Legal
Privacy Policy
1. Who we are
EnrollFlo ("we", "us") provides done-for-you websites, lead-reactivation services and AI lead-conversion systems. This policy explains how we collect and use personal data on this site, in line with the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Contact for anything in this policy: support@enrollflo.com.
2. What we collect and why
Opt-in form: your name, email address and phone number, so we can deliver the toolkit you requested and, only where you've explicitly consented, send you marketing by email and/or SMS. Lawful bases: contract (delivering what you asked for) and consent (marketing).
Purchases: your payment is processed by Stripe; we never see or store your full card details. We keep records of what you bought to provide the product and meet accounting obligations. Lawful bases: contract and legal obligation.
Technical data: basic logs (IP, browser type, pages visited) to keep the site secure and working. Lawful basis: legitimate interests.
3. Consent for email and SMS
We only send marketing email or SMS where you actively ticked the consent box, which is never pre-ticked. Every marketing email contains an unsubscribe link, and you can stop SMS at any time by replying STOP. Withdrawing consent doesn't affect delivery of anything you've purchased.
If you take our AI Voice Agent service, calls made by the agent disclose at the start that the caller is an AI assistant, and are only made to people who have consented to be contacted by automated means.
4. Who we share data with
We use trusted processors to run our business: Stripe (payments), HighLevel (our CRM, where your contact details and consent records are stored), Vercel (website hosting), and our email/SMS delivery providers. Each processes your data under contract and only on our instructions. We never sell your data.
Some providers may process data outside the UK/EEA; where they do, transfers are protected by recognised safeguards such as the UK Addendum to Standard Contractual Clauses.
5. How long we keep it
Marketing contacts: until you unsubscribe or after a prolonged period of inactivity, after which we suppress or delete. Customer and transaction records: 6 years, to meet UK tax and accounting law. Consent records: as long as we rely on them, plus a reasonable period to evidence compliance.
6. Your rights
You can ask us for a copy of your data, ask us to correct or delete it, object to or restrict processing, withdraw consent at any time, and ask for your data in a portable format. Email support@enrollflo.com and we'll respond within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).
7. Cookies
This funnel uses a single strictly-necessary, first-party cookie to remember your progress through checkout (so your order and any upgrades stay linked as you move through the funnel). It isn't used for advertising or cross-site tracking. Payment pages may set cookies from Stripe strictly to process your payment securely and prevent fraud.
8. Changes
We'll post any changes to this policy on this page. Last updated: 11 June 2026.
