Privacy Policy

Who Operates Flowwrk

Flowwrk is operated by:

We have designated a Privacy Officer who is responsible for our compliance with this Privacy Policy and applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector. You can reach our Privacy Officer using the details in Section 24 (Contact Us).

Scope of This Policy

This Privacy Policy applies to information processed through:

• flowwrk.co
• our demo booking page and booking widget
• website contact and inquiry forms
• demo calls and related communications
• communications connected to an inquiry, subscription, or client engagement
• Flowwrk's prospect and client-management systems

When we build websites and automations for our clients, we may also process personal information about our clients' own customers and leads. That processing is described in Section 07. This policy does not control how unrelated third-party websites process information after you leave Flowwrk.

Information You Provide

Demo booking information

When you book a demo through our booking page or booking widget, we may collect:

• your name
• your email address
• your phone number
• your business name and website
• your selected appointment date and time
• your time zone
• your answers to booking questions, such as the type of business you run and what you need help with
• calendar and video-meeting information

Contact form information

When you submit a contact form on our website, we may collect your name, email address, phone number, business name, and the contents of your message.

Some fields allow free-text responses. Please provide only the information needed for us to understand your inquiry. Do not submit passwords, authentication codes, API keys, payment-card information, health information, government identification numbers, or other sensitive information through our forms.

Client information

If you subscribe to a Flowwrk plan, we may collect additional information to set up and deliver your services. This may include:

• legal or business name
• business contact information
• billing and subscription details
• website content, branding, and service information
• domain, hosting, and platform details needed for your setup
• team-member contact information
• preferences and project instructions

We will request only the information reasonably needed to set up and deliver the services in your plan.

Communications

If you contact us directly, we may collect your contact details and the contents of your message, including any information you voluntarily provide.

Information Collected Automatically

When you visit the website or interact with an embedded booking widget or form, we and our service providers may automatically process:

• IP address
• browser type and settings
• device type
• operating system
• referring page or website
• pages viewed
• date and time of access
• URL parameters
• approximate location derived from an IP address
• page-loading and performance information
• error, security, and diagnostic information
• interactions with embedded booking widgets or forms
• cookies and similar technical identifiers

How and when optional technologies load is described in Section 11. The information available directly to Flowwrk may be more limited than the information processed by each service provider.

How We Use Information

We may use personal information to:

• respond to inquiries
• schedule and conduct demos
• send booking confirmations and reminders
• evaluate whether our services fit your needs
• create and maintain a contact record in our CRM
• follow up about your inquiry or demo
• set up, deliver, and support the services in your plan
• manage billing and subscriptions
• maintain business and communication records
• operate, secure, and troubleshoot the website
• detect spam, fraud, abuse, and technical problems
• understand general website usage and performance, with your consent
• comply with legal obligations
• establish, exercise, or defend legal claims

We do not use information collected through the website to make decisions about you based solely on automated processing.

CRM and Automation Processing

When you book a demo or submit a form, the information you provide is stored in the Flowwrk platform, which we use as our customer relationship management (CRM) system. Your contact record may contain:

• your contact details
• business information
• booking and form responses
• appointment information
• communication history
• notes and follow-up status
• subscription and service information if you become a client

We use this record to prepare for your demo, track communication, send follow-ups related to your inquiry, prevent duplicate records, and manage your client relationship.

We may use workflow automation tools, including Flowwrk platform automations and n8n, to move information between the systems we use to run our business. We limit these automations to information reasonably necessary for the relevant workflow.

Information We Process for Our Clients

Our clients use Flowwrk to run their websites, capture inquiries, and follow up with their own customers. When we provide these services, we may process personal information about our clients' customers and leads, such as names, contact details, messages, and appointment information.

For this information, our client is responsible for deciding how it is collected and used, and we act as their service provider. We process it only to provide the services our client has requested, under our agreement with that client. If you are a customer of one of our clients and have a question about your information, please contact that business directly. Their privacy policy applies to that information.

Email and Marketing Communications

Booking a demo or submitting a form does not automatically add you to a marketing email list.

We may send service-related communications connected to:

• your inquiry
• your scheduled demo
• a proposal or plan
• onboarding and website setup
• service delivery and support
• billing and subscription notices

These messages are necessary to respond to your request or provide services.

We send commercial electronic messages, such as promotional emails, only with your consent or where otherwise permitted by Canada's Anti-Spam Legislation (CASL) and other applicable law. Every commercial message identifies Flowwrk and includes a working unsubscribe option. We process unsubscribe requests promptly, and in any case within 10 business days. You can also unsubscribe by contacting support@flowwrk.co. Unsubscribing from marketing will not affect service-related communications.

