Privacy policy

Who is responsible

This website, pausenotesapp.com, is published by MLJ, SASU, the company behind the PauseNotes service. MLJ, SASU is the controller of the personal data described in this policy. The publication director is Jimenez Julien and the contact address for every privacy matter is jimenezjulien42@gmail.com. A postal address and company registration details are published on the legal notice page.

This policy covers the marketing website only. Patient data processed inside the PauseNotes application on behalf of a clinical practice is governed by the business associate agreement and the data processing terms signed with that practice, where the practice is the controller and MLJ, SASU acts on its documented instructions.

What the contact form collects

The request form on the home page collects exactly the following fields: name, email, company (your practice name), role, request, size, message and consent. Two hidden fields travel with the submission: subject, which identifies which site the message came from, and recipient, which routes it to the publisher. A honeypot field named bot-field is present and must remain empty; it exists only to filter automated submissions and is not used to profile anyone.

We ask you not to include any patient identifiable information in the message field. This form is a business enquiry channel and is not an appropriate route for protected health information. If a submission contains patient information, we delete it and tell you so.

Technical information is also generated when a form is submitted: the time of submission and the internet protocol address recorded by our form processor as part of its abuse protection. We do not attach that information to a marketing profile.

Why we process it, and on what basis

We process contact form data for one purpose: to answer your request, prepare a demonstration or quotation, and follow up on that conversation. Under the General Data Protection Regulation the legal basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a business enquiry addressed to us. Under United States state privacy laws the processing is disclosed to you at the point of collection and limited to the purpose you submitted the form for.

We do not sell personal information, we do not share it with data brokers, and we do not use it for targeted advertising or for any automated decision making that produces a legal or similarly significant effect.

How long submissions are kept

Enquiries that do not lead to a commercial relationship are deleted twenty four months after the last exchange. Enquiries that become customer accounts are retained for the life of the contract and then for the period required by accounting and tax obligations. You may ask for earlier deletion at any time and we act on that request within thirty days unless a legal obligation requires us to keep a record.

Who processes the data

Form submissions are received, processed and stored by Netlify Forms, operated by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which also hosts this website. Netlify acts as our processor under a data processing agreement. Replies are sent from a standard business email service. No other third party receives the content of your submission.

Cookies and analytics

This website sets no advertising cookies and runs no third party analytics scripts. There is no tracking pixel, no advertising network tag, no social media pixel and no cross site profiling of any kind. The only scripts loaded are a single stylesheet request to Google Fonts for the two typefaces used in the design, and one small first party JavaScript file that runs the navigation menu, the questions accordion and the form validation. Because we set no non essential cookies, no consent banner is required.

International transfers

MLJ, SASU is established in France and our hosting and form processing take place in the United States. Transfers of personal data from the European Economic Area to the United States are made under the European Commission standard contractual clauses included in our agreement with Netlify, together with the supplementary technical measures described in that agreement, including encryption in transit and access control.

Your rights

If you are in the European Economic Area or the United Kingdom you have the right to access your data, to have it corrected, to have it erased, to restrict or object to processing, to receive it in a portable format, and to withdraw consent at any time without affecting processing already carried out. You also have the right to lodge a complaint with a supervisory authority, which in France is the Commission Nationale de l'Informatique et des Libertes.

If you are a resident of California, Colorado, Connecticut, Utah or Virginia, you have the right to know what personal information we have collected, the right to access and obtain a copy of it, the right to request its deletion, the right to correct inaccurate information, and the right to opt out of sale, sharing and targeted advertising. We do not sell or share personal information as those laws define the terms, so there is nothing to opt out of, but the request will be honored and confirmed in writing. We will not discriminate against you for exercising any of these rights, and where a law provides for an appeal of our decision you may appeal by replying to our response.

To exercise any right, write to jimenezjulien42@gmail.com with the email address you used on the form. We reply within thirty days and may ask one question to confirm your identity if the request concerns deletion or a copy of the data.

Children's privacy

This website and the PauseNotes service are intended for clinicians and practice staff. The site is not directed at children under sixteen, we do not knowingly collect personal information from a child, and we have no product feature that would invite one to submit anything. If you believe a child has sent us information through this form, contact us and we will delete it immediately.

Security

This site is served over encrypted connections with strict transport security. Access to form submissions is limited to the publication director. Our security headers deny framing by third parties, prevent content type sniffing and switch off camera, microphone and geolocation permissions for the whole site.

Changes to this policy

If this policy changes we update the date at the top of the page and publish the new version here. Material changes affecting people who have already contacted us are notified by email to the address they used. The current version is dated September 4, 2026.