Privacy
Privacy policy
What StemCount collects when you contact us, why we keep it, how long we hold it and how you get it removed. Last updated September 4, 2026.
Who is responsible for your data
The controller of the personal data described in this policy is MLJ, SASU, a French simplified joint stock company registered under SIREN 934 769 837 with its registered office in Paris, France. The publication director is Jimenez Julien. You can reach us at any time at jimenezjulien42@gmail.com about anything in this document. Full publisher details are on the legal notice page.
What this site collects
This is a marketing site for the StemCount application. It has one form, the request form in the contact section of the home page. When you complete and send that form, the following fields are transmitted to us and stored: name (your full name), email (your work email address), company (your studio name), role (your job title chosen from a list), request (whether you want a demo, early access or a quote), size (the number of weddings you take in a year, chosen from a list), message (the free text you write about your quoting workflow), and consent (the record that you ticked the consent box).
Three hidden fields travel with the submission for routing purposes: form-name, subject and recipient. A honeypot field named bot-field is present to catch automated spam and is expected to remain empty. Your browser also transmits an IP address and a user agent string as part of the request, which the host records in its standard server logs.
We do not ask for payment details on this site. We do not collect health data, precise location, government identifiers or any other sensitive category, and you should not include such information in the free text message field.
Why we process it, and the legal basis
We process what you send in order to answer your request, arrange a walkthrough of the software, prepare a quote and keep a record of the exchange. Under the EU and UK General Data Protection Regulation, the legal basis is your consent, given by ticking the consent box, together with our legitimate interest and the steps taken at your request prior to entering into a contract. Consent can be withdrawn at any moment, and withdrawal does not affect the lawfulness of processing carried out before it.
We do not use what you send for profiling, automated decision making or advertising, and we never sell it. We do not add you to a marketing list on the strength of a demo request. If we later want to send you product news, we will ask separately and you will be able to refuse without losing anything.
Who processes and stores submissions
Form submissions are handled by Netlify Forms, operated by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which also hosts this website. Netlify receives, stores and forwards your submission to our mailbox as our processor under a data processing agreement. Our email is handled by a standard commercial email provider. No other third party receives your submission from this site.
Because Netlify is established in the United States, a transfer of personal data outside the European Economic Area takes place. That transfer is covered by the European Commission's standard contractual clauses together with supplementary technical measures including encryption in transit and at rest. You may ask us for information about those safeguards at the contact address above.
Cookies, analytics and trackers
This site sets no advertising cookies, no third party analytics cookies, no pixels and no cross site tracking of any kind. There is no Google Analytics tag, no advertising remarketing tag and no social media tracking script. The only requests your browser makes to a third party are to Google Fonts for the two typefaces used in the design. The host keeps aggregated, short lived server logs for security and reliability, which is a normal part of operating a website.
How long we keep it
Submissions that do not lead to a business relationship are deleted within twenty four months of your last contact with us. Where you become a customer, the correspondence is retained for the life of the account and then for the periods required by French commercial and tax law, which is generally ten years for accounting records. The consent record is kept for the same period as the submission it belongs to, so that we can show the basis on which we contacted you. You can ask for earlier deletion at any time.
Your rights
If the GDPR applies to you, you have the right of access to your data, the right to have inaccurate data corrected, the right to erasure, the right to restrict or object to processing, the right to data portability, the right to withdraw consent, and the right to lodge a complaint with a supervisory authority, in France the CNIL.
If you are a resident of California, Colorado, Connecticut, Utah or Virginia, you have the right to know what personal information we have collected and the categories of recipients, the right to have it deleted, the right to correct inaccurate information, and the right to opt out of sale, sharing and targeted advertising. We do not sell or share personal information as those terms are defined in the California Consumer Privacy Act, and we do not conduct targeted advertising, so there is nothing to opt out of. We will never treat you differently for exercising a right. California residents may also designate an authorized agent, and residents of these states may appeal a refusal by writing to us again with the word appeal in the subject line.
To exercise any right, write to jimenezjulien42@gmail.com from the address you used, or tell us enough for us to find your record. We answer within thirty days, and within forty five days for requests under US state privacy laws, and we will tell you if we need a permitted extension.
Security
The site is served over HTTPS only. Submissions travel encrypted, and stored form data is encrypted at rest by the processor. Access to submissions is limited to the publication director. We apply security headers including a nosniff content type policy, a same origin frame policy and a strict referrer policy, and we deny camera, microphone and geolocation access by default.
Children
StemCount is a business tool for floral studios and is not directed at children. We do not knowingly collect personal data from anyone under sixteen. If you believe a child has sent us information through this site, write to us and we will delete it promptly.
Changes to this policy
If we change how this site handles personal data, we will update this page and change the date at the top. Material changes affecting people who have already contacted us will be sent by email to the address they used. This version is dated September 4, 2026, and it replaces every earlier version.