Privacy Policy

## 1. Who we are Flintlock ("we", "us", "our") is a digital studio operated by Flintlock Agency, based in Casablanca, Morocco. We provide web development, AI integration, automation, and cybersecurity services. **Website:** https://flintlockagency.com **Email:** contact@flintlockagency.com **Phone:** +212 706-570686 ## 2. What data we collect ### 2.1 Contact form submissions When you fill out our contact form, we collect: - Your name - Your email address - Your message content This data is processed by a Cloudflare Worker and delivered to our email inbox via Resend (https://resend.com). ### 2.2 Lead magnet downloads When you download our ebook, we collect: - Your email address This is used solely to deliver the download link and is stored for marketing communications (with your consent). ### 2.3 Analytics We use **Plausible Analytics** (https://plausible.io), a privacy-friendly, cookieless analytics tool. Plausible does not use cookies, does not collect personal data, and is fully compliant with GDPR, CCPA, and PECR. ### 2.4 Calendly scheduling When you book a call via Calendly, Calendly collects your name, email, and scheduling preferences. This is governed by [Calendly's own privacy policy](https://calendly.com/privacy). ## 3. How we use your data We use your data to: - Respond to your inquiries - Deliver requested resources (ebook downloads) - Schedule and conduct discovery calls - Improve our website (via anonymous analytics) ## 4. Legal basis for processing Under GDPR, our legal basis for processing is: - **Consent:** When you submit a form or download a resource - **Legitimate interest:** When we respond to business inquiries - **Contract:** When we enter into a service agreement ## 5. Data sharing We do **not** sell your personal data. We share it only with: - **Cloudflare Workers + Resend** — form processing and email delivery (data processor) - **Plausible Analytics** — anonymous website analytics (no personal data) - **Calendly** — scheduling (data processor) ## 6. Data retention - Contact form submissions: retained for 2 years - Lead magnet emails: retained until you unsubscribe - Analytics data: aggregated, anonymous, retained indefinitely ## 7. Your rights Under GDPR, you have the right to: - **Access** your personal data - **Rectify** inaccurate data - **Erase** your data ("right to be forgotten") - **Object** to processing - **Port** your data - **Withdraw consent** at any time To exercise any of these rights, email us at contact@flintlockagency.com. ## 8. Cookies This website uses **no tracking cookies**. Plausible Analytics is cookieless by design. The only cookies that may be set are functional cookies required for the website to operate. ## 9. International data transfers Our servers are hosted by Cloudflare. Data may be processed in data centers outside the EU. Cloudflare maintains [GDPR compliance](https://www.cloudflare.com/gdpr/) and provides appropriate safeguards for international transfers. ## 10. Changes to this policy We may update this policy from time to time. The "Last updated" date at the top indicates the most recent revision. ## 11. Contact For privacy-related inquiries, contact us at: - **Email:** contact@flintlockagency.com - **Mail:** Flintlock Agency, Casablanca, Morocco