Privacy policy

FCS Flow is run by me, Felipe Santos, in Rotterdam, the Netherlands. I decide what happens to the details you share through this website, so I'm responsible for them (the "controller" under the GDPR). For anything about your data, email me at felipe@fcsflow.com.

When you book a call: your name, email address, company name, anything you write in the notes, and the time you pick. I use them to hold the call, prepare for it, and follow up about working together. The legal basis is that you asked for the call: these are steps you requested before a possible contract (GDPR Article 6(1)(b)).

When you visit the site: the hosting company's servers record technical details such as your IP address, so the site can be delivered and kept secure. That's my legitimate interest in running a working, safe website (Article 6(1)(f)).

I don't use analytics, advertising trackers or a newsletter, and I never sell your details or add you to a mailing list.

This site sets no cookies of its own. Two parts load content from other companies, and they may store data in your browser: the Cal.com booking calendar, which loads as soon as the Book a call page opens, and the YouTube demo video, which loads nothing from YouTube until you press play.

I use these services to run the site and my bookings:

• Vercel · Vercel Inc., USA

  Hosts this website. Like any web host, it sees your IP address and browser details when you load a page.

• Cal.com · Cal.com, Inc., USA

  Runs the booking calendar. It sees your IP address and browser details as soon as the Book a call page opens, and stores your booking if you make one.

• n8n · n8n GmbH, Germany (data hosted in the EU)

  Passes your booking from Cal.com to my sales pipeline and sends me a notification.

• Notion · Notion Labs, Inc., USA

  Holds my sales pipeline, where your booking details are kept.

• Google · Google Ireland Limited, with Google LLC in the USA

  Gmail (the notification I receive and any emails we exchange), Google Meet (the video call) and YouTube (the demo video, only if you press play).

Some of these companies are based in, or store data in, the United States. Where that happens, the transfer is covered by the safeguards the GDPR requires, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

If we don't end up working together, I delete your booking details within 12 months of our last contact. If you become a client, I keep what's needed for the work and for the records the law requires (Dutch tax rules ask for 7 years for invoices).

You can ask me for a copy of your details, to correct them, to delete them, to limit how I use them, or to receive them in a format you can take elsewhere. You can also object to how I use them. Email me and I'll answer within a month.

If you think I've handled your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority where you live. I'd be grateful for the chance to fix it first.

If I start using a new tool that handles your details, I'll update this page and the date at the top. Email me with any question.