Privacy notice

FlowAppeal.com, Sweden, is responsible for your data (the controller). For any question about it, or to use your rights below, write to benjamin@flowappeal.com.

• Your name, email address and phone number.
• What you'd like help with, and the meeting time you pick.
• Your answer to whether you're 18 or older.
• Whether you agreed to a confirmation on WhatsApp, with the exact wording you agreed to and when.
• Your browser's time zone, so the times in your emails are your local times.
• A one-way scrambled code made from your IP address (not the address itself), to limit how many bookings one connection can make.
• For the booking, the meeting link and whether the confirmations reached you.

• To book and hold the meeting you asked for: the calendar invitation, the video link and the confirmation email. This is a step you asked us to take before any agreement (GDPR article 6(1)(b)). Without your name, email and phone number we can't book it.
• To confirm the meeting on WhatsApp, only if you ticked the box: your consent (article 6(1)(a)). You can withdraw it at any time by writing to benjamin@flowappeal.com; that doesn't affect what was sent before.
• To keep the form safe from abuse and spam, and to only book meetings with adults: our legitimate interest in running a secure booking service (article 6(1)(f)).

We don't sell your data, use it for advertising, or make automated decisions about you.

Your booking is deleted automatically 12 months after the meeting date. If you ask us to delete it sooner, we delete the booking and its calendar event straight away. The emails about your meeting are in FlowAppeal.com's own mailbox; we delete those on request too. Our hosting provider keeps technical logs, which include IP addresses, for a short time for security.

These companies handle your data only on our instructions, under data processing agreements:

• FlowAppeal runs and hosts this booking system for us.
• Vercel (hosting the website; bookings are handled in an EU data center) and Supabase (storing the bookings, in the EU).
• Google (our calendar, video meetings and email), which creates the invitation and sends the confirmation.
• Resend, which sends us, not you, an email about each new booking.
• Cloudflare (Turnstile), which checks that the form is filled in by a person, using your IP address and browser details.
• Meta (WhatsApp), which delivers the WhatsApp confirmation if you asked for one.

Some of these companies are based in the United States. Where your data leaves the EU, their agreements with us include the EU's safeguards for such transfers.

You can ask to see the data we hold about you, have it corrected or deleted, restrict or object to how we use it, or receive a copy to take elsewhere. Write to benjamin@flowappeal.com; we answer within one month. If you think we handle your data wrongly, you can complain to the data protection authority in your country.