1. Who We Are

Flux Agncy (“Company,” “we,” “us,” or “our”) is an SEO agency that provides search engine optimization services to businesses and individuals through our website at fluxagncy.com (the “Site”) and related services.

For the purposes of applicable data protection law, Flux Agncy is the data controller responsible for your personal information.

Contact:
Flux Agncy
Email: privacy@fluxagncy.com
Support: support@fluxagncy.com

2. Data We Collect

We collect the following categories of personal data, depending on how you interact with us:

2.1 Information You Provide Directly

• Account & Contact Data: Name, email address, company name, website URL — collected when you fill out our contact form, create an account, or purchase a plan.
• Communications: Messages, emails, and support requests you send us.
• Billing Information: Billing name and address. We do not store payment card numbers — all card processing is handled exclusively by Stripe, Inc.

2.2 Information Collected Automatically

• Usage Data: Pages visited, time spent, referring URLs, browser type, operating system, and device type.
• Log Data: IP address, access timestamps, server logs.
• Cookies & Tracking Technologies: See Section 6 for full details.

2.3 Information from Third Parties

• Stripe: Billing confirmation, subscription status, and payment method type (e.g., “Visa ending in 4242”). We receive no raw card data.
• Analytics Providers: Aggregated, anonymized traffic metrics from services such as Google Analytics.

3. How We Use Your Data

We use personal data only for the purposes described below:

• To provide and manage our SEO services and your subscription.
• To process payments and manage billing through Stripe.
• To communicate with you regarding your account, service updates, and support requests.
• To send transactional emails such as receipts, onboarding information, and renewal reminders.
• To improve our services by analyzing anonymized usage patterns on our website.
• To comply with legal obligations, including tax, accounting, and regulatory requirements.
• To enforce our Terms of Service and protect the rights, property, or safety of Flux Agncy and its users.
• To respond to your inquiries submitted via our contact form.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

5.1 Service Providers (Sub-processors)

• Stripe, Inc. — Payment processing. Stripe processes your card data under their own Privacy Policy and is PCI-DSS Level 1 certified.
• Email Service Provider — To send transactional emails (e.g., receipts, account notifications).
• Analytics Providers — Anonymized website analytics (e.g., Google Analytics with IP anonymization enabled).
• Hosting & Infrastructure — Our website and data are hosted on secure servers.

All sub-processors are bound by data processing agreements and may not use your data for their own purposes.

5.2 Legal Requirements

We may disclose your data if required to do so by law, court order, or government authority, or if we believe in good faith that such action is necessary to protect the rights, property, or safety of Flux Agncy, our clients, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred. We will provide notice before your data becomes subject to a different privacy policy.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our website. A cookie is a small text file stored on your device.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our site. For full details, see our Cookie Policy.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law:

• Account and billing data: Retained for the duration of your subscription plus 7 years (for tax and accounting obligations).
• Contact form submissions: Retained for up to 2 years from the date of submission.
• Website analytics data: Retained in aggregated, anonymized form for up to 26 months.
• Server log files: Automatically deleted after 90 days.
• Email communications: Retained for up to 3 years for support and legal purposes.

Upon account deletion, we will erase or anonymize your personal data within 30 days, unless a longer retention period is required by law.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, subject to legal retention requirements.
• Right to Restriction: Request that we limit the processing of your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting prior processing.

If you are in the EEA or UK and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK, or the relevant supervisory authority in your EU member state).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• HTTPS/TLS encryption for all data transmitted to and from our website.
• Access controls limiting data access to authorized personnel only.
• Payment data handled exclusively by Stripe — PCI-DSS Level 1 compliant.
• Regular security reviews of our systems and processes.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the relevant authorities as required by law.

10. Children’s Privacy

Our services are not directed to individuals under the age of 16 (or under 13 in jurisdictions where that is the applicable age). We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal information without parental consent, please contact us at privacy@fluxagncy.com and we will take steps to delete such information.

11. International Data Transfers

Your personal data may be transferred to and processed in countries other than the country in which you reside. In particular, our service providers (including Stripe) may operate in the United States.

Where personal data is transferred outside the EEA or the UK, we ensure that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Transfers to countries with an adequacy decision by the European Commission.
• Other legally recognized transfer mechanisms.

You may request a copy of the relevant safeguards by contacting us at privacy@fluxagncy.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page.
• Send an email notification to active subscribers for significant changes.
• Display a notice on our website for a reasonable period.

Your continued use of our services after the effective date of any updates constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 5 business days, and to fulfill data subject rights requests within 30 days of receipt.

You may also review our related legal documents: Terms of Service · Refund Policy · Cookie Policy.