Privacy Policy

1. Scope and our role

This policy covers two categories of personal information:

• Site visitor and prospect data - information about people who visit alphamarketflow.com, contact us, or engage with our marketing. For this data, we act as a controller (we determine why and how it's processed).
• Client end-user data - information our clients give us access to so we can deliver services (for example, audience lists, campaign data, or analytics). For this data, we typically act as a processor on the client's instructions, governed by a separate Data Processing Agreement (DPA). This policy describes our general practices; the controlling terms are in each client's DPA.

This policy does not cover the privacy practices of our clients' own websites, products, or services.

2. Information we collect

2.1 Information you give us directly

• Contact and inquiry information - name, business email, company, role, phone number, and the contents of any message you send through our contact forms, our Calendly booking link, or by email.
• Marketing preferences - newsletter signups, event registrations, and similar opt-ins.
• Client onboarding information - for engaged clients, business and billing details, points of contact, and any materials you share with us to scope or deliver work.

2.2 Information collected automatically

When you visit the Site, we (and our service providers) collect:

• Device and connection data - IP address, browser type, operating system, referring URLs, language preferences, and approximate location derived from IP.
• Usage data - pages viewed, time on page, clicks, scroll depth, and similar interaction data (collected via Google Analytics).
• Advertising and conversion data - collected via Meta, LinkedIn, and Google advertising tags for the purpose of measuring campaign performance and website conversions. We do not currently use these tags for active retargeting or lookalike audience building.

These tools rely on standard web technologies (including cookies, pixels, and similar identifiers) that are set automatically when you visit the Site. Most browsers let you block or delete these at any time through your browser settings.

2.3 Information from third parties

We may receive limited information from:

• Analytics and advertising platforms (e.g., aggregate audience and conversion data).
• Referrals or introductions from existing clients, partners, or events.

We do not knowingly collect personal information from children under 16, and the Site is not directed at children.

3. How we use information

We use personal information to:

• Respond to inquiries and provide proposals or quotes.
• Deliver, maintain, and improve our Services and the Site.
• Send marketing communications you've consented to (with opt-out in every message).
• Operate analytics, measure campaign performance, and improve our content.
• Comply with legal obligations, enforce our terms, and protect our rights, our clients, and our users.
• Detect and prevent fraud, abuse, and security incidents.

Legal bases (EU/UK GDPR). Where GDPR applies, we rely on: (a) consent (e.g., marketing emails); (b) contract (delivering services you've requested); (c) legitimate interests (e.g., operating and securing the Site, B2B outreach to relevant business contacts, basic analytics) - balanced against your rights; and (d) legal obligation (e.g., tax, accounting).

4. How we share information

We do not sell personal information. We share it only as described below:

• Service providers / sub-processors that help us operate. These currently include:
  
  • Google Analytics - website analytics
  • Calendly - meeting scheduling
  • Meta, LinkedIn, and Google - advertising measurement and conversion tracking
  • Mailchimp (or our email service provider) - email marketing delivery
  • Hosting, CRM, and IT providers as needed to run the Site
• These providers are bound by contract to use data only on our instructions or as permitted by their own published terms.
• Clients - if you reach out about a specific engagement, we use that information to fulfil it. If you are an end user of a client's service, we handle your data on that client's instructions.
• Professional advisors - lawyers, accountants, auditors, insurers, when reasonably necessary.
• Legal and safety disclosures - when required by law, subpoena, or to protect rights, safety, or property.
• Business transfers - in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

An up-to-date list of our sub-processors is available on request at support@alphamarketflow.com.

5. SMS communications & outreach policy

By providing your phone number to Alpha Market Flow, you consent to receive SMS text messages from us related to our services, consultations, appointments, account updates, marketing communications, and other business-related outreach.

Message frequency may vary depending on your interactions with our company. Standard message and data rates may apply based on your mobile carrier plan.

You may opt out of receiving SMS communications at any time by replying “STOP” to any message. After opting out, you may receive a final confirmation message confirming your unsubscribe request. For assistance, reply “HELP” or contact us directly at support@alphamarketflow.com or 1-720-970-2896.

We do not sell, rent, or share your mobile phone number or SMS consent information with third parties for their marketing purposes. Your information may only be shared with trusted service providers who assist us in operating our communications and business systems.

By using our services or submitting your information through our website, forms, or communication channels, you acknowledge and agree to these SMS communication terms.

6. International data transfers

We are based in the United States and work with clients and providers globally. Personal information may be transferred to, stored in, and processed in countries other than your own, including the United States, the United Kingdom, the European Economic Area, and others.

Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or other lawful transfer mechanisms.

We do not actively target individuals in the EEA or UK, but we recognize that visitors from those regions may interact with the Site, and we honor applicable rights regardless.

7. Data retention

We keep personal information only as long as necessary for the purposes described in this policy, including to meet legal, accounting, or reporting requirements. In general:

• Inquiry and prospect data - deleted or anonymized after 12 months of no contact.
• Client records - retained for the duration of the engagement and for 7 years afterward, or as required by law (tax, accounting, dispute resolution).
• Site analytics - per the retention settings of Google Analytics and similar tools (typically 14–26 months).
• Marketing subscribers - until you unsubscribe, plus a short suppression record so we don't email you again.

When we no longer need information, we delete or anonymize it.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your information ("right to be forgotten").
• Restrict or object to certain processing, including direct marketing.
• Portability - receive your information in a structured, commonly used format.
• Withdraw consent at any time (without affecting prior lawful processing).
• Lodge a complaint with your local data protection authority.

For California residents (CCPA/CPRA), you also have the right to know what categories of personal information we collect, the right to opt out of "sale" or "sharing" of personal information, the right to limit use of sensitive personal information, and the right to non-discrimination for exercising these rights. We do not sell personal information for money. Our use of advertising tags (Meta, LinkedIn, Google) may qualify as "sharing" under California law; to opt out, email support@alphamarketflow.com and we will process your request.

For EEA/UK residents (GDPR/UK GDPR), the rights above apply, and you may contact your supervisory authority if you believe we have not handled your information appropriately.

To exercise any right, email support@alphamarketflow.com. We may need to verify your identity before responding, and we will respond within the timeframe required by applicable law (generally 30–45 days). You may designate an authorized agent to make a request on your behalf.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information - including encryption in transit, access controls, vendor due diligence, and security training. No system is perfectly secure; if we become aware of a breach affecting your information, we will notify you and the relevant authorities as required by law.

10. Third-party links

The Site may link to third-party websites, including our clients' sites, social media platforms, or articles we reference. We are not responsible for the privacy practices of those third parties; please review their policies.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice (e.g., a banner on the Site or an email). Your continued use of the Site after changes take effect means you accept the updated policy.

12. Governing law and contact

This policy and any disputes relating to it are governed by the laws of the State of Delaware, USA, without regard to conflict-of-laws principles, except where overridden by mandatory local law (such as GDPR or CCPA) for users in those jurisdictions.

Alpha Market Flow, LLC 611 South Dupont Highway, Suite 102 Dover, Delaware 19901 United States of America Email: support@alphamarketflow.com

‍