Privacy policy for the FertilityWindow website

Last updated: September 4, 2026.

Who is responsible for your data

The controller of the information described on this page is MLJ, SASU, a French simplified joint stock company registered at 934 769 837 R.C.S. Paris, publisher of FertilityWindow. The publication director is Jimenez Julien. Every privacy request reaches a person, not a ticket queue, at jimenezjulien42@gmail.com. Full company and hosting details sit on the legal notice.

This policy covers the marketing website at fertilitywindowapp.com only. Patient records, cycle calendars and monitoring schedules held inside a subscribing clinic's FertilityWindow workspace are governed by the business associate agreement and data processing agreement signed with that clinic, not by this page. If you are a patient of a fertility practice and you want to know what your clinic stores about your cycle, ask your clinic: they are the controller of that record and we act only on their written instructions.

Exactly what the contact form collects

There is one form on this website, the request form in the contact section of the home page. It submits these named fields and nothing else:

• name: your full name, so a reply is addressed to a person.
• email: your work email, the only channel we use to answer you.
• company: your practice name, so we can prepare a demo that matches your setting.
• role: your role, chosen from a short list of real clinic job titles.
• request: whether you want a demo, early access or a quote.
• size: your annual retrieval and transfer volume, which tells us how to scope a plan.
• message: your own description of where cycle coordination costs your team time.
• consent: the checkbox recording that you agreed to this policy before sending.
• bot-field, form-name, subject and recipient: hidden technical fields that route the message and screen out automated spam. The honeypot field is left empty by real people.

Please do not paste protected health information into the message box. We do not need a patient name, a medical record number, a date of birth or a protocol detail to show you how the software works, and any such content we receive by accident is deleted as soon as we notice it. Describe the workflow, not the patient.

Why we may use it, and on what legal basis

We use what you send for three purposes: to answer your question, to schedule and run the demo or quote you asked for, and to keep a short record of the exchange in case you come back to us months later. Under the EU General Data Protection Regulation our basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a professional enquiry addressed to us. Under United States state privacy law your submission is a business to business communication that you initiated.

We never sell your details, never share them with a data broker, never trade them for advertising audiences, and never use them to profile you or make any automated decision about you. We do not add you to a newsletter because you asked for a demo. If we ever want to send you something you did not request, we will ask first.

Who processes it on our behalf

Form submissions are captured and stored by Netlify Forms, operated by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which also hosts this website. Netlify holds the submission in the site dashboard and forwards a copy by email to the publisher. Netlify acts as our processor under a data processing agreement and may not use your details for its own purposes. Our email is handled by our mailbox provider under the same restriction. That is the entire chain: no CRM, no enrichment service, no lead vendor.

Cookies, analytics and tracking

This site sets no advertising cookie, no third party analytics cookie, no pixel, no fingerprinting script and no cross site tracker. There is no consent banner because there is nothing to consent to. Two web fonts, Nixie One and Karla, load from Google Fonts, which receives the request as part of serving the file; nothing else on the page calls out to a third party. Netlify keeps standard server request logs, including truncated IP addresses, for security and abuse prevention.

How long we keep it

An enquiry that does not turn into a conversation is deleted within twelve months of the last message. An enquiry that becomes a customer relationship is kept for the life of the subscription and for three years after it ends, so we can answer questions about what was agreed. Accounting records tied to an invoice are held for ten years because French commercial law requires it. You may ask for earlier deletion at any point and we will honour it unless one of those legal retention duties applies, in which case we will tell you which one.

International transfers

MLJ, SASU is established in France and Netlify is established in the United States, so a submission made from Europe crosses the Atlantic. That transfer relies on the European Commission's Standard Contractual Clauses together with the technical safeguards in Netlify's data processing addendum. A submission made from the United States is stored in the United States.

Your rights

Wherever you are, you may ask us what we hold about you, ask for a copy in a portable format, ask us to correct something wrong, ask us to delete it, ask us to restrict or stop a particular use, and withdraw a consent you gave without affecting anything done before you withdrew it. Residents of California, Colorado, Connecticut, Utah and Virginia additionally have the state law rights to know, to access, to delete, to correct, to obtain a portable copy, and to opt out of sale, of targeted advertising and of profiling. Because we do not sell personal information, do not run targeted advertising and do not profile anyone, those opt outs have nothing to act on, and we never discriminate against a person for exercising a right.

To use any of these rights, write to jimenezjulien42@gmail.com with the email address you used on the form. We answer within thirty days and will ask a verifying question if the request is unusual. An authorised agent may act for you with written proof. If our answer does not satisfy you, EU and UK residents may complain to their supervisory authority, the French CNIL included, and California residents may contact the California Privacy Protection Agency.

Security

The site is served only over HTTPS, security headers are set at the edge, and access to the form dashboard and the publisher mailbox is protected by strong unique credentials and multi factor authentication. Only the publisher reads incoming enquiries. No system is perfect, and if a breach ever affected your details we would notify you and the competent authority within the deadlines the law sets.

Children's privacy

FertilityWindow is professional software sold to fertility clinics, and this website is aimed at nurse coordinators, practice managers and physicians. It is not directed at children, and we do not knowingly collect information from anyone under sixteen. If a child has sent us something through this form, write to the address above and we will erase it promptly.

Changes to this policy

If the way we handle enquiries changes, we will rewrite this page and move the date at the top. Material changes will be summarised in the first paragraph for a reasonable period so that a returning reader can see what moved. The current version always governs.