top of page

Privacy Policy

Last Updated: October 2025

Welcome to SD Box Flow (“we,” “our,” “us”). This Privacy Policy describes how we collect, use, store, share, and protect the personal information of visitors and users (“you”, “your”) of our website www.sdboxflow.com (the “Site”) and our associated services (the “Services”). By using our Site or Services, you agree to this Policy.

1. Information We Collect

We may collect various types of information from you, including:

1. Information We Collect

When you interact with our Site or Services, we may ask you to provide certain personal data, such as:

  • Name

  • Email address

  • Phone number

  • Postal address

  • Payment/billing information (e.g. credit card, bank account)

  • Date of birth / age

  • Health or fitness details or disclosures (e.g. injuries, medical conditions, consent for physical activity)

  • Other information you voluntarily supply (feedback, messages, images)

1.2 Automatically Collected / Usage Data

When you visit or use the Site, we or our service providers may automatically collect:

  • IP address

  • Browser type, version, and operating system

  • Device type, screen resolution

  • Referring URL, pages you visit, date/time stamps

  • Your interaction patterns (clicks, navigation, scroll, time spent)

  • Geolocation data (based on IP)

  • Cookies, pixel tags, web beacons, and similar tracking technologies

2. How We Use Your Information

We may use your information for the following purposes:

  • To provide, operate, maintain, and improve our Site and Services

  • To process and fulfill bookings, payments, refunds, or credits

  • To authenticate and manage your user account

  • To send you confirmations, receipts, updates, customer support messages

  • To send promotional materials, newsletters, offers, or marketing (with your consent where required)

  • To analyze usage trends, monitor performance, and improve user experience

  • To detect, prevent, and address technical issues, fraud, or security incidents

  • To comply with legal obligations, enforce our Terms & Conditions, or defend our rights

3. Legal Basis for Processing (If Applicable)

If you are in a jurisdiction that requires a legal basis (e.g. under the GDPR), our legal bases for processing your personal data may include:

  • Your consent (for marketing, newsletters, or health disclosures)

  • Performance of a contract (to deliver the Services you request)

  • Legal obligation (to comply with applicable laws)

  • Legitimate interests (e.g. improving our business, fraud prevention), provided these do not override your rights

4. Cookies & Tracking Technologies

We use cookies, web beacons, local storage, and similar technologies to:

  • Ensure the site functions properly

  • Remember your preferences

  • Analyze usage and site performance

  • Serve relevant marketing or advertising

5. Disclosure & Sharing of Information

We may share your data with:

  • Service Providers / Contractors — Entities that help us with payment processing, hosting, analytics, email delivery, marketing, customer support, etc.

  • Affiliates — For internal operations or consolidated services

  • Legal Authorities — If required by law, court order, or to respond to legal claims or protect rights

  • Business Transfers — In the event of a merger, acquisition, or asset sale, your data may be transferred (subject to confidentiality)

We do not sell your personal data to unaffiliated third parties for their direct marketing purposes without your consent (unless required by law).

6. Data Retention

We retain your personal information for as long as is necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or allowed by law. After that, we securely delete or anonymize your data.

​

We may keep aggregated or de-identified data indefinitely for analytic or historical purposes.

7. Security

We implement reasonable technical, administrative, and organizational safeguards to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage can be guaranteed fully secure, so we cannot warrant absolute security.

If a data breach occurs, we will comply with any legal obligations to notify affected individuals or regulatory bodies.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you

  • Correction: Request correction of inaccurate or incomplete data

  • Deletion (“right to be forgotten”): Request deletion of your personal data

  • Restriction or objection: Request limitation of processing or object to certain uses

  • Portability: Receive your data in a machine-readable format

  • Withdraw consent: If processing is based on your consent, you may withdraw it

  • Opt-out: Of marketing communications

To exercise these rights, contact us (see Section 10). We may ask you to verify your identity before acting on a request.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will:

  • Post the updated version on this page

  • Update the “Last updated” date

  • Update the “Last updated” date

9. Contact Us

If you have questions, concerns, or requests about this Policy, or wish to exercise your rights, please contact:

📍 SD Box Flow
500 Terry Francine Street, San Francisco, CA 94158
 

📧 info@sdboxflow.com

📞 123-456-7890

bottom of page