Home / Privacy policy
Privacy policy
Written in plain language so you can read it in five minutes. Last updated March 2, 2026.
Who is responsible for your data
CoachCheckIns is published and operated by MLJ, SASU, a French company whose registration details appear on the legal notice page. For the purposes of the European General Data Protection Regulation, MLJ, SASU is the data controller for this website. For US state privacy laws, MLJ, SASU is the business that determines the purpose and means of processing. The publication director, Jimenez Julien, is the person who answers privacy requests, and he can be reached at jimenezjulien42@gmail.com.
What the contact form collects
This website has one form, the demo and quote request form in the contact section of the home page. When you send it, we receive exactly the fields listed below and nothing else:
- name: the full name you type, so we know who we are writing back to.
- email: the work email address we use to reply.
- company: the name of your coaching business, gym or studio.
- role: your role from the list of coaching job titles in the drop down.
- size: the number of active clients on your book, chosen from a range.
- request: whether you want a demo, early access or a quote.
- message: whatever you write about how you collect check ins today.
- consent: the record that you ticked the consent box before sending.
The form also carries three hidden technical fields, form-name, subject and recipient, which route your message to the right inbox, and one anti spam field named bot-field that human visitors leave empty. Your browser also transmits an IP address and a timestamp with the submission, which the form processor records for abuse prevention.
We do not ask for a phone number, a postal address, a payment card or any information about your own clients. Please do not paste client names, health information or body measurements into the message box: this form is for a conversation about the software, not for real client records.
Why we are allowed to hold it
Under the GDPR our legal basis is twofold. Answering a demo or quote request is processing necessary for steps taken at your request before entering into a contract, and keeping a record of business enquiries is a legitimate interest of a company that sells software. The consent checkbox gives you a clear, separate opportunity to agree before you send anything, and you can withdraw it later without affecting the lawfulness of what happened before. Under US state privacy laws the processing is a normal business purpose: responding to a request you initiated.
How long we keep it
Submissions stay in the form inbox for 24 months from the date you send them, then they are deleted. If the conversation turns into a paid subscription, the business records tied to that contract are kept for the period French commercial and tax law requires, which is ten years for accounting documents. If you ask us to delete your enquiry sooner, we do it within 30 days and confirm by email.
Who processes it besides us
The site is hosted by Netlify, Inc., and form submissions are processed and stored by Netlify Forms on Netlify infrastructure. Netlify acts as our processor for that data and is bound by its own data processing terms. Replies are sent and stored in our email provider's inbox. Those two providers are the only third parties that touch a form submission. We do not sell personal information, we do not share it with data brokers, we do not use it for cross context behavioral advertising, and we do not pass enquiry details to equipment suppliers, supplement brands or lead resellers.
Cookies and measurement
This website sets no advertising cookies, no third party analytics cookies and no cross site tracking pixels. There is no Facebook pixel, no advertising remarketing tag and no session recording tool on these pages. Our hosting provider keeps standard server logs, including IP addresses and requested URLs, for security and traffic protection, and those logs are rotated on the provider's schedule. The fonts on this site are loaded from Google Fonts, which means your browser contacts a Google server to fetch the font files and Google receives your IP address as part of that ordinary web request.
International transfers
MLJ, SASU is established in France and our hosting and form processing run on infrastructure operated by a United States company. That means your submission may be stored on servers located in the United States. Where personal data of people in the European Economic Area or the United Kingdom is transferred, the transfer relies on the European Commission's standard contractual clauses included in the provider's data processing agreement, together with the technical protections that provider applies.
Your rights
If you live in California, Colorado, Connecticut, Utah or Virginia, you have the right to know what personal information we hold about you, to receive a copy of it, to have it corrected, to have it deleted, and to be free from discrimination for exercising those rights. Because we do not sell personal information or use it for targeted advertising, the opt out rights those laws provide have nothing to attach to here, but you may still ask us to confirm that in writing. California residents may designate an authorized agent to make a request on their behalf.
If the GDPR applies to you, you have the rights of access, rectification, erasure, restriction of processing, data portability and objection, plus the right to withdraw consent at any time and the right to lodge a complaint with a supervisory authority. In France that authority is the Commission Nationale de l'Informatique et des Libertes.
To use any of these rights, email jimenezjulien42@gmail.com with the address you used on the form. We answer within 30 days. We may ask one question to confirm you are the person who sent the enquiry, and we will not charge you for a reasonable request.
Children
This site sells business software to professional coaches and is not directed to children. We do not knowingly collect personal information from anyone under 16 years of age. If you believe a minor has sent us information through the contact form, write to us and we will delete it promptly. Coaches who train minors are responsible for obtaining parental consent for the client records they keep in their own account.
Security
Traffic to this site is encrypted with HTTPS. Form submissions are held behind the provider's authentication, access is limited to the publication director, and accounts that hold data are protected with two factor authentication. No system is perfect, so if a breach affects your information we will notify you and the relevant authority within the deadlines the law sets.
Changes to this policy
When this policy changes we update the date at the top of the page and, for a material change, we note what changed in the first paragraph for at least 60 days. The version you are reading was published on March 2, 2026. Questions about anything above go to jimenezjulien42@gmail.com, and the person who answers is named on the author page.