Privacy Policy
Last updated: 4 October 2026
This policy explains what personal data we collect when you use the FlashBind website, products and online service, why we use it, who processes it for us, how long we keep it, and your rights under the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
The data controller is:
Cortexa, MBCompany code: 308009417
VAT code: LT100020373511
Malūnininkų g. 7, LT-92262 Klaipėda, Lithuania
info@flashbind.com
+370 672 91704
For any privacy question or request, email info@flashbind.com.
2. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Account: email address and password (stored only in scrambled, hashed form by our login provider). | To let you log in and manage your products. | Contract (Art. 6(1)(b)) |
| Product settings you enter: links (e.g. review page, menu); Wi-Fi network name and password; pet profile (pet name, owner name, phone number, medical notes, photo). | To show this information to people who tap or scan your product. It is public to anyone who taps or scans the product. Your account email is not shown. | Contract (Art. 6(1)(b)) |
| Orders: name, delivery and billing address, email, phone, products bought, payment status. | To process, deliver and support your order, and keep accounting records. | Contract (Art. 6(1)(b)); legal obligation for accounting (Art. 6(1)(c)) |
| Contact, quote and founding-pricing requests: your email, message, business name and any file you attach. | To answer you and prepare quotes. For founding-pricing requests, to email you about pricing and the subscription launch, which you agree to on the form and can withdraw at any time. | Steps before a contract (Art. 6(1)(b)); legitimate interest in answering enquiries (Art. 6(1)(f)); consent for founding-pricing emails (Art. 6(1)(a)) |
| Withdrawal requests sent with our online withdrawal form: your name, email, order number, the products and, only if you give one, your reason. | To handle your withdrawal and refund, confirm receipt to you by email, and keep a record of when we received it. | Legal obligation under consumer law (Art. 6(1)(c)) |
| Private feedback sent to a business through its FlashBind review stand: your message and, only if you tick the box, your name, email and phone number. | To deliver your message to that business. The business decides how it uses your feedback (it is the controller); we store and deliver it on the business's behalf. Contact the business, or us, to exercise your rights. | The business's legitimate interest in hearing from customers (Art. 6(1)(f)); your consent for being contacted (Art. 6(1)(a)) |
| Security data: IP address and a scrambled account identifier when someone tries to activate a product; a scrambled form of your IP address when you send private feedback or a withdrawal request. | To limit repeated guessing of activation codes, and spam. | Legitimate interest in security (Art. 6(1)(f)) |
| Cookies: essential cookies for login and your cart; other cookies only with your consent. | To run the site. See our Cookie Policy. | Necessary for the service; consent for non-essential cookies (Art. 6(1)(a)) |
We don't sell your personal data, and we don't use it for automated decision-making or profiling.
3. Who processes your data for us
- Shopify: online store, checkout, order emails and website hosting.
- Payment providers offered at checkout (for example PayPal or Google Pay): payments.
- Supabase: user accounts and login, and the database storing product settings, contact messages and attachments.
- Resend: sends us an email notification when you use the contact or quote form, sends you a confirmation when you withdraw from a purchase online, and sends businesses an alert when they receive private feedback.
- Delivery companies: your name, address and phone number, to deliver your order.
These providers process data only on our instructions and under data processing agreements. Some of them may process data outside the European Economic Area, for example in the United States. Where this happens, the transfer is protected by an EU adequacy decision (such as the EU-US Data Privacy Framework) or by the European Commission's Standard Contractual Clauses.
4. How long we keep data
- Account and product settings: while your account exists. You can delete your account yourself at any time from your dashboard (“Delete account”); this erases them immediately.
- Orders and invoices: as long as tax and accounting law requires.
- Withdrawal requests: as long as we need them for the return and refund, and as long as tax, accounting and consumer law requires.
- Contact and quote requests (including attachments): deleted automatically 2 years after they were sent.
- Private feedback: deleted automatically 12 months after it was sent. The business can delete it sooner.
- Security data: deleted automatically after 30 days.
5. Your rights
You have the right to:
- get a copy of your personal data (access);
- have incorrect data corrected;
- have your data deleted;
- restrict how we use your data;
- receive your data in a portable format;
- object to use based on our legitimate interests;
- withdraw consent at any time, without affecting earlier use.
You can change most product settings, and delete your account, yourself in your FlashBind account. For anything else, email info@flashbind.com. We reply within one month.
You also have the right to complain to a data protection authority, in particular in the EU country where you live or work. Our lead authority is the State Data Protection Inspectorate (vdai.lrv.lt).
6. Children
You must be at least 14 years old to create a FlashBind account. We don't knowingly collect data from younger children; if you think a child has created an account, contact us and we will delete it.
7. Security
Access to stored data is limited to our servers and the people who need it to run the service. Passwords are stored only in hashed form, and the site is served over HTTPS. No online service can be completely secure, so please use a strong password and don't reuse it elsewhere.
8. Changes to this policy
We may update this policy when our service or the law changes. We show the date of the latest version at the top, and we tell account holders about important changes.
9. Contact
Cortexa, MB, info@flashbind.com.