Legal
This policy explains how personal data is handled when you visit landflow.tech, use landflow, or submit a form on a landing page made with landflow.
Effective date: [effective date]
landflow is operated by [legal entity name], [company registration number], of [registered address] ("landflow", "we", "us"). You can contact us about privacy at [email protected] or [postal privacy address].
This policy has two parts. The first covers visitors to landflow.tech and people who use the landflow service. The second covers people who submit their details through a landing page created by a landflow merchant.
When you visit landflow.tech, we may collect technical information needed to deliver, secure and improve the service. This may include your IP address, browser type, device information, operating system, pages viewed, referring page, timestamps and information stored through cookies or similar technologies.
If you create an account, contact us, request information, subscribe to communications, purchase credits or use the product, we collect the information you provide. This may include your name, email address, business name, account details, messages and the information needed to manage your subscription or payment. [Add details of payment information collected, payment provider and its role, if applicable.]
landflow is a service for creating lead-collection landing pages. It is not a website builder or an online shop. It can publish pages to a landflow.site subdomain, a custom domain, WordPress or Shopify. Where a merchant connects Shopify, product, cart and checkout data may be synchronised for the page. landflow does not alter the merchant's checkout.
We use personal data where it is necessary to provide the service, administer accounts, provide support, protect the service, prevent misuse, meet legal obligations and improve the product.
We may also use information to send service messages, such as account, billing, security or policy notices. We will only send direct marketing where we have a suitable legal basis to do so. You can opt out of marketing messages at any time using the unsubscribe link or by contacting us.
Our legal bases may include performance of a contract, our legitimate interests in operating and securing landflow, compliance with a legal obligation, and consent where consent is required.
A merchant may use landflow to publish a landing page and collect leads through it. In this situation, the merchant decides why the page collects personal data and what information its form asks for. The merchant is normally the data controller for the personal data submitted through its page.
landflow processes that data for the merchant as a processor. We process it to host the page, receive and store form submissions, show them in the leads inbox, provide CSV export, support configured integrations and keep the service secure and reliable. We do not use a merchant's lead data for our own unrelated purposes.
The merchant is responsible for providing its own privacy information to visitors, identifying itself as controller, choosing a lawful basis, responding to rights requests and ensuring that its form and tracking configuration comply with applicable law.
Where law or the facts require a different allocation of responsibility, the applicable agreement and processing activity will determine the parties' roles. [Add a link to the data processing agreement, if available.]
When a person submits a form on a merchant's landing page, landflow stores the information requested by that form. This can include a name, email address, telephone number, message, business details or other fields chosen by the merchant.
Each lead is also stored with available attribution and page information. This may include the source, campaign, click identifier, landing page URL and submission time. The precise data available depends on the visitor's browser, URL parameters, form configuration and consent choices.
The lead appears in the merchant's leads inbox and can be exported as a CSV file by authorised users of that merchant's account. Leads over a plan limit are stored but may be hidden from the merchant until the merchant upgrades its plan. They are not dropped for that reason.
A merchant can configure events for Google Analytics 4, Google Tag Manager, Google Ads, Meta, TikTok, LinkedIn, Slack, Google Sheets, a webhook, custom code and [confirm the tenth destination or amend this list]. Events are queued and retried where delivery does not succeed immediately.
Pixels and server-side destinations only fire with consent mode. They should not be used to send personal data unless the merchant has a lawful basis and has given the visitor clear information about that use. The merchant is responsible for its destination accounts, tracking instructions and configuration.
Third-party destinations receive data under their own terms and privacy policies. The information sent depends on the merchant's configuration, the event and the visitor's consent choices.
landflow can use AI to create a landing page from a paragraph or rewrite template copy for a business. To provide these features, we send the prompt and relevant page, template or business information to the AI model provider used for the request. This may include text entered by the user and existing copy selected for rewriting.
Do not include special category personal data, confidential customer data or other unnecessary personal data in AI prompts unless you have a lawful basis and authority to do so. [Identify the AI model provider or providers, the applicable terms, and whether prompts or outputs are retained or used for model training.]
We use cookies and similar technologies for functions such as keeping the service working, remembering settings, protecting accounts and understanding use of landflow.tech. Some cookies are necessary for the service. Other cookies may require consent, depending on their purpose and applicable law.
You can manage non-essential cookies through [cookie preference tool or link]. You can also control cookies in your browser. Blocking necessary cookies may affect the operation of the service.
We share personal data with service providers where needed to operate landflow. This may include hosting, infrastructure, email, analytics, payment, customer support, AI and security providers. They may process data only as permitted by their contract with us and applicable law.
We may also disclose information where required by law, to protect rights or safety, or as part of a corporate transaction. [Publish or link to the current list of sub-processors.]
Personal data may be processed outside the United Kingdom or European Economic Area. Where this happens, we will use an approved transfer mechanism where required, such as an adequacy decision or standard contractual clauses. [State the primary processing locations and transfer safeguards used.]
We keep personal data only for as long as necessary for the purposes described in this policy, including legal, accounting, security and dispute-resolution requirements.
Account information is retained for [account data retention period]. Lead data is retained for [lead data retention period or merchant-controlled retention rule]. Technical logs are retained for [log retention period]. Where a merchant closes its account, its data is handled under [account closure and deletion process].
Depending on applicable law, you may have rights to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to processing, data portability and withdrawal of consent.
For data collected through a merchant's landing page, contact the merchant first. It is normally the controller and can respond directly. If you contact landflow about that data, we may pass your request to the merchant or assist it as required by our agreement.
For data controlled by landflow, contact [email protected]. We may need to verify your identity before responding. You may also complain to the relevant data protection authority. In the UK, this is the Information Commissioner's Office.
We may update this policy when our practices, service or legal obligations change. We will post the updated policy on landflow.tech and change its effective date. For material changes, we will provide notice through the service, by email, or by another appropriate method before the change takes effect where required.