Privacy policy
What we collect, why, how long, and your rights.
Informational document. FLOWTIME does not yet have a registered company. Not legal advice.
1. Controller
Controller: FLOWTIME editor (individual / entity being formed). Contact: info@goflowtimes.com.
2. Data we collect
Minimisation principle.
- First name, last name, email — to send your proposal.
- Phone — optional.
- Stay details and estimate.
- Site chat messages with the team (content, anonymous visitor token, optional name/email, timestamps).
No bank data. No sensitive data.
Automatic data
Technical logs for security. Language preference cookie (necessary).
3. Purposes
- Send your proposal — consent (GDPR 6.1.a).
- Improve the service (aggregated) — legitimate interest (6.1.f).
4. Retention
Inactive leads up to 12 months; chat threads up to 12 months after last message; consent proof up to 3 years.
Then deleted or anonymised.
5. Recipients
Processed by FLOWTIME. Not sold.
Processors: Supabase, Brevo, o2switch.
6. Storage
Leads in Supabase; email/SMS via Brevo.
7. Your rights
Access, rectification, erasure, restriction, objection, portability, withdraw consent.
Email info@goflowtimes.com. Complaint: your local DPA / CNIL.
8. Cookies
Necessary language cookie only by default. Analytics/ads would require a consent banner first.
9. Security
Restricted access, HTTPS, host backups.
10. Changes
Policy may change; date at bottom of page.