SurpriseFlow ("us", "we", or "our") operates the SurpriseFlow website and services (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal information when you use our Service in compliance with the General Data Protection Regulation (GDPR).
Information Collection and Use
While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information ("Personal Information") includes:
We collect this information for the purpose of providing the Service, identifying and communicating with you, responding to your requests and inquiries, and improving our Service.
Legal Basis for Processing Personal Information
We process Personal Information under the following legal bases:
Performance of a contract or agreement
Legitimate interests pursued by us or a third party
Data Subject Rights
Under the GDPR, you have the following rights regarding your Personal Information:
Right to access: You have the right to obtain confirmation of whether we process your Personal Information and, if so, to request a copy of the Personal Information we hold about you.
Right to rectification: You have the right to request the correction of inaccurate or incomplete Personal Information we hold about you.
Right to erasure: You have the right to request the deletion of your Personal Information under certain circumstances.
Right to restrict processing: You have the right to request that we restrict the processing of your Personal Information under certain circumstances.
Right to data portability: You have the right to request a copy of your Personal Information in a structured, machine-readable format and to have it transferred to another data controller.
Right to object: You have the right to object to the processing of your Personal Information under certain circumstances.
Right to withdraw consent: If you have provided consent for the processing of your Personal Information, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at firstname.lastname@example.org.
Retention of Personal Information
Transfers of Personal Information
Your Personal Information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.
Analytics Data Collection
To enhance the user experience and improve our Service, we utilize third-party analytics tools, such as Google Analytics, to collect and analyze data about how our users interact with our Service. These tools help us understand user behavior, measure the performance of our Service, and identify areas for improvement.
Google Analytics and other third-party analytics tools may collect information such as your IP address, browser type, operating system, device type, referring website, pages visited, time spent on pages, and other usage statistics. This information is anonymized and aggregated to provide us with insights into user trends and patterns.
The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.
Links to Other Sites
We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Our Service is not intended for use by anyone under the age of 13 ("Children"). We do not knowingly collect personally identifiable information from Children. If you are a parent or guardian and you are aware that your Child has provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from Children without verification of parental consent, we take steps to remove that information from our servers.
Data Protection Authority
If you are a resident of the European Economic Area (EEA) and you believe we are unlawfully processing your Personal Information, you have the right to complain to your local data protection supervisory authority. You can find their contact details here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm