Last updated: 5 May 2026
This Privacy Policy explains how Hushflow collects, uses, shares and protects your personal data when you visit hushflow.co, contact us, submit a form, or book a call with us. We keep it plain and specific: what we collect, why, who we work with, and the rights you have.
Hushflow ("Hushflow", "we", "us") is an operations design studio that builds automation and AI systems for service businesses. We are based in Valencia, Spain, and we are the data controller responsible for the personal data described in this policy.
If you have any questions about this policy or your data, contact us at hello@hushflow.co.
Information you give us. When you fill in a form on our site, request a call, complete our pre-call brief, or email us, you may provide:
Scheduling data. When you book a call, our scheduling provider (Calendly) collects your name, email, chosen time and any answers to its booking questions, and shares them with us.
Information we collect automatically. When you use our website, we and our analytics providers may collect technical and usage data such as your IP address, approximate location, device and browser type, pages viewed, referring links, and how you interact with the pages. Some of this is collected through cookies and similar technologies (see section 6).
| Purpose | Legal basis (GDPR) |
|---|---|
| Respond to your enquiry, arrange and prepare for a call, and provide our services | Performance of a contract / steps taken at your request, and our legitimate interest in answering you |
| Send you follow-up messages and information related to your enquiry | Legitimate interest, or your consent where required |
| Operate, secure and improve our website | Legitimate interest |
| Understand how the site is used through analytics | Your consent, or legitimate interest depending on your location |
| Comply with legal obligations and protect our rights | Legal obligation / legitimate interest |
We do not sell your personal data, and we do not use it for automated decisions that produce legal or similarly significant effects on you.
We share personal data only with service providers who help us run our business, and only as far as needed. These providers process data on our behalf under agreements that require them to protect it:
| Provider | What they do |
|---|---|
| Airtable | Stores our contact and lead records (your name, email and the details you share) |
| Google (Analytics & Tag Manager) | Website analytics and tag management |
| Hotjar | Aggregated behaviour analytics (how visitors use the pages) |
| Calendly | Call scheduling |
| Cloudflare | Website hosting, delivery and security |
| Telegram | Internal notification to our team when a new enquiry arrives |
We may also disclose data if required by law, to enforce our terms, or to protect the rights, safety and property of Hushflow or others. If our business is ever transferred or reorganised, personal data may be transferred as part of that process.
We serve clients and visitors worldwide, and some of the providers above are located outside your country, including in the United States. When personal data is transferred across borders, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision, so your data stays protected wherever it is processed.
Our website uses cookies and similar technologies. Some are necessary for the site to work. Others are used, with your consent where required, to measure and improve how the site performs. We currently use Google Analytics (via Google Tag Manager) and Hotjar for this purpose.
You can control or delete cookies through your browser settings, and you can opt out of Google Analytics using Google's opt-out browser add-on. Blocking some cookies may affect how the site works.
We keep personal data only as long as we need it for the purposes in this policy, typically for as long as we are in contact or working together and for a reasonable period afterwards, unless a longer period is required by law. Analytics data is retained according to the settings of the providers we use. You can ask us to delete your data at any time (see section 8).
Depending on where you live, you have rights over your personal data. Under the EU/UK GDPR these include the right to:
To exercise any of these rights, email us at hello@hushflow.co. We will respond within the timeframe required by applicable law.
If you are in the EU/EEA: you have the right to lodge a complaint with your local data protection authority. In Spain, this is the Agencia Española de Protección de Datos (www.aepd.es).
If you are in California or another region with its own privacy law: you may have the right to know what personal data we collect, request its deletion, and not be discriminated against for exercising your rights. We do not sell or share your personal data for cross-context behavioural advertising. Contact us at the same address to make a request.
We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access, and we work with reputable providers who do the same. No method of transmission or storage is completely secure, but we act quickly if we identify a risk.
Our website and services are intended for businesses and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.
Our site may link to other websites, such as LinkedIn, Facebook or our scheduling tool. We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies.
We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. For significant changes, we will take reasonable steps to let you know.
For any question about this policy or your personal data, email hello@hushflow.co.
