Privacy Policy

Last updated: 22 July 2026

This policy explains what information LeadsFlow collects when you use our website and contact form, how we use it, and the choices you have. LeadsFlow is a service operated by Ideal Web Construct SRL, a company registered in Romania, which is the controller of your information ("LeadsFlow", "we", "us"). If you do not agree with this policy, please do not use the site or submit the form.

Mobile information

We do not sell or share your phone number or mobile information with third parties or affiliates for their marketing purposes. The service providers that help us operate (see below) may process it only to deliver the service we ask of them.

Information we collect

Information you give us

When you submit the contact form, we collect what you enter, which may include:

• your name and email address;
• your company, if you provide it;
• your phone number, if you provide it (see “Phone calls and text messages” below);
• your message, and, for a lead-quality audit, your approximate monthly lead volume and the quality problem you select.

Technical and usage information

When you visit the site, we and our infrastructure provider automatically receive standard technical data such as your IP address, approximate location, browser and device type, and the date and time of your visit. We also record marketing attribution when it is present in the link you arrive from, including campaign parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term), a campaign intent value, ad click identifiers (such as gclid and fbclid), the page you land on, and the site that referred you. We keep this attribution in your browser's session storage for the duration of your visit; it is cleared when you close the tab.

Cookies and analytics

We use Google Tag Manager and Google Analytics to understand how the site is used. These set cookies and collect usage information such as pages viewed and interactions. We do not send your name, email, phone number, or message content to analytics; the events we record carry only non-identifying information (for example, which button was clicked). You can control cookies through your browser settings and can opt out of Google Analytics using Google's browser add-on.

How we use your information

• to reply to your request and, if you ask, arrange a demo or lead-quality audit;
• to prepare and share the recommendations you request;
• to measure which campaigns and pages bring genuine enquiries;
• to protect the site against spam and abuse; and
• to keep the records we need for our business, legal, and accounting obligations.

Legal bases for processing

Under the GDPR, we rely on the following legal bases:

• Replying to your request and providing a demo or lead-quality audit — steps taken at your request before entering a contract, or performance of a contract, together with our legitimate interest in answering enquiries;
• Phone calls and text messages — your consent, which you can withdraw at any time;
• Cookies, analytics, and marketing attribution — your consent where it is required, and otherwise our legitimate interest in understanding and improving how the site is used;
• Protecting the site against spam and abuse — our legitimate interest in keeping the service secure;
• Legal, tax, and accounting records — compliance with a legal obligation.

Where we rely on legitimate interests, we weigh them against your rights and freedoms and only proceed where they are not overridden.

Automated decision-making

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects on you.

Phone calls and text messages

If you provide a phone number and check the consent box, you agree that LeadsFlow may contact you by phone call and text message at that number about your request, including scheduling and follow-up, using automated technology. Consent is not a condition of any purchase. Message and data rates may apply and message frequency varies. You can reply STOP at any time to opt out, or HELP for help. We keep a record of your consent, including the wording you agreed to, the time, and the IP address it came from. As stated above, we do not share your number with third parties for their marketing.

Service providers

We rely on a small number of providers who process information on our behalf and only for the purposes we set, not for their own marketing:

• Cloudflare — website hosting, delivery, and security;
• EmailJS — delivering your form submission to us by email;
• Google (Tag Manager and Analytics) — website usage measurement;
• Cal.com — scheduling and managing demo bookings.

When you book a demo, you are taken to Cal.com, a third-party scheduler that collects the details you enter there (such as your name, email, and chosen time) under its own privacy terms. We append the campaign parameters described above to the booking link.

How we share information

We do not sell your personal information. We disclose it only where necessary: to the service providers above; when required by law or to protect our rights, safety, or property; and, if the business is ever transferred, to the party taking it on, subject to this policy.

How long we keep it

We keep your information only as long as we need it to respond to you, provide any service you request, meet legal and accounting requirements, resolve disputes, and maintain the security of the site. You can ask us to delete it at any time.

Your rights

If you are in the EU or EEA, you have the following rights over your personal data:

• Access — a copy of the information we hold about you;
• Rectification — correction of inaccurate or incomplete information;
• Erasure — deletion of your information where there is no overriding reason to keep it;
• Restriction — to limit how we use your information in certain cases;
• Portability — to receive the information you gave us in a portable, machine-readable format;
• Objection — to object to processing based on our legitimate interests, and to direct marketing at any time;
• Withdraw consent — where we rely on your consent (for example, phone contact or analytics), at any time, without affecting processing already carried out.

You can also opt out of phone and text contact by replying STOP or emailing us, and control cookies through your browser or Google's opt-out add-on. To exercise any of these rights, email hello@leadsflow.dev; we will respond within one month. If you believe we have mishandled your information, you may lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro), or with the authority in your country.

Security

We take reasonable measures to protect your information, including serving the site over HTTPS and limiting who can access submissions. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

International transfers

Some of our providers (such as Cloudflare, Google, EmailJS, and Cal.com) may process your information outside the European Economic Area, including in the United States. Where that happens, we rely on safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses or an adequacy decision (for example, the EU–US Data Privacy Framework), so that your information keeps a comparable level of protection.

Children

The site is intended for businesses and is not directed to children. We do not knowingly collect information from anyone under 16.

Changes to this policy

We may update this policy from time to time. When we do, we will change the “last updated” date above. Please review it periodically.