Privacy Policy

Last Updated: October 2025

Welcome to SD Box Flow (“we,” “our,” “us”). This Privacy Policy describes how we collect, use, store, share, and protect the personal information of visitors and users (“you”, “your”) of our website www.sdboxflow.com (the “Site”) and our associated services (the “Services”). By using our Site or Services, you agree to this Policy.

1. Information We Collect

We may collect various types of information from you, including:

1.1 Information We Collect

When you interact with our Site or Services, we may ask you to provide certain personal data, such as:

Name
Email address
Phone number
Postal address
Payment/billing information (e.g. credit card, bank account)
Date of birth / age
Health or fitness details or disclosures (e.g. injuries, medical conditions, consent for physical activity)
Other information you voluntarily supply (feedback, messages, images)

1.2 Automatically Collected / Usage Data

When you visit or use the Site, we or our service providers may automatically collect:

IP address
Browser type, version, and operating system
Device type, screen resolution
Referring URL, pages you visit, date/time stamps
Your interaction patterns (clicks, navigation, scroll, time spent)
Geolocation data (based on IP)
Cookies, pixel tags, web beacons, and similar tracking technologies

2. How We Use Your Information

We may use your information for the following purposes:

To provide, operate, maintain, and improve our Site and Services
To process and fulfill bookings, payments, refunds, or credits
To authenticate and manage your user account
To send you confirmations, receipts, updates, customer support messages
To send promotional materials, newsletters, offers, or marketing (with your consent where required)
To analyze usage trends, monitor performance, and improve user experience
To detect, prevent, and address technical issues, fraud, or security incidents
To comply with legal obligations, enforce our Terms & Conditions, or defend our rights

3. Legal Basis for Processing (If Applicable)

If you are in a jurisdiction that requires a legal basis (e.g. under the GDPR), our legal bases for processing your personal data may include:

Your consent (for marketing, newsletters, or health disclosures)
Performance of a contract (to deliver the Services you request)
Legal obligation (to comply with applicable laws)
Legitimate interests (e.g. improving our business, fraud prevention), provided these do not override your rights

4. Cookies & Tracking Technologies

We use cookies, web beacons, local storage, and similar technologies to:

Ensure the site functions properly
Remember your preferences
Analyze usage and site performance
Serve relevant marketing or advertising

5. Disclosure & Sharing of Information

We may share your data with:

Service Providers / Contractors — Entities that help us with payment processing, hosting, analytics, email delivery, marketing, customer support, etc.
Affiliates — For internal operations or consolidated services
Legal Authorities — If required by law, court order, or to respond to legal claims or protect rights
Business Transfers — In the event of a merger, acquisition, or asset sale, your data may be transferred (subject to confidentiality)

We do not sell your personal data to unaffiliated third parties for their direct marketing purposes without your consent (unless required by law).

6. Data Retention

We retain your personal information for as long as is necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or allowed by law. After that, we securely delete or anonymize your data.

We may keep aggregated or de-identified data indefinitely for analytic or historical purposes.

7. Security

We implement reasonable technical, administrative, and organizational safeguards to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage can be guaranteed fully secure, so we cannot warrant absolute security.

If a data breach occurs, we will comply with any legal obligations to notify affected individuals or regulatory bodies.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion (“right to be forgotten”): Request deletion of your personal data
Restriction or objection: Request limitation of processing or object to certain uses
Portability: Receive your data in a machine-readable format
Withdraw consent: If processing is based on your consent, you may withdraw it
Opt-out: Of marketing communications

To exercise these rights, contact us (see Section 10). We may ask you to verify your identity before acting on a request.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will:

Post the updated version on this page
Update the “Last updated” date
Update the “Last updated” date

10. Contact Us

If you have questions, concerns, or requests about this Policy, or wish to exercise your rights, please contact:

📍 SD Box Flow
500 Terry Francine Street, San Francisco, CA 94158

📧 info@sdboxflow.com
📞 123-456-7890