Privacy Policy

This Privacy Policy explains how Flexauliving ("we," "us," or "our") collects, uses, discloses, and protects personal data when you visit https://flexauliving.world, submit forms, or engage with our workplace education and coaching services. We provide corporate learning programs only—not medical or mental health treatment. We are committed to transparency and compliance with the General Data Protection Regulation (GDPR), the UK GDPR where applicable, and relevant United States privacy laws including state consumer privacy statutes.

1. Data controller

The data controller responsible for your personal data is:

Flexauliving
151 W 34th St, New York, NY 10001, USA
Phone: +1 212-695-4400
Email: touch@flexauliving.world

For data protection inquiries, contact us using the details above. We will respond within the timeframes required by applicable law, generally within thirty days for GDPR requests.

2. Scope of this policy

This policy applies to personal data processed through our website, contact forms, email correspondence, program enrollment for corporate clients, analytics tools (where consented), and marketing communications (where consented). It does not cover third-party websites linked from our pages; those sites maintain independent policies.

3. Categories of personal data we collect

3.1 Data you provide directly

• Identity and contact data: name, business email, phone number, job title, and organization name when you submit our contact form or sign agreements.
• Communication content: messages you send us, meeting notes, and support tickets.
• Consent records: timestamps and choices related to cookies, marketing, and GDPR checkbox confirmations on forms.

3.2 Data collected automatically

• Technical data: IP address, browser type, device identifiers, operating system, and referring URLs.
• Usage data: pages viewed, time on page, scroll depth, and interaction events when analytics cookies are enabled.
• Cookie identifiers as described in our Cookie Policy.

3.3 Data from corporate clients

When organizations purchase programs, we may process employee participation lists, attendance records, and feedback surveys under instructions from the client. In such cases, the client may act as an independent controller for employee data; we process it as a processor according to contractual data processing terms.

4. Purposes and legal bases for processing

We process personal data only where a lawful basis exists:

• Contract performance: To respond to inquiries, deliver coaching programs, issue invoices, and manage client relationships.
• Legitimate interests: To secure our website, prevent fraud, improve services, and conduct B2B marketing to professionals who have not opted out, balanced against your rights.
• Consent: For non-essential cookies, optional newsletters, and certain marketing messages. You may withdraw consent at any time without affecting prior lawful processing.
• Legal obligation: To retain records for tax, accounting, and regulatory compliance.

5. How we use your data

Specific uses include:

• Responding to contact form submissions and scheduling discovery calls.
• Preparing proposals, statements of work, and educational program materials tailored to client needs.
• Facilitating live and remote coaching sessions, including access credentials for learning platforms.
• Measuring website performance and campaign effectiveness when you consent to analytics and marketing cookies.
• Enforcing our Terms of Use and protecting intellectual property.

We do not use website data to make automated decisions that produce legal or similarly significant effects on individuals without human review.

6. Data sharing and recipients

We may share personal data with:

• Service providers: hosting, email delivery, customer relationship management, video conferencing, payment processors, and analytics vendors under written agreements requiring appropriate safeguards.
• Professional advisers: lawyers, accountants, and insurers bound by confidentiality duties.
• Authorities: when required by law, court order, or to protect rights, safety, and property.
• Business transfers: in connection with mergers or acquisitions, subject to notice where legally required.

We do not sell personal data as defined under the California Consumer Privacy Act (CCPA) as amended by the CPRA.

7. International transfers

Our operations are based in the United States. If you access our services from the European Economic Area or United Kingdom, your data may be transferred to the U.S. We rely on Standard Contractual Clauses approved by the European Commission, supplementary measures where appropriate, and vendor certifications to ensure adequate protection.

8. Data retention

We retain personal data only as long as necessary for the purposes described:

• Contact inquiries: up to twenty-four months after the last interaction unless a client relationship continues.
• Contract and billing records: seven years from the end of the fiscal year in which the transaction occurred, unless longer retention is required by law.
• Cookie consent logs: twelve months from the date of consent or withdrawal.
• Analytics data: thirteen months from collection when using typical analytics configurations.
• Program participation records: duration of the client contract plus twenty-four months for quality review and dispute resolution.

When retention periods expire, we delete or anonymize data using secure methods.

9. Security measures

We implement administrative, technical, and organizational safeguards including HTTPS encryption for data in transit, access controls limited to personnel with business need, password policies, vendor security reviews, and periodic assessment of processing activities. No method of transmission over the Internet is completely secure; we encourage clients to use strong credentials and report suspected incidents promptly.

10. Your rights under GDPR and similar laws

Depending on your location, you may have the right to:

• Access a copy of personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase data when processing is no longer necessary or consent is withdrawn, subject to legal exceptions.
• Restrict processing in certain circumstances.
• Data portability for information provided under consent or contract in structured, machine-readable format.
• Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent at any time for consent-based processing.
• Lodge a complaint with a supervisory authority, such as your local EU data protection authority.

U.S. residents in applicable states may have additional rights to know, delete, correct, and opt out of certain processing. Submit requests to touch@flexauliving.world with sufficient information to verify identity. We do not discriminate against individuals exercising privacy rights.

11. Children

Our services target organizations and adult professionals. We do not knowingly collect data from individuals under sixteen. If you believe a minor submitted data, contact us for deletion.

12. Third-party links

Our site may link to external resources. We are not responsible for their privacy practices. Review their policies before providing personal data.

13. Changes to this policy

We may update this Privacy Policy to reflect legal, technical, or business developments. Material changes will be indicated by updating the date at the top of this page. Continued use after changes constitutes acknowledgment where permitted by law.

14. Contact

For questions about this Privacy Policy or to exercise your rights, contact Flexauliving at the address, phone, or email listed in Section 1.