Privacy
Policy.

01 / 13

General provisions

Lead Flow is the personal website of a developer offering complete website development. This policy explains data processing on the homepage, in the enquiry form, on the thank-you page and when you use the published contact details.

The person responsible for processing your data is: [TO BE COMPLETED: the owner’s full name or legal name, country of operation, address and other mandatory details]. Please contact gorishfb@gmail.com.

02 / 13

Data collected

The form collects your name, selected service (Landing Page, WordPress or Facebook / Instagram ads), contact method and the relevant Telegram, WhatsApp or email contact. You may also provide a project description and launch timeframe. The form sends your consent status; the server adds the enquiry date and time.

To operate the form, the server creates a session and checks a security token, completion time and a hidden anti-spam field. The form code does not create IP-based submission rate counters.

The hosting service may keep HTTP request logs containing an IP address, time, page URL and browser information. The actual log contents depend on the hosting configuration: [TO BE COMPLETED: production hosting log configuration]. Do not include passwords, payment details or sensitive personal information in the project description.

03 / 13

Purposes of processing

Enquiry data is needed to respond, discuss your project, prepare a proposal and arrange services. Technical data is used to operate the form and prevent abuse. Data may be retained to meet legal obligations where those obligations apply to the owner.

The form does not subscribe you to marketing emails or send your contact details to advertising platforms. The Meta Ads offer describes a service; it does not mean advertising tracking is installed on this website.

04 / 13

Legal bases

The form currently requests separate consent to process the information provided so you can be contacted about your enquiry. This does not cover advertising tracking or marketing emails.

Where the GDPR applies, discussions at your request and preparation of a contract may be based on pre-contractual steps, while the agreed services may be based on a contract. Website security may require a legitimate interest assessment; mandatory retention requires a relevant legal obligation. A single consent should not be used as the basis for every operation.

[TO BE COMPLETED: the owner must identify the applicable law and confirm the basis for each actual processing operation]. This page does not claim verified compliance with all GDPR requirements.

05 / 13

Recipients and third-party services

Once accepted by the mail transport, enquiry data is sent to the configured mailbox gorishfb@gmail.com in Gmail (Google). The email passes through the website server and the hosting mail transport; the website itself does not use a separate CRM or enquiry database.

[TO BE COMPLETED: names of the hosting provider, mail transport provider and other providers actually involved]. Access to the mailbox by the owner and other people involved must be organised according to their tasks and confirmed data handling arrangements.

Telegram and WhatsApp open only when you click an external link. Further communication is governed by the relevant service’s terms. Links to client projects also lead to separate websites with their own privacy terms.

06 / 13

Cookies and analytics

A cookie is a small record stored in your browser. When you open the form, this website uses the necessary session cookie leadflow_order for the security token and request verification. It is not used for advertising and contains neither your project description nor contact details. The cookie has HttpOnly and SameSite=Strict attributes; Secure is enabled when PHP detects HTTPS.

The current code contains no Google Analytics, Google Tag Manager, Google Ads tracking, Meta Pixel or advertising cookies. The website does not write data to localStorage or sessionStorage. There is therefore no separate optional cookie panel.

You can delete or block the session cookie in your browser settings; this may prevent form submission. The server session lifetime depends on the hosting PHP configuration. Before optional tools are added, this policy must be updated and effective consent controls implemented.

07 / 13

Advertising and remarketing

The website currently sends no page-view, conversion or remarketing events to advertising systems. The thank-you page URL /thanks.html does not contain personal enquiry data.

If analytics or advertising is added later, the owner must identify the specific tools, events, recipients, legal bases and consent rules before launch. Refusal must effectively block optional tools, and consent must be changeable. For Google products, the current consent rules for the relevant audience must also be checked.

08 / 13

Retention periods

[TO BE COMPLETED: retention periods or criteria for enquiries in email, correspondence, contracts, logs and backups; deletion procedures]. An exact retention period for received enquiries has not yet been defined in the project configuration.

The server session lifetime depends on the hosting PHP configuration. The current code does not create submission rate-limit files. If files from an earlier version remain on the server, the owner must arrange their cleanup.

09 / 13

Information security

The site implements server-side field and request-size validation, a fixed email recipient, sender address validation, a session security token and an anti-spam field. Mail passwords are not sent to the browser.

For the published website, HTTPS and appropriate access to the mailbox, server files and backups must be enabled and verified. Local HTTP testing does not confirm these production settings. Absolute security cannot be guaranteed.

10 / 13

Your rights

Depending on the applicable law, you may request information and access to your data, correction, deletion where provided for, restriction of processing, object to processing or withdraw consent. Withdrawal does not affect the lawfulness of earlier processing; other appropriate bases may permit continued retention.

Email gorishfb@gmail.com, explaining how you contacted us and what your request concerns. Proportionate identity verification may be required to protect your data. Where the GDPR applies, the right to data portability and the right to complain to the competent supervisory authority may also apply.

11 / 13

International transfers

Using Gmail and external messengers may involve processing data outside your country. The processing locations of the hosting service and mail transport still need clarification.

[TO BE COMPLETED: processing countries, provider roles and verified transfer safeguards where required]. The availability of specific standard contractual clauses or other safeguards for this project has not been verified and is not claimed here.

12 / 13

Policy updates

The current version is published on this page with its update date. Changes to forms, providers or tracking require a policy update before the relevant processing begins. If a new purpose requires consent, updating the text alone does not replace it.

13 / 13

Contact

Website

Lead Flow

Responsible person

[TO BE COMPLETED: full name or legal name]

Email for requests

gorishfb@gmail.com

Mandatory details

[TO BE COMPLETED: country, address and details required by applicable law]