Privacy Policy
Website: flozz.io
Last updated: August 9, 2026
1. Data controller
The controller for the processing described in this policy is Toussaint Digital LLC, a Limited Liability Company registered in the State of Wyoming, United States, with registered office at 30 N Gould St Ste R, Sheridan, WY 82801, United States. Email: contact@flozz.io. Flozz is a commercial brand operated by Toussaint Digital LLC.
2. Scope
This policy covers data processed when you browse flozz.io, use the cookie banner, view embedded content, complete a form, request a free audit, communicate with Flozz, create or use a Flozz account, order a service or request support.
Toussaint Digital LLC acts as controller for data required to manage the commercial relationship, account, billing and support. When a business customer uses a Flozz service to process its own contacts’ data, the Customer remains the controller and Toussaint Digital LLC acts as processor according to the instructions, responsibilities, safeguards, return arrangements and deletion rules set out in the contract or a separate data-processing agreement.
3. Data collected
Data you provide directly
- identity and contact details: first name, surname, email address, optional telephone number, company and business activity;
- enquiry content: subject, message, needs, availability and information you choose to provide;
- free audit: the submitted website address and information required for the review;
- contractual relationship: proposals, orders, invoices, subscriptions, payment methods and statuses, exchanges, approvals and information required for delivery and support;
- account and services: account identifiers, preferences, service configuration, cancellation, reactivation or export requests and the history of actions required to operate the service.
Technical data
- IP address, browser, device, language, pages viewed, date and visit duration;
- login, security and usage logs, technical errors and information required to prevent abuse and provide support;
- cookies and identifiers according to the choices made in the consent banner.
4. Purposes and legal bases
| Purpose | Main legal basis |
|---|---|
| Answer enquiries, audits and proposal requests | Pre-contractual steps and legitimate interest in responding |
| Create and administer the account, subscriptions, billing, cancellation, reactivation and available exports | Performance of a contract and legal obligations |
| Provide services and support | Performance of a contract |
| Secure the website, account and services and prevent abuse | Legitimate interest and security obligations |
| Measure audience and improve the website | Consent where required |
| Meet accounting, tax and legal requirements | Legal obligation |
| Send separate marketing communications | Consent or legitimate interest where permitted by law, with a right to opt out |
5. Recipients and service providers
Data is available only to authorised Toussaint Digital LLC personnel and categories of providers required to operate the website, account and services. Depending on the functions used, these may include:
- Hostinger for website hosting;
- WordPress and its extensions, including Fluent Forms and WPForms for forms;
- Google Analytics / Google Tag Manager for audience measurement where the required consent has been given;
- Google reCAPTCHA to protect forms against abuse;
- Complianz for cookie-consent management;
- Tella for certain embedded videos;
- business-platform, payment and billing, email, telephone or messaging, technical automation, backup, security and support providers strictly required for the services ordered.
We do not sell your personal data. Data is disclosed to an authority only where required by law.
6. International transfers
Toussaint Digital LLC is established in the United States and some providers may process data outside the European Economic Area. Where required by applicable law, transfers rely on a recognised mechanism such as an applicable adequacy decision, Standard Contractual Clauses or other appropriate safeguards.
7. Retention periods
- contact requests, audits and pre-contractual exchanges: up to 3 years after the last contact, unless you object or a specific need applies;
- account, service and support data: for the contractual relationship, then only for the time required for closure, reactivation or an available export, security, contract compliance and the establishment or defence of rights;
- data processed on a Customer’s behalf: returned or deleted at the end of the service according to the Customer’s choice and instructions, the contract and applicable legal obligations;
- contracts, invoices and accounting records: for the period required by law or necessary to establish or defend rights;
- security and technical logs: generally up to 12 months, unless an incident or legal requirement justifies longer retention;
- audience-measurement cookies: for their technical duration, within the limits shown by the banner and applicable law;
- records of consent or objection: for the time needed to demonstrate compliance with your choices.
8. Your rights
Where the GDPR or equivalent law applies, you may request access, rectification, erasure, restriction, portability or objection to the processing of your data. You may withdraw consent at any time for processing based on consent.
Send your request to contact@flozz.io. We acknowledge it as soon as reasonably possible and respond within the applicable legal period, generally one month under the GDPR. Limited proof of identity may be requested where there is reasonable doubt.
9. Cookies
The website uses strictly necessary cookies and may, with your consent where required, use audience-measurement or third-party-service cookies. You can accept, refuse or change your choices through the consent banner. Refusing optional cookies should not prevent access to essential information but may disable embedded content or a function.
10. Security
We apply reasonable measures such as HTTPS encryption, access restrictions, updates, backups and technical monitoring. No connected system can guarantee absolute security.
11. Third-party websites and minors
Third-party websites and embedded content have their own policies. Flozz is intended for business users and does not target minors; we do not knowingly collect children’s data.
12. Complaints
We encourage you to contact us first so we can address any concern. If you believe your rights have not been respected, you may contact the competent data-protection authority in your country. The list of European authorities is available from the European Data Protection Board.
13. Changes and contact
This policy may be updated to reflect changes to services, providers or applicable rules. The date at the top of the page identifies the current version.
Toussaint Digital LLC, a Limited Liability Company registered in the State of Wyoming, United States, with registered office at 30 N Gould St Ste R, Sheridan, WY 82801, United States. Email: contact@flozz.io.