Privacy policy

Who is responsible for your data

The data controller for this website is MLJ, SASU, the publisher of PelvicPath, registered in Paris, France under SIREN 934 769 837. The publication director is Jimenez Julien. You can reach the person responsible for data protection questions at jimenezjulien42@gmail.com. This policy covers the marketing website at pelvicpathapp.com. Patient health information held inside a customer's PelvicPath account is covered by the business associate agreement signed with that practice and by the terms of service, not by this page.

What the contact form collects

The demand form on this site collects exactly the following fields, and nothing else: name (your full name), email (your work email address), company (your practice name), role (your job title, chosen from a list), request (whether you want a demo, early access or a quote), size (the number of treating therapists in your practice), message (your free text answer about the between visit stretch) and consent (your confirmation that we may contact you and store the submission). A hidden bot-field is present to trap automated spam and is expected to remain empty. Two hidden fields, subject and recipient, route the message to the right inbox.

We do not ask for and do not want patient names, patient health information, dates of birth, insurance numbers or any other identifier belonging to a person you treat. Please do not include those details in the message field. If you send them by mistake, tell us and we will delete the submission.

Technical information

Our hosting provider records standard server logs for security and abuse prevention, which may include the IP address of the requesting device, the time of the request, the page requested and the browser user agent string. These logs are kept for a short period by the host and are not used to build a profile of you. We do not run advertising trackers, remarketing pixels, or third party analytics cookies on this website. The site sets no cookie of its own for marketing purposes.

Legal basis for processing

Where the EU General Data Protection Regulation applies, we rely on your consent when you tick the consent box and submit the form, and on our legitimate interest in responding to business enquiries and protecting the site from abuse. Where United States state privacy law applies, we process your information to provide the service you asked for, which is a response to your request. You may withdraw consent at any time, and doing so does not affect processing that already took place.

How long submissions are kept

Form submissions are kept for 24 months from the date you send them, so that we can follow up on a conversation that pauses and resumes, which happens often in this trade. After 24 months the submission is deleted from our records and from the form provider's store. If you ask us to delete your submission sooner, we do so within 30 days and confirm by email. Server logs are retained for a much shorter period, typically 30 days, under the host's own policy.

Who processes submissions

Form submissions on this site are processed and stored by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which provides the hosting and the Netlify Forms service. Netlify acts as our processor and stores submissions on infrastructure it operates. Copies of submissions may be forwarded by email to the publisher's mailbox. We do not sell your information, we do not share it with advertisers, and we do not use it to train any model. No other third party receives the contents of your submission.

International transfers

The publisher is established in France and the form processor is established in the United States, so information you send may be transferred between the European Economic Area and the United States. Where the GDPR applies, these transfers are covered by the European Commission's standard contractual clauses incorporated into our agreement with the processor, together with the supplementary measures described in that agreement. If you would like a copy of the relevant transfer safeguards, write to us and we will provide the current documentation.

Your rights in the United States

If you are a resident of California, Colorado, Connecticut, Utah or Virginia, you have the right to know what personal information we hold about you, to request a copy of it, to request its correction, and to request its deletion. You also have the right not to be discriminated against for exercising those rights. We do not sell personal information and we do not share it for cross context behavioral advertising, so there is nothing for you to opt out of on that basis, but you may still ask us to confirm this in writing. California residents may designate an authorized agent to make a request on their behalf, with proof of authorization. If we decline a request, we will tell you why and how to appeal, and residents of Colorado, Connecticut and Virginia may appeal our decision by replying to the same address within 30 days.

Your rights under the GDPR

If you are in the European Economic Area or the United Kingdom, you have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority, which in France is the Commission Nationale de l'Informatique et des Libertes.

How to exercise your rights

Send your request to jimenezjulien42@gmail.com with enough detail to let us find your record, which is usually the email address you used on the form. We answer within 30 days, and if the request is complex we will tell you before that deadline and explain the delay. We may ask a question to verify that the request comes from you, but we will not ask for more information than we need for that purpose.

Children's privacy

This website is a business to business site aimed at licensed clinicians and practice owners. It is not directed at children, and we do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has sent us information through this site, write to us and we will delete it promptly.

Security

Traffic to this site is encrypted with TLS. Access to form submissions is limited to the publication director and is protected by two factor authentication. We review access rights at least twice a year and remove anything that is no longer needed.

Changes to this policy

If this policy changes materially we will update the date at the top of this page and, where the change affects an active conversation with you, tell you by email. Continuing to use the site after a change means the updated policy applies to you.