This policy explains what information ForceFlow ("we", "us") collects, why we collect it, who we share it with, and how you can ask us to change or delete it. It covers both visitors to forceflow.co and business contacts who receive our outreach emails.
1. Who we are
ForceFlow is a business-to-business lead generation and cold email agency. We are the controller of the information described in this policy. You can reach us at any time at jeremy@forceflow.co.
2. Information we collect from website visitors
Information you give us
If you book a call or contact us, we receive the details you submit — typically your name, email address, company, and anything you write in the booking form.
Information collected automatically
- Standard technical data — IP address, browser type, device type, pages viewed, time on page, and the site that referred you.
- Cookies and similar technologies — set by us and by the third-party services listed in section 4, for functionality and analytics.
Business visitor identification
We use a third-party visitor identification service (GetLeads) on this website. It places a script on our pages that collects technical and behavioural signals from your visit and matches them against third-party business databases. Where a match is found, we may be shown business contact information associated with your visit — such as your name, job title, employer, company domain, and business email address — even if you never filled in a form.
We use this solely to identify companies and business people who may be interested in our services, and to follow up with them. We do not use it to build profiles of consumers or to identify people in a personal capacity.
If you do not want to be identified this way, email jeremy@forceflow.co and we will delete any record associated with you and suppress you from future identification and outreach. You can also block it by using a browser or extension that blocks third-party tracking scripts.
3. Information we collect about business contacts
As part of our core service, we build lists of business contacts for outreach campaigns — ours and our clients'. This data consists of business contact information: name, job title, employer, company website, business email address, and publicly available company details such as industry, size, and location.
We obtain it from commercial data providers, business data enrichment and email verification services, and publicly available sources such as company websites and public professional profiles. We do not knowingly collect personal (non-work) email addresses, home addresses, or any special category data.
Where we rely on legitimate interests to process this data for direct B2B marketing, you have an absolute right to object — see section 6.
4. Third-party services we use
These providers process data on our behalf or receive data as a result of your visit. Each has its own privacy policy governing what it does with that data.
- Cloudflare — website hosting and content delivery.
- GetLeads — website visitor identification (see section 2).
- Calendly — call booking; receives the details you enter when scheduling.
- Wistia — video hosting and video engagement analytics.
- Google Fonts — web font delivery.
- Smartlead — email campaign delivery and reply tracking.
- Supabase — the database where we store lead and campaign records.
We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.
5. How long we keep it
We keep website enquiry and booking data for as long as we are in contact with you and for a reasonable period afterwards. We keep business contact data for as long as it remains accurate and relevant to outreach, and we remove records on request or when a contact opts out. Suppression records — the list of people who have asked not to be contacted — are kept indefinitely, because that is the only way to guarantee we do not contact you again.
6. Your rights and how to use them
Depending on where you live, you may have the right to access the information we hold about you, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and opt out of direct marketing. Under UK/EU GDPR you have an unconditional right to object to direct marketing; under US state privacy laws such as the CCPA/CPRA you have rights of access, deletion, correction, and to opt out of sale or sharing (we do neither).
To exercise any of these, email jeremy@forceflow.co. We will respond within the time frame required by the applicable law. We will not discriminate against you for exercising a right.
Every marketing email we send also includes a direct unsubscribe option, which removes you from all future campaigns.
7. Security
We use access-controlled systems, encrypted connections, and credential management practices intended to protect the data we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. International transfers
Our providers may store and process data in countries other than your own, including the United States. Where data is transferred out of the UK or EEA, we rely on our providers' transfer mechanisms, such as Standard Contractual Clauses.
9. Children
This site and our services are intended for businesses and are not directed at children. We do not knowingly collect information from anyone under 16.
10. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page shows when it last changed. Material changes will be reflected here before they take effect.
11. Contact
Questions, requests, or complaints about this policy or about how we handle your information: jeremy@forceflow.co.