SMS and Text Message Communications

If you provide a mobile phone number, we may use it to send SMS or MMS text messages related to your inquiry, demo, or client engagement. Depending on the reason you provided your number, these messages may include:

• appointment confirmations and reminders
• follow-ups about your inquiry or demo
• onboarding and service updates
• support and account-related messages
• billing or subscription notices
• with your separate opt-in, occasional marketing messages about Flowwrk services

Providing your phone number to book a demo or submit a form does not automatically enroll you in marketing text messages. We send marketing texts only if you separately opt in to receive them.

Consent

By submitting your phone number through a Flowwrk form or booking widget, or agreeing to receive texts during onboarding, you consent to receive text messages from Flowwrk at the number provided for the purposes described above. Consent to receive text messages is never a condition of purchasing any service. Message frequency varies based on your engagement with us. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

Opt-Out and Help

You may opt out of text messages at any time by replying STOP to any message you receive from us. After you reply STOP, we will send one confirmation message and will not send further texts unless you opt in again. To rejoin, reply START or submit a new opt-in request through our website. For help, reply HELP to any message or contact support@flowwrk.co.

No Sharing of Mobile Information

SMS Platform Provider

We send text messages through the Flowwrk platform, which runs on software licensed from LeadConnector, Inc. LeadConnector acts as our service provider for sending, receiving, and managing text messages, and it works with underlying carriers and messaging aggregators to deliver messages. LeadConnector processes your phone number and message content according to our configuration and its own privacy notice.

Text message consent records, including the phone number, opt-in method, and timestamp, are retained for as long as reasonably necessary to demonstrate compliance with applicable messaging laws, and are handled under the same safeguards described in Section 15.

Consent and Legal Bases

Consent under Canadian law

Under PIPEDA and Quebec privacy law, we collect, use, and disclose personal information with your consent, except where the law permits otherwise. We identify the purposes for collecting information at or before the time of collection, and we use it only for those purposes or purposes a reasonable person would consider appropriate in the circumstances. Where information is sensitive, or a use would not be reasonably expected, we ask for express consent.

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. If withdrawing consent would affect our ability to provide a service, we will explain that to you.

Legal bases under the GDPR and UK GDPR

Where the GDPR, UK GDPR, or a similar law applies, we rely on one or more of the following legal bases:

• Steps before a contract: responding to your inquiry, scheduling a demo, and discussing a possible subscription.
• Performance of a contract: providing the services in your plan.
• Legitimate interests: operating and protecting the website, managing client relationships, preventing fraud, and keeping appropriate business records.
• Legal obligations: complying with applicable law, regulation, or legal process.
• Consent: analytics, embedded content, and optional marketing communications.

Withdrawing consent does not affect processing that occurred before consent was withdrawn.

Cookies and Similar Technologies

Flowwrk and its service providers use cookies, embedded scripts, and similar technologies. We group them into three categories:

Analytics is turned off by default and loads only after you allow it. Embedded Content loads automatically so our contact form and booking calendar work, except for visitors in the European Economic Area, the United Kingdom, and Switzerland. Those visitors see a consent banner on their first visit, and embedded content stays off until they allow it. If you choose not to allow Embedded Content, you can still book a demo through our booking page or contact us by email at support@flowwrk.co.

If you follow a link to our booking page at links.flowwrk.co, which is hosted by LeadConnector, Inc., LeadConnector may use cookies and similar technologies needed to run its scheduling service.

You can review or change your choices at any time using the "Cookie Preferences" link in the website footer, and you can block or delete cookies through your browser settings. We honour the Global Privacy Control signal by keeping optional categories off unless you choose otherwise.

We store your consent choices for up to 6 months, after which we will ask again. We will also ask again if we add new categories or providers.

Service Providers and Information Sharing

We may disclose information to service providers that help us operate Flowwrk. We require them by contract or other means to protect personal information and to use it only for the services they provide to us.

LeadConnector, Inc.

The Flowwrk platform runs on software licensed from LeadConnector, Inc. (also known as HighLevel). LeadConnector provides our CRM, booking, form, email, and SMS/MMS messaging infrastructure and processes contact details, booking and form responses, appointment information, and communications.

Cloudflare

Cloudflare provides website hosting, delivery, security, and technical infrastructure.

Google Analytics

Google Analytics helps us understand website performance and general usage. It loads only after you allow Analytics through our cookie consent tool.

Google Workspace

Google services may be used to load website fonts, send and receive business email, manage calendars, host video meetings, and store business records.

n8n

n8n is a workflow automation provider we may use to move information between the systems we use to run our business, according to our configuration.

We may also disclose information:

• when required by law or valid legal process
• to investigate fraud, security incidents, or misuse
• to protect our rights, property, users, or others
• in connection with a merger, acquisition, restructuring, financing, or sale of business assets
• when you direct or authorize us to do so

We do not sell personal information. We do not share personal information for cross-context behavioural advertising or use it for targeted advertising.

Storage and Transfers Outside Canada

Her Funnels LLC is based in the United States, and our service providers may store and process information in the United States and other countries. If you are in Canada, your personal information will be stored and processed outside Canada.

