Effective date: September 22, 2025

Applies to: whiteboston.com, getflowbooked.com, and flowbooked.com (together, the “Sites”), which are operated by WhiteBoston LLC (“WhiteBoston,” “we,” “us,” or “our”). FlowBooked is a brand/product of WhiteBoston LLC.

Introduction

We operate solely within the United States. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Sites and our services. By using the Sites, you agree to this Policy.

Summary

• We collect only what we need to schedule calls, deliver services, communicate with you, and improve the Sites.

• We use GoHighLevel (GHL) for forms/CRM/email/SMS/scheduling and Stripe for payments (via GHL). We do not store card numbers.

• We do not sell personal information and we do not share personal information for cross-context behavioral advertising (CCPA/CPRA).

1. Information We Collect

Information you provide

• Contact details: name, email address, phone number.

• Business details: company/studio name, booking link or dashboard URL, relevant notes.

• Form responses: primary goal, current tools, scheduling preferences, intake answers.

• Communications: messages you send to us and any files you upload.
  

Information collected automatically

• Usage data: pages visited, timestamps, IP address, device/browser type.

• Third-party widget data: when you schedule a call, GHL Meetings collects booking details and related metadata.

2. How We Use Your Information

• To schedule and confirm calls and deliver lead magnets, resources, or materials you request.

• To send confirmations, reminders, and follow-ups for bookings; and to communicate about our services. Marketing communications are sent only if you opt in.

• To analyze and improve the Sites and services and to detect/prevent abuse and fraud.

• To comply with legal obligations and enforce our terms.

• If you opt in to receive SMS/text messages, we use your mobile number to send confirmations, reminders, and other communications related to your bookings. Message frequency may vary, and message/data rates may apply.

3. Residents’ Rights (U.S.)

If you are a resident of the United States, you may request access to, correction of, or deletion of personal information we hold about you. To exercise rights, contact [email protected].

California residents (CCPA/CPRA)

• Categories collected: identifiers (name, email, phone); commercial information (bookings, requested services); internet activity (basic usage data); professional info (business name). We do not collect sensitive personal information.

• Purposes & sources: as described in Sections 1–2 above.

• Disclosures: to service providers listed below.

• Sale/Share: we do not sell personal information and do not share it for cross-context behavioral advertising. We do not knowingly sell or share personal information of consumers under 16 years of age.

• Retention: as described in “Data Retention.”

• How to exercise rights: email [email protected] with “CCPA Request” in the subject.

• Verification & Authorized Agents: we may request information to verify your identity. You may authorize an agent to submit a request; we may require proof of authorization and your identity.

• Appeal process: if we deny your request, you may reply with “Privacy Appeal” in the subject; we will review and respond as required by law.

• Non-discrimination: we will not discriminate against you for exercising your privacy rights.

4. Analytics & Tracking

We do not use third-party analytics or tracking cookies on our Sites. Any data collected is limited to basic usage data necessary for site operation and is handled through our service providers (e.g., GHL for scheduling forms). We do not run retargeting ads or behavioral tracking.

5. Third Parties & Integrations

We disclose information to trusted service providers under contracts that require them to protect your data and use it only to provide services to us:

• GoHighLevel (GHL) — forms, CRM, email/SMS, and scheduling (including GHL Meetings).

• Stripe — payment processing. Stripe processes card information directly; we do not store card numbers.

• Hosting/infrastructure — to operate the Sites securely and reliably.

If you opt in to receive SMS/text messages, we use your mobile number to send confirmations, reminders, and other communications related to your bookings. Message frequency may vary, and message/data rates may apply. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the text message services.

6. Sharing & Disclosures

We do not sell your personal data. We may disclose information when necessary to provide services, with your consent, to comply with law or legal processes, or to protect rights and safety. In the event of a business transfer (e.g., merger, acquisition, asset sale), affected users will be notified as required by law.

7. Data Retention

• Contact & booking info: retained while needed to provide services and typically up to 2 years after your last interaction, unless a longer period is required by law or to resolve disputes.

• Logs: retained up to 24 months.

8. Security

We implement reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we process. If a security incident occurs and notification is required by law, we will notify affected individuals and, where applicable, regulators.

9. Your Rights & How to Contact Us

WhiteBoston LLC
Email: support@whiteboston.com
Website: whiteboston.com

10. Location of Processing

We operate in the United States. Personal data is processed and stored primarily in the U.S. by us and our U.S.-based service providers. If any processing occurs outside the U.S., we will ensure appropriate safeguards are in place.

11. Children

Our services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have collected such data, contact us to request deletion.

12. Do Not Track

Some browsers transmit “Do Not Track” signals. Our Sites do not currently respond to these signals. You can use your browser settings to control cookies and trackers.

13. Public Areas & User Content

Some parts of our Sites may allow you to post or submit content (e.g., blog comments or messages in a site chat). Information you choose to make public may be read, collected, and used by others. Avoid posting information you do not wish to disclose publicly.

14. Third-Party Links & Embeds

Our Sites may contain links to third-party websites or include embedded content (e.g., videos). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

15. Job Applicants

If you submit a resume or apply for a role with WhiteBoston LLC, we will use the information you provide (e.g., contact details, resume/CV) to evaluate and manage your application and as otherwise permitted by law.

16. Changes to This Policy

We may update this Policy from time to time. We will post changes here with the effective date. Material changes will be highlighted for at least 30 days.

Last updated: September 22, 2025