FLIPFLOW PRIVACY POLICY
Effective Date: 1 May 2026
Last Updated: 1 May 2026
At Flipflow Data Analytics, S.L. (“Flipflow”, “we”, “our” or “us”), we are committed to protecting personal data and respecting privacy rights.
This Privacy Policy explains how Flipflow collects, uses, stores, shares and protects personal data when individuals interact with our websites, services, products and communications.
This Privacy Policy should be read together with our:
- Master Subscription Agreement (MSA)
- Data Processing Addendum (DPA)
- Security Addendum
- Cookie Policy
available at:
https://www.flipflow.io/legal
1. DATA CONTROLLER
Flipflow Data Analytics, S.L.
VAT Number: B10950343
Registered Address: Paseo de la Chopera 142, Bajo B, 28100 Alcobendas, Madrid, Spain
Privacy Contact: privacy@flipflow.io
Security Contact: security@flipflow.io
2. WHO THIS POLICY APPLIES TO
This Privacy Policy applies to:
Website Visitors
Individuals visiting Flipflow websites.
Prospects and Leads
Individuals requesting information regarding our Services.
Customers and Users
Individuals accessing or using Flipflow Services on behalf of customers.
Where Flipflow processes personal data on behalf of a customer as processor, such processing is governed by the Data Processing Addendum and the customer’s own privacy notices; this Privacy Policy applies to the processing for which Flipflow acts as controller.
Business Contacts
Representatives of customers, suppliers, partners and other organizations interacting with Flipflow.
3. PERSONAL DATA WE COLLECT
Depending on the nature of the relationship with Flipflow, we may collect:
Contact Information
- Name
- Surname
- Email address
- Phone number
- Company name
- Job title
Account Information
- Usernames
- Account identifiers
- Authentication information
Commercial Information
- Contract information
- Subscription information
- Billing information
- Customer relationship information
Technical Information
- IP address
- Browser type
- Device information
- Operating system
- Usage information
- Logs and telemetry
Communications
- Emails
- Meeting information
- Support requests
- Chat interactions
- Contact form submissions
Analytics Information
- Website usage data
- Navigation behavior
- Engagement metrics
- Product interaction data
4. HOW WE COLLECT PERSONAL DATA
We may collect personal data:
- Directly from you;
- Through website forms;
- Through platform usage;
- Through customer onboarding activities;
- Through support interactions;
- Through cookies and analytics technologies;
- Through publicly available business sources;
- Through third-party service providers acting on your instructions.
5. PUBLICLY AVAILABLE INFORMATION
Flipflow provides market intelligence, retail intelligence and analytics services.
In connection with such services, Flipflow may collect, organize, process and analyze information obtained from publicly available sources.
Such sources may include:
- Retailer websites;
- Marketplaces;
- Public product catalogs;
- Publicly available pricing information;
- Publicly available promotional information;
- Publicly available product availability information;
- Other publicly accessible digital sources.
The information collected relates primarily to products, prices, promotions, availability and market activity. Where such information incidentally includes personal data (for example, the name of a seller on a marketplace), Flipflow processes it on the basis of its legitimate interest in providing market intelligence services (Article 6(1)(f) GDPR), limited to what is relevant for such services.
In accordance with Article 14(5)(b) GDPR, where informing each individual directly would involve a disproportionate effort given the nature of the collection from public sources, Flipflow provides the information required by Article 14 GDPR through this Privacy Policy, which is publicly available. Individuals may exercise their rights, including the right to object, as described in Section 14.
6. PURPOSES OF PROCESSING
| Purpose | Legal Basis |
|---|---|
| Provision of Services | Performance of a Contract |
| Customer Support | Performance of a Contract |
| Account Administration | Performance of a Contract |
| Billing and Invoicing | Performance of a Contract and Legal Obligation |
| Security and Fraud Prevention | Legitimate Interests |
| Product Improvement | Legitimate Interests |
| Analytics | Legitimate Interests and/or Consent where required |
| Marketing Communications | Consent and/or Legitimate Interests (see Section 7) |
| Compliance with Legal Obligations | Legal Obligation |
7. MARKETING COMMUNICATIONS
Flipflow may send communications relating to:
- Products;
- Services;
- Updates;
- Webinars;
- Events;
- Industry content;
- Company announcements.
Where the recipient is an existing customer contact, Flipflow may send electronic commercial communications regarding products or services similar to those previously contracted, on the basis of its legitimate interest and Article 21.2 of Spanish Law 34/2002 (LSSI).
In all other cases, electronic marketing communications are sent on the basis of consent.
Recipients may opt out at any time by:
- Clicking the unsubscribe link included in communications; or
- Contacting privacy@flipflow.io.
Opting out of marketing communications does not affect transactional or service-related communications.
