Privacy policy

Last updated: March 2, 2026

This policy covers the public website at gatecodedesk.com, published by MLJ, SASU. It explains the personal information the site collects, the reason it is collected, who handles it and what you can ask us to do with it. It is written in plain language on purpose, because a facility owner reading it on a phone at the gate should not need a lawyer to understand it. The GateCodeDesk subscription application, which stores tenant and lease records for paying customers, is governed by the data protection terms in the customer agreement rather than by this page.

Who is responsible for your information

The data controller is MLJ, SASU, a company registered in Paris, France, under SIREN 934 769 837, acting through its publication director Jimenez Julien. Company identification details are listed in full on the legal notice. For any question about this policy, or to make a request about your information, write to jimenezjulien42@gmail.com. Requests are handled by the publication director personally.

What the contact form collects

The only place this website collects personal information is the request form in the contact section of the home page. When you send that form, the following fields are transmitted and stored:

• name: the full name you enter, so a reply can be addressed to a person.
• email: the work email address used to answer you.
• company: the facility name, used to prepare a relevant walkthrough.
• role: your role at the property, chosen from a short list.
• request: what you are asking for, such as a demo, a quote or a gate setup review.
• size: the door count band of the property, used to identify the right plan.
• message: the free text you write about how units are rented at your site today.
• consent: the record that you agreed to this policy before sending the form.
• form-name, subject and recipient: hidden routing values that direct the message to the right inbox.
• bot-field: an anti spam field that stays empty for human visitors.

Please do not send tenant names, unit numbers, lease documents, payment card details or any other information about your customers through this form. It is a sales and support channel, not a place for records about the people who rent from you.

Legal basis and purpose

Under the European General Data Protection Regulation, the processing of these fields rests on two bases. The first is your consent, given by ticking the box before the form is sent. The second is our legitimate interest in answering a business enquiry that you started and in keeping a record of what was promised during a sales conversation. The information is used to reply to you, to prepare a demonstration built on your unit mix, to quote the right plan and to keep an accurate history of our exchange. It is never used to build advertising profiles, and it is never sold, rented or traded.

Who processes and stores the messages

This site is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States. Form submissions are received and stored by Netlify Forms, which retains them in your site account so that they can be read and answered. A notification copy is delivered by email to the address listed in the routing fields, and that copy sits in a standard email mailbox. Netlify acts as a processor on our behalf and is bound by its own data processing terms. No other third party receives what you send.

How long submissions are kept

An enquiry that does not turn into a customer relationship is deleted from the form store and the mailbox within twenty four months of the last exchange. If you become a customer, the enquiry is kept for the life of the subscription and for three years after it ends, because it forms part of the commercial record. You can ask for earlier deletion at any time and it will be carried out within thirty days unless a legal obligation requires us to keep a specific document.

Cookies and measurement

This website sets no advertising cookies, no third party analytics cookies and no social media pixels. There is no tracker following you from page to page, no remarketing tag and no data broker script. The pages load two web fonts from Google Fonts and nothing else from outside our own domain. The hosting provider keeps standard server logs, including truncated network addresses and request times, for security and abuse prevention, and those logs are retained for a short technical period by the host.

International transfers

MLJ, SASU is established in France and the hosting provider is established in the United States, so information sent through this site crosses the Atlantic. Transfers rely on the standard contractual clauses adopted by the European Commission and on the supplementary safeguards described in the hosting provider agreement. If you are in the United States, your information is stored on infrastructure in the United States and is accessed from France by the publication director.

Your rights in the United States

Residents of California, Colorado, Connecticut, Utah and Virginia have state privacy rights over the information described here. Those rights include the right to know what categories of personal information are collected and why, the right to obtain a copy of that information, the right to correct inaccurate information, the right to have information deleted and the right not to receive discriminatory treatment for exercising any of them. California residents may also ask about the disclosure of personal information for a business purpose. We do not sell personal information and we do not share it for cross context behavioral advertising, so there is no opt out to configure. To exercise a right, write to jimenezjulien42@gmail.com from the address you used on the form, or give us enough detail to match your record. We answer inside forty five days and will tell you if we need a short extension.

Your rights under the GDPR

If you are in the European Union or the United Kingdom, you hold the rights of access, rectification, erasure, restriction of processing, objection to processing based on legitimate interest, and portability of the information you provided. Where processing rests on consent, you may withdraw that consent at any time without affecting what was lawful before the withdrawal. Requests go to the same address and are answered within one month. You also have the right to lodge a complaint with a supervisory authority, which in France is the Commission Nationale de l'Informatique et des Libertes.

Security

The site is served over HTTPS with strict transport security, and the response headers restrict framing, referrer leakage and browser features such as camera, microphone and geolocation. Access to the form store and the notification mailbox is protected by strong unique credentials and two factor authentication. If a breach ever affects information sent through this site, affected senders and the relevant authority will be notified without undue delay.

Children

This is a business website sold to facility operators, and it is not directed at children. We do not knowingly collect information from anyone under sixteen years of age. If you believe a child has sent information through the form, write to us and it will be deleted from the form store and the mailbox promptly.

Changes to this policy

When this policy changes, the updated version replaces this page and the date at the top changes with it. Material changes to how enquiries are handled are announced in the release notes sent to customers. The version you are reading was published on March 2, 2026.

Questions about your information go straight to jimenezjulien42@gmail.com, answered by Jimenez Julien.