Privacy policy

Who is responsible for your data

The controller of the personal data described here is MLJ, SASU, publisher of WickAndWax, contactable at jimenezjulien42@gmail.com. The identification details of the company are listed on the legal notice page. This policy covers the marketing website at wickandwaxapp.com. Data you enter inside the WickAndWax application itself, such as recipes, supplier lots and batch records, is covered by the data processing terms in your subscription agreement and remains your property.

What the contact form collects

This website has exactly one form, the request form at the bottom of the home page. When you submit it, we receive the following fields: name (your full name), email (your work email address), company (your studio or brand name), role (your role, selected from a list), request (whether you want a demo, early access or a quote), size (your monthly batch volume, selected from a list), message (the free text you write about what you track today), and consent (the record that you ticked the consent box). Two hidden fields travel with the submission, a subject line identifying the site and a recipient address, and one honeypot field named bot-field which should always be empty and exists only to catch automated spam. We do not ask for a phone number, a mailing address or any payment detail on this website.

Legal basis

For visitors in the European Economic Area and the United Kingdom, we rely on your consent, given by ticking the consent box, and on our legitimate interest in responding to a business enquiry that you initiated. For visitors in the United States, submission of the form is your request that we contact you about the service. You can withdraw consent or ask us to stop contacting you at any time by writing to the address above, and we will act on that request without asking you to justify it.

How long submissions are kept

Form submissions are kept for twenty four months from the date they are received, then deleted. If your enquiry becomes a paying subscription, the enquiry record is retained for the life of the account and for the statutory accounting retention period that follows it. If you ask us to delete an enquiry sooner, we will do so within thirty days unless we are legally required to keep it.

Who processes the data

Submissions are processed and stored by Netlify, Inc., which hosts this website and operates the form service, and are forwarded by email to the publication director. Netlify acts as our processor under contract. We do not use advertising trackers, retargeting pixels, third party analytics cookies, session recording, heat mapping or social media tracking scripts on this site. There is no cookie banner because there is nothing to consent to beyond the strictly necessary operation of the page. The only external resource the page loads is the Google Fonts stylesheet used for the two typefaces.

International transfers

The publisher is established in France and the hosting provider is established in the United States, so a submission sent from Europe is transferred to the United States. Those transfers rely on the European Commission standard contractual clauses incorporated in our agreement with the processor, together with the supplementary technical measures of encryption in transit and at rest. If you would like a copy of the transfer mechanism documentation, ask for it at the contact address.

Your rights in the United States

If you are a resident of California, Colorado, Connecticut, Utah or Virginia, you have the right to know what personal information we have collected about you, to request a copy of it in a portable form, to request its correction, and to request its deletion. You may also opt out of any sale or sharing of personal information and of targeted advertising, although we do not sell, share or use personal information for targeted advertising at all, so there is nothing to opt out of. We will not discriminate against you for exercising a privacy right. California residents may designate an authorized agent to make a request on their behalf, and Colorado, Connecticut and Virginia residents may appeal a refused request by replying to our decision, after which the relevant state attorney general may be contacted.

Your rights under the GDPR

If you are in the European Economic Area or the United Kingdom you have the right of access, rectification, erasure, restriction of processing, objection to processing, and data portability, as well as the right to withdraw consent at any time without affecting the lawfulness of prior processing. You also have the right to lodge a complaint with a supervisory authority, in France the Commission Nationale de l'Informatique et des Libertes.

How to exercise a right

Write to jimenezjulien42@gmail.com from the address you used on the form, or tell us which address you used, and state what you want. We reply to every request within thirty days. We may ask one clarifying question to be sure we are acting on the right record, but we will never require an account, a document upload or a phone call in order to honor a request.

Security

The site is served over HTTPS only, with strict transport security, and the form endpoint is protected against automated submission. Application data is encrypted at rest in United States regions, backed up daily, and backups are retained for thirty days. Access to submissions is limited to the publication director. If a breach affects your data and creates a risk to you, we will notify you and the relevant authority within the deadlines the law sets.

Children

WickAndWax is a business tool sold to adults operating a registered business. The website is not directed at children, we do not knowingly collect personal information from anyone under sixteen, and if we learn that a child has submitted the form we delete the submission immediately. A parent or guardian who believes a child has sent us information can write to the contact address and we will confirm the deletion.

Changes to this policy

If this policy changes, the updated version is published on this page with a new last updated date. Material changes affecting existing enquiries or subscribers are announced by email before they take effect. This version is dated September 4, 2026 and replaces every earlier version.