Home / Privacy policy

Last updated March 2, 2026

Privacy policy

CurbsideDrop is published by MLJ, SASU. This policy explains, in plain language, what happens to the information you send us through this website. It is short because we collect very little.

Who is responsible

The data controller is MLJ, SASU, a French simplified joint stock company registered under SIREN 934 769 837, whose publication director is Jimenez Julien. You can reach a human being about anything on this page at jimenezjulien42@gmail.com. We do not employ a data protection officer, because the company is small and the publication director answers these requests personally.

What the contact form collects

The request form on the home page is the only place on curbsidedrop.com where we ask you for information. It sends exactly these fields, and nothing else:

  • name, your full name, so we know who we are talking to.
  • email, your work email address, which is how we reply.
  • company, your truck or business name.
  • role, your job on the operation, chosen from a short list.
  • request, what you are asking for: a demo, early access or a quote.
  • size, how many vehicles you run.
  • message, your own description of where you park and how customers find you today.
  • consent, the record that you ticked the agreement box.

Three hidden fields travel with the submission for routing purposes: form-name identifies which form was used, subject labels the message in our inbox, and recipient routes it to jimenezjulien42@gmail.com. A fourth hidden field, bot-field, is a trap for automated spam and is always empty when a human submits the form. We do not ask for a telephone number, a home address, a payment card, a date of birth or any special category of data, and you should not put such information into the message box.

Why we process it and on what legal basis

We use what you send for one purpose: to answer your request and, if you want to go further, to arrange a demonstration or prepare a quote for the CurbsideDrop service. Under the European General Data Protection Regulation the legal basis is your consent, given by ticking the box, together with our legitimate interest in responding to a business enquiry addressed to us and in taking steps at your request before entering into a contract. We do not profile you, we do not score you, and we do not make automated decisions that produce legal or similarly significant effects.

How long we keep it

Form submissions are kept for twenty four months from the date you send them, so that we can find the thread again if you come back to us in a later season. If you become a customer, the enquiry is kept for the life of the account and for three years after it closes, which matches the commercial record keeping period we are subject to. If you ask us to delete it sooner, we delete it, normally the same business day and always within thirty days.

Who processes it with us

Submissions from this website are received and stored by Netlify Forms, operated by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which also hosts the site itself. Netlify acts as our processor and stores the submission until we retrieve it. A copy is forwarded by email to the address above, which is a Google mail account. Those two providers are the only third parties that see your submission. We do not sell, rent, trade or otherwise share your information with anyone else, and we never pass it to advertising networks or data brokers.

Cookies, analytics and tracking

This website sets no advertising cookies, no third party analytics cookies and no cross site tracking identifiers. There is no Google Analytics tag, no advertising pixel and no social network tracker on any page. Our host records ordinary server logs, including truncated network addresses and requested pages, for security and traffic measurement, and those logs are kept for a short retention period by the host. The web fonts on this site are requested from Google Fonts, which means your browser contacts fonts.googleapis.com and fonts.gstatic.com when a page loads; no cookie is set by that request.

International transfers

MLJ, SASU is established in France, while Netlify, Inc. and Google are established in the United States. When you send the form, the data therefore travels to the United States. Those transfers rely on the European Commission adequacy decision covering the EU to US Data Privacy Framework, and on the standard contractual clauses included in our agreements with those providers, together with the technical measures the providers apply, including encryption in transit.

Your rights if you are in the United States

If you live in California, Colorado, Connecticut, Utah or Virginia, state privacy law gives you the right to know what personal information we hold about you, to receive a copy of it, to correct it, to have it deleted, and to appeal if we refuse a request. California residents may also ask about disclosures of personal information for a business purpose and may not be treated differently for exercising any of these rights. We do not sell personal information and we do not share it for cross context behavioral advertising, so there is no opt out to make, but you can still ask us to confirm that. Send a request to jimenezjulien42@gmail.com with the email address you used on the form; we reply within forty five days and will tell you if we need the single extension the law allows.

Your rights if you are in the European Union or the United Kingdom

You have the right of access, rectification, erasure, restriction of processing, portability and objection, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Write to the same address to use any of them. If you believe we have handled your data badly, you may complain to your national supervisory authority; in France that is the Commission Nationale de l'Informatique et des Libertes, 3 Place de Fontenoy, 75007 Paris.

Security

The site is served only over HTTPS with a strict transport policy. Access to form submissions is protected by a password manager and two factor authentication on both the host account and the mailbox. Only the publication director has standing access. We keep no copy of submissions on a laptop or a phone.

Children

CurbsideDrop is a business tool sold to food service operators. The site is not directed at children, and we do not knowingly collect information from anyone under sixteen. If you believe a child has sent us information through this site, write to us and we will delete it as soon as we have verified the report.

Changes to this policy

If this policy changes we update the date at the top of the page and describe the change in the paragraph below it. Material changes affecting people who have already written to us are also announced by email to the address they used. The current version was published on March 2, 2026 and replaces every earlier version.

How to reach us

Every privacy request, question or complaint goes to jimenezjulien42@gmail.com. Postal identification of the publisher is on the legal notice page, and the contractual terms of the service are on the terms of service page.