Privacy Policy

Effective Date: September 22, 2025

Applies to: whiteboston.com, getflowbooked.com, and flowbooked.com (together, the “Sites”), operated by WhiteBoston LLC (“WhiteBoston,” “we,” “us,” or “our”). FlowBooked is a brand and product of WhiteBoston LLC.

1. Introduction

We operate solely within the United States. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Sites and services. By using the Sites, you agree to this Policy. We respect your privacy and collect only what we need to schedule calls, deliver services, communicate with you, and improve our Sites.

2. Information We Collect

Information You Provide

• Contact details: name, email address, phone number.

• Business details: company or brokerage name, booking link or dashboard URL, relevant notes.

• Form responses: primary goal, current tools, scheduling preferences, intake answers.

• Communications: messages you send to us and any files you upload.

Information Collected Automatically

• Usage data: pages visited, timestamps, IP address, device/browser type.

• Third-party widget data: when you schedule a call, GoHighLevel (GHL) Meetings collects booking details and related metadata.

3. How We Use Your Information

We use your information to:

• Schedule and confirm calls, and deliver lead magnets or materials you request.

• Send confirmations, reminders, and follow-ups related to bookings and services.

• Communicate about our products, if you’ve opted in.

• Analyze and improve our Sites and detect/prevent abuse or fraud.

• Comply with legal obligations and enforce our terms.

If you opt in to receive SMS/text messages, we use your mobile number to send confirmations, reminders, and service-related messages. Message frequency may vary; standard message/data rates may apply.

For CRM users:
If you use FlowBooked CRM, the data you upload (such as client leads or contacts) remains yours. We do not access, sell, or use customer data entered into your FlowBooked account for our own marketing or analytics purposes.

4. Residents’ Rights (U.S.)

You may request access to, correction of, or deletion of your personal information by emailing [email protected].

California Residents (CCPA/CPRA)

Categories collected: identifiers (name, email, phone); commercial information (bookings, requested services); internet activity (basic usage data); professional information (business name). We do not collect sensitive personal information.

Sources & Purposes: as described in Sections 2–3.
Disclosures: to service providers listed below.
Sale/Share: we do not sell personal information and do not share it for cross-context behavioral advertising.
Retention: see “Data Retention.”

To exercise your rights, email [email protected] with “CCPA Request” in the subject line. We may request verification information and proof of authorization if an agent submits the request.

We will not discriminate against you for exercising your rights.

5. Analytics & Tracking

We do not use third-party analytics or behavioral tracking cookies.
Data collection is limited to basic usage information required for site operation and handled via GoHighLevel (GHL). We do not run retargeting ads or cross-site tracking.

6. Third Parties & Integrations

We disclose limited information to trusted service providers under contracts requiring them to protect your data and use it only to provide services to us:

• GoHighLevel (GHL) — hosting, forms, CRM, email/SMS, scheduling, and infrastructure.

• Stripe — secure payment processing. Card information is processed directly by Stripe; we do not store payment details.

• Hosting (via GHL) — the Sites and CRM systems are hosted on GoHighLevel’s secure U.S.-based servers.

All third-party vendors comply with applicable U.S. data protection standards, including SOC 2 and PCI DSS where applicable. If you opt in to receive SMS messages, no mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Sharing is limited to service providers necessary to deliver messaging services.

7. Sharing & Disclosures

We do not sell or rent your personal data.
We may disclose information:

• To service providers (as listed above).

• With your consent.

• To comply with law, legal processes, or enforce our agreements.

• To protect the rights, property, or safety of users, the public, or WhiteBoston LLC.

• In the event of a merger, acquisition, or asset sale, affected users will be notified as required by law.

8. Data Retention

• Contact & booking info: retained as long as necessary to provide services, typically up to 2 years after your last interaction.

• CRM data: retained for the duration of your account and deleted within 30 days of cancellation or upon written request.

• Logs: retained for up to 24 months.

9. Security

We implement reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we process. If a security incident occurs and notification is legally required, we will notify affected individuals promptly.

10. Your Rights & How to Contact Us

WhiteBoston LLC
Email: [email protected]
Website: whiteboston.com

For FlowBooked-specific inquiries:
Email: [email protected]

11. Location of Processing

We operate entirely within the United States.
Personal data is processed and stored primarily in the U.S. by WhiteBoston LLC and our U.S.-based service providers.

Data Controller vs. Processor:
When you use FlowBooked to manage client data, you act as the data controller. WhiteBoston LLC acts as your data processor, handling data only as necessary to deliver services according to your instructions.

12. Children

Our services are not directed to children under 13. We do not knowingly collect data from children. If you believe a child has submitted data, contact us to request deletion.

13. Do Not Track

Some browsers transmit “Do Not Track” signals.
Our Sites do not currently respond to these signals, but you can manage cookies and trackers through your browser settings.

14. Public Areas & User Content

If you post or submit content publicly (e.g., comments or messages), it may be read and used by others. Avoid sharing information you do not wish to disclose publicly.

15. Third-Party Links & Embeds

Our Sites may contain links to third-party websites or embedded content (e.g., videos). We are not responsible for third-party privacy practices and recommend reviewing their privacy policies.

16. Job Applicants

If you apply for a role with WhiteBoston LLC, we will use your submitted information to evaluate your application in compliance with applicable laws.

17. Changes to This Policy

We may update this Policy periodically. Material changes will be highlighted on this page for at least 30 days following the effective date.

Last Updated: September 22, 2025