While your information is outside Canada, it is subject to the laws of the country where it is held and may be accessible to courts, law enforcement, and national security authorities of that country. We use contracts and other measures to provide a comparable level of protection while your information is processed by our service providers.

Before communicating personal information outside Quebec, we assess whether it will receive adequate protection, as Quebec law requires. Where other laws require additional safeguards for international transfers, we take reasonable steps to use an approved transfer mechanism.

Data Retention

We keep personal information only as long as needed for the purposes described in this policy or as required by law. Our general retention periods are:

• Inquiries and demo bookings that do not lead to a subscription are deleted or anonymized after 12 months of inactivity.
• Active prospect information may be retained while discussions remain ongoing.
• Client information is retained for the duration of the subscription and afterward when reasonably necessary for contracts, support, accounting, tax, dispute resolution, or legal obligations.
• Information we process for our clients is handled according to our agreement with each client and returned or deleted when the services end, unless the law requires otherwise.
• Marketing information is retained until you unsubscribe, withdraw consent, or the information is no longer needed.
• Consent records for email, text messages, and cookies are retained as needed to demonstrate compliance with applicable laws.

When we no longer need information, we securely delete or anonymize it. Information may remain in secure backups or with service providers for a limited period after deletion from active systems.

Data Security and Breaches

We use reasonable administrative, technical, and organizational safeguards intended to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure. These measures include restricted access, secure service providers, encryption in transit, account-security controls, and website-security services.

No website, transmission method, or storage system can be guaranteed to be completely secure.

If a privacy breach creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada, and, where it applies, Quebec's Commission d'accès à l'information, as required by law. We keep a record of privacy breaches as required by law.

Your Privacy Rights

Depending on where you live and which laws apply, you may have the right to:

• request access to personal information we hold about you
• request correction of inaccurate or incomplete information
• request deletion of your information
• receive a portable copy of certain information
• restrict or object to certain processing
• withdraw consent
• opt out of certain sales, sharing, profiling, or targeted advertising
• appeal the denial of a privacy request
• receive equal service when exercising your privacy rights

To submit a request, contact our Privacy Officer at support@flowwrk.co. We may need to verify your identity before completing a request. We respond within 30 days, or within any shorter period required by law. Certain information may be retained or excluded from a request where permitted by law, and we will explain our reasons if we cannot fulfill a request.

Canadian Privacy Rights

If you are in Canada, PIPEDA gives you the right to:

• know why we collect, use, and disclose your personal information
• access the personal information we hold about you and learn how it has been used and disclosed
• challenge the accuracy and completeness of your information and have it corrected
• withdraw your consent, subject to legal or contractual restrictions
• file a complaint about how we handle your information

Quebec residents

If you are in Quebec, you also have the right to:

• have technologies that can identify, locate, or profile you turned off by default
• request that we stop disseminating your personal information or de-index links to it where the law allows
• receive computerized personal information you provided in a structured, commonly used technological format
• be informed of and request correction of information used in any decision made solely by automated processing

Complaints

If you have a concern, please contact our Privacy Officer first so we can try to resolve it. You also have the right to complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information du Québec.

EEA and UK Privacy Rights

Where the GDPR or UK GDPR applies, you may have rights to:

• access your personal information
• correct inaccurate or incomplete information
• request deletion
• restrict processing
• object to processing
• receive certain information in a portable format
• withdraw consent
• lodge a complaint with your local data protection authority

We encourage you to contact us first so we can try to address your concern.

California and Other US State Rights

Residents of California and certain other US states may have additional rights under applicable state privacy laws. The availability of these rights depends on the applicable law, the nature of the information, and whether relevant legal requirements and business thresholds apply to Her Funnels LLC.

We recognize valid browser-based opt-out signals, including Global Privacy Control. Flowwrk does not sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising.

Flowwrk does not currently alter its ordinary website operation in response to a Do Not Track signal. Third-party providers may respond according to their own policies.

Children's Privacy

Flowwrk provides business services and is intended for adults. The website is not directed to children under 18, and we do not knowingly collect personal information from minors. If you believe a child has submitted personal information, contact support@flowwrk.co so we can review and, where appropriate, delete it.

Sensitive Information

We do not intentionally request sensitive personal information through the website, booking widget, or forms. Information entered into free-text fields may be processed as part of your submission. Please avoid including sensitive, confidential, or regulated information that is unnecessary for your inquiry.

We do not use sensitive personal information to infer characteristics about visitors.

Third-Party Websites and Services

The website may contain links to third-party websites, booking pages, or documents. When you visit or load a third-party service, that provider's privacy practices apply. We do not control the privacy or security practices of unaffiliated third parties.

Changes to This Policy

We may update this Privacy Policy when our website, services, providers, or legal obligations change. The "Last Updated" date shows when the policy was most recently revised. Where required, we will provide additional notice of material changes or ask for your consent again.

Contact Us

For questions, concerns, or privacy requests, contact our Privacy Officer: