How GrantClock handles the information you send us

What this website collects

The only place this website asks for personal information is the contact form in the request section of the home page. When you submit that form, the following named fields are transmitted and stored: name (your full name), email (your work email address), company (your organization name), role (your job title, selected from a list), request (the type of request you are making), size (the number of active grants in your portfolio, selected from a range), message (the free text you write about the deadline that concerns you) and consent (the record that you ticked the consent box).

Three hidden fields travel with the submission for routing purposes only: form-name, which identifies which form was sent, subject, which labels the notification email, and recipient, which is the publisher's own address. A further hidden field named bot-field exists to catch automated spam. A human never sees it and a genuine submission leaves it empty.

Alongside the form content, our hosting provider records ordinary technical data with each submission, such as the time it was received and the network address it came from. That information exists to prevent abuse of the form, not to profile visitors.

We do not ask for and do not want the personal data of your donors, your beneficiaries or your program participants. Please do not paste that kind of information into the message field. If you send us a sample of a grant record for a walkthrough, remove personal identifiers first.

Why we hold it, and on what legal basis

We use what you send for one purpose: to answer you, to prepare and run the walkthrough or quote you asked for, and to follow up on that conversation. We do not add form senders to a marketing list, we do not sell contact data, and we do not pass it to advertising networks or data brokers.

Where the EU General Data Protection Regulation applies, our legal basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a business enquiry addressed to us and in keeping a record of that exchange. Consent can be withdrawn at any time by writing to the address below, and withdrawing it does not affect the lawfulness of what we did before.

How long submissions are kept

Contact form submissions are kept for 24 months from the date they arrive, then deleted. If the exchange leads to a subscription, the correspondence is retained for the life of the account and for three years after it closes, because it may be needed to answer a billing or contractual question. If you ask us to delete your submission earlier, we do so within 30 days and confirm it by email. Spam caught by the honeypot field is discarded automatically.

Who processes the data with us

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States. Netlify Forms receives, processes and stores the submissions sent through the form on our behalf, and it notifies us by email when one arrives. Netlify acts as our processor and is bound by its own data processing terms. Our email provider handles the notification and any reply we send you.

No other third party receives what you submit. We do not use a customer data platform, a lead enrichment service or an advertising pixel on this website. The subscription application itself is covered by a separate data processing agreement provided to subscribers when an account opens.

Cookies, analytics and tracking

This website sets no advertising cookies and runs no third party analytics. There is no Google Analytics tag, no Meta pixel, no session recording and no cross site tracker on these pages. The fonts used here are served by Google Fonts, which receives the network request needed to deliver the font files. Nothing on this site follows you to another website, and there is no consent banner because there is nothing to consent to beyond the form itself.

Your rights and how to use them

Whoever you are and wherever you are, you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or ask us to stop using it. Send the request to jimenezjulien42@gmail.com from the address you used on the form, or tell us enough to find the record. We answer within 30 days and we do not charge for it.

If you are a resident of California, Colorado, Connecticut, Utah or Virginia, your state privacy law gives you specific rights: to know what personal information is collected and for what purpose, to access a copy, to correct inaccuracies, to delete it, and to opt out of sale or of targeted advertising. We do not sell personal information and we do not use it for targeted advertising, so there is nothing to opt out of, but the right to know, access, correct and delete is honored in full. California residents may also designate an authorized agent to make a request, and we will not discriminate against anyone for exercising a right.

If you are in the European Economic Area or the United Kingdom, the GDPR gives you the rights of access, rectification, erasure, restriction of processing, objection and data portability. You may also lodge a complaint with your national supervisory authority. In France, that authority is the Commission Nationale de l'Informatique et des Libertes.

International transfers

The publisher is established in France and the hosting provider is established in the United States, so a submission sent from a US nonprofit is stored in the United States and read in France. Transfers between the two rely on the standard contractual clauses adopted by the European Commission, incorporated in our processor agreements. If you would like a copy of the relevant clauses, ask and we will send them.

Children's privacy

GrantClock is a tool for nonprofit staff and this website is aimed at adults acting in a professional capacity. We do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has sent us information through this website, write to us and we will delete it promptly.

Changes to this policy

If this policy changes, the revised version is published on this page with a new review date at the top, and material changes are described in the first paragraph of the change. The current version was last updated March 2, 2026. The publisher and controller is MLJ, SASU, and the publication director is Jimenez Julien, whose background is described on the author page.