Privacy Policy

01Who we are

The companies responsible for your personal information (the “data controllers”) are:

For any question or request about your personal information, write to the email address above.

02Scope of this policy

This policy applies to this website (www.optiflowcompany.com) and the forms it contains. It does not apply to other websites you may reach through links, which have their own privacy policies.

03Information we collect

a) Information you give us. When you fill out the request form, we process the information you enter:

• full name;
• email address;
• phone number;
• business name;
• date and time of the request and the page it came from.

b) Information collected automatically. The systems that run this website collect, as part of normal operation, some data whose transmission is implicit in the use of Internet protocols: for example your IP address, browser type and operating system, date and time of the request, the page requested and the server response code. This data is not collected to identify you, but it could allow identification when combined with other information.

c) Sensitive information. We do not ask for and do not intend to process sensitive personal information, such as health data, political opinions, religious beliefs or precise geolocation. Please do not enter it in the form.

04How we use your information and how long we keep it

We use your information only for the purposes listed below, each with its legal basis (where the law requires one) and retention period.

We do not use your information to send newsletters or promotional messages, and we do not sell it for money. To measure and improve our ads, we send Meta (Facebook and Instagram) and Google information about visits and form submissions, through the Meta Pixel, the Meta Conversions API and Google Analytics. Before it leaves our systems, your email, phone number and name are converted into an irreversible code (SHA-256 hash). Under some US state laws this counts as “sharing” for advertising: see “Your rights” to opt out. When the periods above expire, your information is deleted or irreversibly anonymized.

05Is providing your information required?

Filling out the form is voluntary. Without the information requested, however, we cannot follow up: in particular, without your name and contact information we cannot reach you to show you the website. Log data is needed for the website to be displayed.

06How we protect your information

Your information is processed electronically by authorized, trained staff, and only for the purposes described above. We use appropriate technical and organizational measures to protect it against unauthorized access, loss, destruction or disclosure, including encrypted transmission over HTTPS and access limited to the people who need it.

07Who we share it with

We may share your information, only to the extent necessary, with these categories of recipients:

• providers of hosting and technical infrastructure for this website;
• providers of the tools we use to collect and manage contact requests (such as automation tools, CRM software, spreadsheets and email);
• advisors and professionals who assist us (for example in legal, tax and accounting matters), bound by professional secrecy or confidentiality obligations;
• public authorities, where disclosure is required by law or by a legal order.

Providers that process information on our behalf act as service providers (or “processors” under the GDPR) and may use it only to deliver their services to us. You can request an up-to-date list by writing to info@optiflowcompany.com. We do not publish or otherwise disseminate your personal information.

08International transfers

We operate from the United States and from Albania. The information you enter in the form may be processed in both countries by the two companies listed above, which share it with each other only to handle your request.

Some of the providers we rely on may process information in other countries, including the United States. For users in the European Economic Area and the United Kingdom, any transfer takes place only with the safeguards required by Chapter V of the GDPR, such as an adequacy decision of the European Commission (art. 45) or the Standard Contractual Clauses approved by the Commission (art. 46). You can ask for more information about these safeguards, and a copy of them, by writing to info@optiflowcompany.com. The list of countries covered by adequacy decisions is available on the European Commission website.

09Automated decision-making

We do not use your information for decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

10Your rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access: know whether we hold information about you, and receive a copy of it;
• Correction: have inaccurate or incomplete information corrected;
• Deletion: have your information deleted, subject to legal exceptions;
• Restriction: ask us to limit how we use your information, in certain cases;
• Portability: receive your information in a structured, commonly used, machine-readable format, and have it sent to another provider;
• Objection: object to processing based on our legitimate interests, for reasons related to your particular situation;
• Withdrawal of consent: where we rely on consent, withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

If you live in California, the CCPA gives you the right to know what personal information we collect, use and disclose, to request its deletion or correction, to opt out of the sale or sharing of your personal information, and not to be discriminated against for exercising these rights. We do not sell personal information for money. We do “share” it, as the CCPA defines the term, with Meta and Google to measure our advertising (identifiers such as cookies and IP address, and hashed contact details when you submit the form). You can opt out of this sharing by writing to us at the address below. Residents of other US states with comprehensive privacy laws may have similar rights.

If you live in the EU, the EEA or the UK, you also have the right to file a complaint with your local data protection authority (GDPR art. 77), without prejudice to any other remedy.

11How to exercise your rights

To exercise any of these rights, send a request to info@optiflowcompany.com and tell us which right you want to exercise. To protect your information, we may ask for information that helps us verify your identity. If you live in California, you may also designate an authorized agent to make a request on your behalf.

We will respond without undue delay and within the time required by applicable law: one month under the GDPR, 45 days under the CCPA. Where the law allows, this period may be extended; if so, we will let you know and explain why. Exercising your rights is free of charge.

12Children

The services offered through this website are intended for business owners and professionals and are not directed at anyone under 18. We do not knowingly collect personal information from children under 13, or under 16 where a higher age applies. If you believe a minor has provided us with their information, write to us and we will delete it.

13Do Not Track signals

This website uses the Meta Pixel, the Meta Conversions API and Google Analytics to measure our ads and how the website is used. It does not currently change its behavior in response to “Do Not Track” signals. You can opt out of advertising sharing by writing to us, and limit Meta’s use of this data from your Facebook ad preferences.

14Changes to this policy

We may update this policy from time to time, for example to reflect changes in the law or in our services. The current version is always published on this website, together with the date of the last update. If we make material changes, we will let you know in an appropriate way.