form. We answer within thirty days, and sooner where the law requires it. We may ask one clarifying question to confirm that the request comes from you before acting on a deletion.

Security

The site is served over HTTPS with a strict transport policy, and the security headers published with it block content type sniffing, restrict framing and deny camera, microphone and geolocation access. Access to the form store and to the enquiry mailbox is limited to the publication director and protected by two factor authentication. If a breach ever affects your data we will notify you and the competent authority within the deadlines set by law.

Children's privacy

PaperKeepsake is a business tool sold to professional photo organizers, and the website is not directed at children. We do not knowingly collect personal information from anyone under sixteen years of age. If you believe a child has submitted information through this site, write to the contact address and it will be deleted promptly. Family archive projects may of course contain photographs of children, and that material belongs to the customer and their client, never to us.

Changes to this policy

When this policy changes we update the date at the top of the page and, for a material change affecting how enquiries are handled, we notify anyone with an open conversation by email. The current version is dated September 4, 2026. Related documents: the legal notice and the terms of service.