Privacy Policy — The Flash Agency
Last updated: June 28, 2026
1. Introduction
The Flash Agency ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website theflash.agency. This policy is compliant with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
The Flash Agency is the data controller responsible for your personal data. For any questions regarding this policy or your data, contact us at randy@theflash.agency.
3. Information We Collect
We may collect the following types of information:
- Personal Information: Name, email address, phone number, and any other information you voluntarily provide through our contact forms.
- Usage Data: Information about how you interact with our website, including IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of visits.
- Cookies and Tracking: We use cookies and similar tracking technologies to enhance your browsing experience.
4. Legal Basis for Processing (GDPR)
Under the GDPR, we process your personal data based on the following legal grounds:
- Consent: When you submit a contact form or accept cookies, you provide explicit consent for us to process your data for the stated purpose.
- Legitimate Interest: We may process data when it is in our legitimate business interest, such as improving our website and services.
- Contractual Necessity: Processing may be necessary to fulfill a contract or take pre-contractual steps at your request.
- Legal Obligation: We may process data to comply with legal requirements.
5. How We Use Your Information
- Respond to your inquiries and provide requested services
- Improve our website, services, and user experience
- Send marketing communications (only with your explicit consent)
- Analyze website usage to optimize performance
- Comply with legal obligations
6. Your Rights Under GDPR
If you are located in the European Economic Area (EEA) or the UK, you have the following rights regarding your personal data:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may request that we correct any inaccurate or incomplete data.
- Right to Erasure: You may request that we delete your personal data ("right to be forgotten").
- Right to Restrict Processing: You may request that we limit how we use your data.
- Right to Data Portability: You may request a copy of your data in a structured, machine-readable format.
- Right to Object: You may object to the processing of your data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: You may withdraw your consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at randy@theflash.agency. We will respond within 30 days.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Contact form submissions are retained for up to 24 months unless you request earlier deletion.
8. Cookies
Our website uses the following types of cookies:
- Essential Cookies: Necessary for the website to function properly. These cannot be disabled.
- Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously.
- Marketing Cookies: Used to track visitors across websites to display relevant advertisements.
You can manage your cookie preferences at any time through the cookie consent banner or your browser settings.
9. Data Sharing and Transfers
We do not sell your personal data. We may share your information with service providers who assist us in operating our website and conducting our business, under strict data processing agreements, and with legal authorities when required by law.
If data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
11. Children's Privacy
Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.
13. Right to Lodge a Complaint
If you believe that we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.