Privacy policy

Who is responsible for your data

The controller of the personal data described here is MLJ, SASU, the company that publishes ShortlistLoop. Registration details and the postal identity of the company are on the legal notice page. The publication director, Jimenez Julien, is the person who reads the submissions and answers them. Every request about your data goes to the same address: jimenezjulien42@gmail.com.

What this website collects

There is exactly one place on this website where you can give us personal data, and that is the contact form in the request section of the home page. Nothing else on this site collects information about you. The form sends these fields:

• name: your full name, so a reply can be addressed to a person.
• email: your work email address, which is the only channel we use to answer you.
• company: the name of your recruiting or search firm.
• role: the seat you hold at that firm, chosen from a short list.
• request: whether you want a demo, early access or a quote.
• size: how many open searches sit on your desk right now.
• message: the free text you write about how you update clients today.
• consent: the checkbox recording that you agreed to this policy before sending.

Three hidden fields travel with the submission for routing purposes: form-name, which tells the form service which form was used, subject, which labels the notification, and recipient, which is our own mailbox address. A honeypot field named bot-field is present and stays empty for human visitors. It exists only to catch automated spam and holds nothing about you.

What this website does not collect

No advertising tracker, no advertising pixel and no third party analytics cookie is loaded on any page of this site. There is no cookie banner because there are no cookies to consent to. We do not build behavioral profiles, we do not run remarketing audiences, and we do not share visitor data with data brokers. Fonts are loaded from Google Fonts, which receives the standard request information any web request carries, and no font file sets a cookie. If you never submit the contact form, we do not hold personal data about your visit at all.

Why we process it, and on what legal basis

We process what you send for one purpose: to understand the request and to answer it. Under the European General Data Protection Regulation, the legal basis is your consent, given by ticking the consent box before sending, together with our legitimate interest in responding to a business enquiry addressed to us. Under United States state privacy laws, the processing is the completion of a transaction you initiated. We do not use form submissions for newsletters, we do not add you to an automated sequence, and we do not sell or share your details for cross context behavioral advertising, which under the California Consumer Privacy Act means we do not sell your personal information at all.

Who processes it on our behalf

Submissions are processed and stored by Netlify Forms, a service of Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which also hosts this website. Netlify acts as our processor and stores the submission so that we can read it. A notification email is delivered to the publisher's mailbox. Those two services are the only recipients. No advertising network, data enrichment vendor or artificial intelligence training provider receives your submission.

International transfers

The publisher is established in France and the host is established in the United States, so a submission sent from the United States is read in Europe and stored on infrastructure operated by a United States company. Where that transfer requires a legal mechanism, it relies on the European Commission standard contractual clauses included in the processor agreement with Netlify, together with the technical protection of encryption in transit and at rest.

How long submissions are kept

Contact form submissions are kept for 24 months from the date you sent them, so that we can find the thread again if you come back to the conversation later. After that period they are deleted from the form storage and from the mailbox. If you ask us to delete a submission sooner, we do it within 30 days and confirm by email. Records that we are required to keep for accounting reasons, such as an invoice raised after a subscription starts, follow the retention period set by French commercial law and are held separately from this website.

Your rights

Wherever you live, you can write to jimenezjulien42@gmail.com and ask what we hold, ask for a copy of it, ask for a correction, or ask for it to be erased. We answer inside 30 days and we do not charge for it. We may ask one question to confirm you are the person who sent the submission, and that question will never require an identity document.

If you are in the European Union or the United Kingdom, the GDPR gives you rights of access, rectification, erasure, restriction of processing, portability, objection, and the right to withdraw consent at any time without affecting processing already carried out. You may also lodge a complaint with a supervisory authority, which in France is the CNIL.

If you are a resident of California, Colorado, Connecticut, Utah or Virginia, your state law gives you the right to know what categories of personal information we have collected, the right to access and delete it, the right to correct inaccurate information where your state provides for it, the right to opt out of sale or targeted advertising, and the right not to be discriminated against for exercising any of these rights. We do not sell personal information and we do not run targeted advertising, so an opt out request is honored by confirmation rather than by any change in our practice. Authorized agents may submit requests on your behalf with written proof of authorization.

Children

ShortlistLoop is a business product sold to recruiting and search firms. This website is not directed at children, and we do not knowingly collect personal data from anyone under 16 years of age. If you believe a child has sent us information through the contact form, write to us and we will delete it promptly.

Security

The site is served over HTTPS only, submissions travel encrypted, and access to the form storage is limited to the publisher through an account protected by two factor authentication. Security headers on every response restrict framing and content type sniffing, and the site loads no third party script beyond the font stylesheet.

Changes to this policy

If this policy changes, the revised version is published on this page with a new last updated date at the top. Material changes affecting how existing submissions are handled will also be sent by email to the address that sent them. This version is dated March 2, 2026.