Privacy Policy

Last updated: 27.12.2025

1. Controller

Leadflow Consulting – FZCO
IFZA Business Park, DDP, Premises Number 62412-001
Dubai Silicon Oasis, Dubai, United Arab Emirates
PO Box 342001
Email: [email protected]

The company is operated from the United Arab Emirates (UAE).
For European users, data processing is carried out in accordance with Art. 3 (2) GDPR.

2. Purpose of Data Processing

We process personal data for the following purposes:

  • Provision and delivery of our website
  • Creation & delivery of online courses
  • Management of memberships & course access
  • Processing of orders & payments
  • Contact and support
  • Appointment scheduling
  • Newsletter distribution
  • Analysis, conversion tracking and marketing

Legal bases:

  • Art. 6 (1) lit. b GDPR (contract / pre-contractual measures)
  • Art. 6 (1) lit. a GDPR (consent)
  • Art. 6 (1) lit. f GDPR (legitimate interest, operation & security)

3. Hosting, Domain & DNS (Hetzner Online GmbH)

Hetzner Online GmbH
Industriestr. 25, 91710 Gunzenhausen, Germany

Processed data:

  • IP address
  • Date and time
  • URL / referrer
  • User agent
  • HTTP status
  • Error and security logs

Purpose: Technical provision, security, stability
Legal basis: Art. 6 (1) lit. f GDPR
A data processing agreement (Art. 28 GDPR) is in place.

4. Platform, CRM, Funnel, Courses & Automations (Go High Level)

HighLevel Inc.
2972 West Maple Loop Dr #201, Lehi, UT 84043, USA

Processed data:

  • Contact and form data
  • IP address
  • Course & membership history
  • Appointment bookings
  • Newsletter status
  • CRM information & tags
  • Email communication

Legal basis:

  • Art. 6 (1) lit. b GDPR
  • Art. 6 (1) lit. f GDPR
  • Art. 6 (1) lit. a GDPR (tracking)
  • Art. 49 (1) lit. a GDPR (USA transfer)

DPA and EU SCCs are in place.

5. Cookies & Consent

Our website uses cookies. A cookie banner appears on the first visit.

Categories:

  • Essential
  • Functional
  • Analytics
  • Marketing

Your selection can be changed at any time via “Cookie settings”.

1. Essential / Necessary

CookieDomainPurposeDuration
v2_contact_session_*move2improve.meSession ID for loginSession/never
v2_session_history_*move2improve.meNavigation session historyNever
v3_first_session_event_*move2improve.meFirst session detectionNever
lastExternalReferrermove2improve.meLast external referrerNever
msgsndr_idmove2improve.meBackend communication1 year
i18n.en-usmove2improve.meLanguage settingSession
li_gclinkedin.comConsent storage6 months

2. Functional

CookieDomainPurposeDuration
lidclinkedin.comData center selection1 day
hl_chat_openmove2improve.meChat window statusSession
hl_chat_useridmove2improve.meAnonymous chat user ID1 year
hl_chat_sessionmove2improve.meChat sessionSession

3. Performance / Analytics

CookieDomainPurposeDuration
_gatmove2improve.meGA request limitation1 minute
_gamove2improve.meVisitor statistics1 year 1 month 4 days
ga*move2improve.mePage views1 year 1 month 4 days
_gidmove2improve.meUser behavior1 day
cee*.run.appEvent / performance tracking3 months
_dc_gtm_UA-*move2improve.meGoogle Tag Manager1 minute

4. Marketing

CookieDomainPurposeDuration
_fbpmove2improve.meFacebook ads tracking3 months
_gcl_aumove2improve.meGoogle Ads conversion3 months
_rdt_uuidmove2improve.meReddit ads tracking3 months
bcookielinkedin.comLinkedIn tracking1 year

5. Other / Uncategorized

CookieDomainPurposeDuration
topicsLastReferenceTimemove2improve.meTopic referenceNever
_gcl_lsmove2improve.meGoogle cookieNever
lastExternalReferrerTimemove2improve.meReferrer timestampNever

6. Google Fonts

Go High Level loads Google Fonts remotely. Your IP address may be transferred to the USA.
Provider: Google LLC
Legal basis: Art. 6 (1) lit. a GDPR

7. Contact Forms

Processed data: name, email, phone number, form content, IP address, timestamp.
Legal basis: Art. 6 (1) lit. b GDPR.
The data is automatically transferred to the CRM.

8. Newsletter & Double Opt-In

We use DOI for newsletters. Stored data includes email, IP, registration and confirmation timestamp.
Legal basis: Art. 6 (1) lit. a GDPR.

9. Payment Processing (Stripe)

Provider: Stripe Payments Europe
Processed data: name, email, billing address, payment data, IP.
Legal basis: Art. 6 (1) lit. b GDPR.
Stripe acts as controller & processor.

10. Accounting (Zoho Books)

Zoho Corporation Pvt. Ltd.
Processed data: customer data, invoices, payment status.
Storage in EU / India / USA.
Legal basis: Art. 6 (1) lit. b / f GDPR & SCCs.

11. Email Communication (Hetzner)

Emails are processed via Hetzner mail servers (Germany).
No third-country transfer.

12. Video Hosting (Vimeo / YouTube)

When playing videos, data is transmitted to Vimeo / YouTube.
Legal basis: Art. 6 (1) lit. a GDPR.

13. Tracking & Analysis

13.1 Google Analytics 4

Processes, among other things, IP (shortened), click paths, device information.
Legal basis: Art. 6 (1) lit. a GDPR.

13.2 Google Tag Manager

Legal basis: Art. 6 (1) lit. a GDPR.

13.3 Meta Pixel

Legal basis: Art. 6 (1) lit. a GDPR.

13.4 LinkedIn Insight Tag

Legal basis: Art. 6 (1) lit. a GDPR.

14. Data Transfer to the United Arab Emirates (UAE)

Data is processed in the course of our activities in the UAE.
In the absence of an adequacy decision, the transfer is based on: Art. 49 (1) lit. a GDPR – explicit consent.

15. Storage Period

Data is stored as long as it is necessary for the purpose or required by statutory obligations.

16. Your Rights (GDPR)

EU users have the following rights: access, rectification, erasure, restriction, data portability, objection, withdrawal of consent.

17. Withdrawal

Your cookie selection can be withdrawn at any time via “Cookie settings”.

18. Changes to this Policy

We update this privacy policy regularly. The currently valid version can be found on this website.

© Leadflow Consulting 2025, All Rights Reserved.