Privacy policy

Last updated March 2, 2026

Who is responsible for your data

The controller of the personal data described here is MLJ, SASU, a company registered in Paris, France under SIREN 934 769 837, publisher of HOACovenant. The publication director and the person who reads the contact mail is Jimenez Julien. You can reach him at jimenezjulien42@gmail.com for any question about this policy or about a specific submission. Full company identification appears on the legal notice page.

What the contact form collects

The form in the contact section of the home page is the only place on this website where you can give us personal data. When you submit it, we receive the following fields, which are exactly the fields shown on the page:

• name: your full name, so a reply can be addressed to a person.
• email: your work email address, which is where the reply is sent.
• company: the name of your association or management company.
• role: your role on the board or in the office, chosen from a list.
• request: what you would like from us, chosen from a list.
• size: the approximate number of lots or doors on your roster.
• message: whatever you write in the free text box about the violation or the process you want to discuss.
• consent: the record that you ticked the agreement box before sending.

Three hidden fields travel with the submission for routing purposes: form-name, which tells the form service which form was used, subject, which labels the notification, and recipient, which is the address the notification is sent to. A field named bot-field exists solely to catch automated spam and is empty for every human visitor. We do not ask for a postal address, a telephone number, a payment card or any owner data from your community, and you should not paste owner names or lot level detail into the message box.

Why we may process it, and on what legal basis

We use your submission for one purpose only: to answer it and, if a conversation follows, to arrange and hold a demonstration or a quotation discussion. Where European data protection law applies, the legal basis is the steps taken at your request before entering into a contract, together with our legitimate interest in responding to business enquiries about our own product. Where the consent box is the basis you prefer to rely on, you can withdraw that consent at any time and we will delete the record. We do not use your details for profiling, for automated decision making or for any purpose unconnected with your enquiry.

Who processes and stores it

Form submissions are processed and stored by Netlify, Inc., which hosts this website and operates Netlify Forms. Netlify keeps the submission in the site account and forwards a notification to the publisher's mailbox. A copy therefore also exists in that email mailbox. We do not sell, rent, trade or share your details with advertisers, data brokers, lead generation services or any other third party. Nobody outside MLJ, SASU reads the submissions except the hosting and mail providers named here, acting as processors under their own security obligations.

How long it is kept

Submissions that do not lead to a business relationship are deleted from the Netlify Forms store and from the mailbox within twelve months of the last exchange. Where a conversation leads to a subscription, the enquiry is kept for the life of the account and then for the retention period set out in the terms of service, because it forms part of the record of how the relationship began. You can ask for earlier deletion at any point and we will act on it within thirty days.

Cookies, analytics and tracking

This website sets no advertising cookies, no third party analytics cookies and no cross site tracking pixels. There is no Google Analytics tag, no advertising network script and no social media tracker on any page. The only third party requests the pages make are to Google Fonts, which serves the two typefaces used in the design, and those requests are limited to delivering the font files. Netlify keeps standard server access logs, including truncated IP addresses, for security and abuse prevention.

International transfers

MLJ, SASU is established in France and Netlify, Inc. is established in the United States, so a submission sent from anywhere is stored on infrastructure located in the United States. Where the transfer of personal data out of the European Economic Area is involved, it takes place under the standard contractual clauses adopted by the European Commission and included in Netlify's data processing agreement. If you would rather not use the form for that reason, plain email to the address in this policy reaches the same person.

Your rights

If you are a resident of California, Colorado, Connecticut, Utah or Virginia, you have the right to know what personal information we hold about you, to obtain a copy of it, to have it corrected, to have it deleted, and to be free from discrimination for exercising those rights. We do not sell personal information and we do not share it for cross context behavioral advertising, so there is nothing to opt out of on that front, but you may still send us a request to confirm it. Residents of other states are given the same treatment as a matter of policy.

If you are in the European Union, the United Kingdom or another jurisdiction covered by the General Data Protection Regulation, you have the rights of access, rectification, erasure, restriction of processing, portability and objection, and the right to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority, which in France is the Commission Nationale de l'Informatique et des Libertes.

To exercise any of these rights, write to jimenezjulien42@gmail.com from the address you used on the form, or tell us enough for us to find the submission. We answer within thirty days and we do not charge for a reasonable request. If you use an authorized agent, we may ask for proof of that authorization.

Children

HOACovenant is a business product for community association boards and managers, and this website is not directed at children. We do not knowingly collect personal data from anyone under sixteen years of age. If you believe a child has sent us details through the form, write to the address above and we will delete the record promptly.

Security and changes to this policy

Traffic to this site is served over HTTPS, submissions are transmitted encrypted, and access to the form store and the mailbox is protected by two factor authentication. No system is perfect, and if a breach affecting your details ever occurred we would notify you and the relevant authority as the law requires. When this policy changes, the date at the top of the page changes with it, and material changes are described in a short note in the same place.