Privacy Policy

1. Data controller

The party responsible for data processing on this website is:

2. What data we collect

Automatically collected data

When you visit our website, we automatically collect:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL
• Amount of data transferred

Data when you contact us

If you contact us by form or email, we store your name, email address, the content of your message and the time of contact.

Data on sign-up

When you register for Treatflow, we collect your name, email address, studio information and chosen plan.

3. Purpose of processing

• Providing and improving our website and services
• Handling requests and customer support
• Performing our contract with you
• Technical administration and IT security
• Complying with legal obligations

4. Legal basis

We process your data under the following legal bases of the GDPR:

• Art. 6(1)(a): consent
• Art. 6(1)(b): performance of a contract
• Art. 6(1)(c): legal obligation
• Art. 6(1)(f): legitimate interests

5. Storage and deletion

We keep your data only as long as necessary for the relevant purpose:

• Website logs: 30 days
• Contact requests: 2 years after handling
• Customer data: until termination of the contract plus statutory retention periods
• Invoice data: 7 years (statutory tax retention)

6. Data security

• SSL/TLS encryption for all data transfers
• Secure servers in certified EU data centres
• Regular security updates
• Access restrictions and authentication
• Regular backups

7. Your rights

You have the following rights regarding your personal data:

• Access: request information about the data we process
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data
• Restriction: request restriction of processing
• Portability: receive your data in a structured format
• Objection: object to processing
• Complaint: lodge a complaint with a supervisory authority

To exercise your rights, contact us at hello@treatflow.io.

8. Cookies

Our website uses cookies to ensure functionality and improve your experience. You can disable cookies in your browser settings, although this may affect the functionality of the website.

9. Third-party services

We use the following third-party services:

• HubSpot: contact forms and CRM (USA)
• Google Analytics: anonymised website analytics (only with consent)
• Meta Pixel: marketing measurement (only with consent)
• Hosting provider: delivery of the website

These providers process data only on our behalf and are contractually bound to comply with data protection law.

10. Changes to this policy

We may update this privacy policy to reflect legal requirements or changes to our services. The current version is always available on this page.

Last updated: July 2026