Privacy Policy
Last updated: December 2024
This Privacy Policy explains how Flarereach collects, uses, and protects your personal information
when you use our email marketing and cold outreach services. We are committed to protecting your
privacy and complying with data protection laws including GDPR.
1. Introduction and Scope
Flarereach ("we," "our," or "us") provides email marketing and cold outreach services. This Privacy Policy applies to all users of our website, platform, and services, including customers, email recipients, and visitors.
We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) for EU residents and other relevant privacy regulations.
2. Data Controller Information
Data Controller: Flarereach
Contact Email: [email protected]
Contact Form: Contact Us
For questions about this Privacy Policy or to exercise your data rights, please contact us using the information above. We typically respond within 24 hours.
3. Information We Collect
Information you provide to us:
- Account information (name, email, company, phone number)
- Payment information (processed securely by our payment providers)
- Campaign content and email copy
- Target audience information and lead lists
- Communication preferences and settings
- Support requests and feedback
Information collected automatically:
- Website usage data (pages visited, time spent, clicks)
- Technical information (IP address, browser type, device info)
- Email campaign metrics (opens, clicks, bounces, replies)
- Service performance data (deliverability rates, response times)
- Cookies and similar tracking technologies
Information from third parties:
- Lead data provided by you or your team
- Public information for lead sourcing (with your consent)
- Analytics and marketing data from partners
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract performance: To provide our email marketing services
- Legitimate interests: To improve our services and prevent fraud
- Consent: For marketing communications and lead sourcing
- Legal obligations: To comply with applicable laws and regulations
You have the right to withdraw consent at any time. However, this may affect our ability to provide certain services to you.
5. How We Use Your Information
We use your personal data for the following purposes:
- Service delivery: Setting up and managing email campaigns
- Account management: Processing payments and providing support
- Communication: Sending service updates and responding to inquiries
- Analytics: Improving our platform and services
- Compliance: Meeting legal and regulatory requirements
- Security: Protecting against fraud and unauthorized access
We do not use your data for purposes other than those described in this policy without your explicit consent.
6. Information Sharing and Disclosure
We do not sell, rent, or trade your personal data. We may share your information only in the following circumstances:
- Service providers: With trusted partners who help us deliver our services (payment processors, email infrastructure, analytics)
- Legal requirements: When required by law, court order, or government request
- Business transfers: In connection with a merger, acquisition, or sale of assets
- Your consent: When you explicitly authorize us to share your information
All third-party service providers are bound by confidentiality agreements and data protection obligations consistent with this policy.
7. Email Recipient Data
When you use our services to send emails, we process recipient data on your behalf:
- Your responsibility: You must have legal basis to contact email recipients (consent, legitimate interest, or other lawful grounds)
- Our processing: We process recipient data only to deliver your emails and provide campaign analytics
- Data retention: Recipient data is retained only as long as necessary for service delivery and analytics
- Recipient rights: Email recipients can unsubscribe or request data deletion through our platform
We help you maintain compliance with email marketing laws (CAN-SPAM, GDPR) by providing unsubscribe mechanisms and honoring opt-out requests.
8. Data Security and Protection
We implement comprehensive security measures to protect your personal data:
- Encryption: All data is encrypted in transit and at rest
- Access controls: Strict access controls and authentication measures
- Regular audits: Security assessments and vulnerability testing
- Employee training: Data protection training for all staff
- Incident response: Procedures for handling security incidents
Despite our best efforts, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but we continuously work to improve our protections.
9. Data Retention and Deletion
We retain your personal data only as long as necessary for the purposes outlined in this policy:
- Account data: Retained while your account is active and for 3 years after deactivation for legal compliance
- Campaign data: Retained for 2 years for analytics and service improvement
- Email recipient data: Retained only for active campaigns and deleted upon campaign completion or recipient opt-out
- Payment data: Retained as required by financial regulations
You can request deletion of your data at any time. We will delete your data within 30 days, except where retention is required by law.
10. Your Data Rights
Under GDPR and other privacy laws, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a structured, machine-readable format
- Restriction: Limit how we process your data
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Withdraw consent for consent-based processing
To exercise these rights, contact us at [email protected]. We will respond within 30 days and may request additional information to verify your identity.
11. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience:
- Essential cookies: Required for website functionality and security
- Analytics cookies: Help us understand how you use our platform
- Marketing cookies: Used for advertising and marketing purposes
- Preference cookies: Remember your settings and preferences
You can manage cookie preferences through your browser settings. However, disabling certain cookies may affect website functionality.
12. International Data Transfers
Your data may be transferred to and processed in countries other than your own:
- EU-US transfers: We use EU-approved transfer mechanisms (Standard Contractual Clauses) for data transfers to the US
- Service providers: Some of our service providers are located outside your country of residence
- Adequate protection: We ensure all international transfers provide adequate data protection
We maintain appropriate safeguards for all international data transfers in compliance with applicable data protection laws.
13. Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16.
If you believe we have collected data from a child under 16, please contact us immediately. We will take steps to delete such information promptly.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of material changes by:
- Emailing you directly
- Posting a notice on our website
- Updating the "Last updated" date at the top of this policy
Your continued use of our services after changes become effective constitutes acceptance of the updated policy.
15. Contact Information
If you have questions about this Privacy Policy or want to exercise your data rights, please contact us:
- Privacy Email: [email protected]
- General Support: [email protected]
- Contact Form: Contact Us
- Response Time: We typically respond within 24 hours
You also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.
Flarereach is committed to protecting your privacy and maintaining GDPR compliance in all email marketing and cold outreach activities. Our comprehensive data protection measures ensure your information and your recipients' data are handled securely and responsibly.