8. ARTIFICIAL INTELLIGENCE FEATURES
Certain Services may include AI Features such as:
- Copilots;
- Assistants;
- Recommendation systems;
- Forecasting tools;
- Generative AI capabilities;
- Predictive analytics.
Where AI Features are used:
- Customer Personal Data is not used to train any artificial intelligence or machine learning models, whether publicly available or internal.
- AI-generated outputs may contain inaccuracies, assumptions or omissions.
- AI Features may generate similar outputs for different users.
- Users remain responsible for independently reviewing and validating outputs before relying upon them.
- AI Features are intended as decision-support tools and not substitutes for professional judgment.
9. SHARING OF PERSONAL DATA
Flipflow may share personal data with:
- Cloud infrastructure providers;
- Hosting providers;
- Analytics providers;
- Communication providers;
- Support providers;
- Payment and invoicing providers;
- Professional advisors;
- Regulators and authorities where required by law.
Flipflow does not sell personal data.
10. SUBPROCESSORS
Flipflow may use subprocessors to support the delivery of Services.
A current list of subprocessors is available at:
https://www.flipflow.io/legal/subprocessors
The list may be updated periodically as our infrastructure and service providers evolve, in accordance with the notification mechanism described in the Subprocessor List and the Data Processing Addendum.
11. INTERNATIONAL TRANSFERS
Where personal data is transferred outside the European Economic Area, the United Kingdom or Switzerland, Flipflow implements appropriate safeguards in accordance with applicable Data Protection Laws.
Such safeguards may include:
- Adequacy Decisions, including the EU-U.S. Data Privacy Framework where the recipient holds a valid certification;
- Standard Contractual Clauses (SCCs), together with the UK Addendum and Swiss adaptations where applicable;
- Other lawful transfer mechanisms.
Additional information regarding the safeguards applied to specific transfers may be requested by contacting privacy@flipflow.io.
12. DATA RETENTION
Personal data is retained only for as long as necessary to:
- Provide Services;
- Maintain customer relationships;
- Comply with legal obligations;
- Resolve disputes;
- Enforce contractual rights.
As a general guide, Flipflow applies the following indicative retention periods:
| Category | Indicative Retention Period |
|---|---|
| Billing and invoicing records | 6 years from issuance (Article 30 of the Spanish Commercial Code) |
| Contract and account data | Duration of the contractual relationship plus applicable limitation periods (generally up to 5 years, Article 1964 of the Spanish Civil Code) |
| Support records | Duration of the contractual relationship plus 2 years |
| Marketing and lead data | Until opt-out, objection or 24 months of inactivity |
| Technical logs and telemetry | Up to 12 months, unless required for security investigations |
Specific retention periods may vary depending on the nature of the relationship and applicable legal requirements.
13. SECURITY
Flipflow maintains administrative, organizational and technical measures designed to protect personal data.
Additional information regarding our security practices is available at:
https://www.flipflow.io/legal/security
14. YOUR RIGHTS
Subject to applicable law, individuals may have the right to:
- Access personal data;
- Rectify inaccurate data;
- Erase personal data;
- Restrict processing;
- Object to processing;
- Request portability;
- Withdraw consent.
Requests may be submitted to:
privacy@flipflow.io
Individuals may also lodge complaints with the applicable supervisory authority.
15. SPECIFIC NOTICE FOR PROFESSIONAL CONTACTS
We inform you that your personal data is processed by FLIPFLOW DATA ANALYTICS S.L. for the purpose of managing our professional relationship and providing the requested services, on the legal basis of the performance of a contract or the application of pre-contractual measures.
Where you are a contact person of a customer, supplier or partner entity, the processing of your business contact details is based on Flipflow’s legitimate interest in managing the relationship with the entity you represent (Article 19 LOPDGDD).
Commercial communications regarding products and services similar to those contracted may be sent through electronic means on the basis of Flipflow’s legitimate interest and Article 21.2 LSSI; you may object at any time and free of charge through the unsubscribe link or by contacting privacy@flipflow.io. Any other commercial communications require your consent.
Your data will be retained for as long as necessary to comply with our legal and contractual obligations, in accordance with Section 12.
You may exercise your rights of access, rectification, erasure, restriction of processing, objection and data portability by sending a written request to our registered office or by contacting:
privacy@flipflow.io
and providing sufficient proof of identity.
You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos – AEPD).
16. CHANGES TO THIS PRIVACY POLICY
Flipflow may update this Privacy Policy from time to time to reflect:
- Legal changes;
- Technological developments;
- Operational changes;
- Product updates.
Material changes affecting the processing of personal data may be communicated through the website or other appropriate channels.
The current version shall always be available at:
https://www.flipflow.io/legal/privacy
Contact Information
Privacy: privacy@flipflow.io
Security: security@flipflow.io
Flipflow Data Analytics, S.L.
Paseo de la Chopera 142, Bajo B
28100 Alcobendas, Madrid, Spain
VAT Number: B10950343