Privacy Policy

1. Who We Are

GHL Flow is a solo GoHighLevel consultancy operated by Muhammad Uzair Jabbar ("we", "us", "our"). Our website is ghlflow.io and our primary contact email is uzair@ghlflow.io.

2. Information We Collect

We only collect personal information that you voluntarily provide through our website:

• Contact form: your name, email address, and message content when you fill out the contact form on our site.
• Booking calendar: your name, email, and meeting details when you book a strategy call via our embedded scheduling tool.
• Client portal: email address and password (hashed, never stored in plain text) if you create a client portal account via Supabase Auth.

We do not collect payment details — any payments are handled directly through third-party platforms (Upwork, PayPal, Stripe) which have their own privacy policies.

3. How We Use Your Information

Information you provide is used exclusively to:

• Respond to your inquiry or project request
• Schedule and conduct the strategy call you booked
• Deliver project files or updates through the client portal
• Send occasional follow-up messages related to your specific project (not marketing blasts)

We will never sell, rent, or share your personal information with third parties for their marketing purposes.

4. Cookies & Tracking

This website uses minimal cookies. Specifically:

• Google Fonts: font files are loaded from Google's CDN. Google may log the request. See Google's Privacy Policy.
• Session cookies: if you log into the client portal, a short-lived session cookie is set to keep you authenticated. It expires when you close your browser or log out.

We do not currently use any advertising cookies, tracking pixels, or analytics tools (e.g. Google Analytics). If this changes, this policy will be updated before those tools are activated.

5. Third-Party Services

Our website integrates with the following third-party services, each governed by their own privacy policies:

• Supabase — used for client portal authentication. Data is stored in EU/US regions. Supabase Privacy Policy.
• Hostinger — our web hosting provider. Server logs (IP addresses, access times) are retained per Hostinger's standard policy. Hostinger Privacy Policy.
• Google Fonts — font delivery CDN. See above.

6. Data Retention

We retain contact form submissions and booking records for up to 2 years in case you return as a client and we need project history. Client portal accounts are retained until you request deletion. You can request deletion at any time (see Section 8).

7. Your Rights (GDPR & General)

Regardless of where you are located, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate information
• Deletion — ask us to delete your personal data ("right to be forgotten")
• Objection — object to how we process your data
• Portability — request your data in a portable format

To exercise any of these rights, email uzair@ghlflow.io with the subject line "Privacy Request". We will respond within 30 days.

8. Contact

For any privacy-related questions or requests:

• Email: uzair@ghlflow.io
• WhatsApp: +92 301 216 9911

9. Changes to This Policy

If we make material changes to this policy, we will update the "Last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated policy.