Who we are
Wonderflow is a growth marketing agency. This website, wonderflow.agency, is run by Individual Entrepreneur Mikhail Sezemov, 29a Gagarin Street, Tbilisi 0160, Georgia. In this policy, “we” and “us” mean this business. We decide how your personal data is used, so under data protection laws we are its controller.
For anything about your data, write to hello@wonderflow.agency. Registration details are in the Legal Notice.
What this policy covers
This policy explains how we handle personal data when you visit this site, contact us or work with us. When we work on a client’s project, we sometimes see data the client gives us access to, such as their analytics. That work follows our contract with the client, not this policy.
What we collect
- What you send us. Our forms ask for your name, work email, your company’s website and what you need help with. Some also ask for your company name, phone number, target market or a short message. Optional fields are marked. When you email us or talk with us, we get what you choose to share.
- When we work together. Names, roles and contact details of the people we work with, and the details we need to invoice.
- Cookies. Analytics and advertising cookies, only if you allow them. They record things like the pages you visit, your device and browser, your approximate location and an ID for your browser. The Cookie Policy lists them.
- Technical data. When you open a page, your browser sends our hosting provider technical data such as your IP address, browser type, the page and the time. The provider uses it to deliver the site and keep it secure.
We don’t ask for sensitive information, such as health or financial details. Please don’t send it to us.
Why we use it
| Why | What data | Legal basis |
|---|---|---|
| To reply to your request and talk about working together | What you send us | Steps you ask for before a contract or, if you write for your company, our legitimate interest in answering business inquiries |
| To keep the context of past requests in case you write again | What you send us | Our legitimate interest in continuing a conversation you started |
| To do the work and invoice it | Contact and invoicing details | Our contract with you or your company, our legitimate interest in working with your team, and our legal duty to keep accounting records |
| To see which pages help and which don’t | Analytics cookies | Your consent |
| To measure our ads and show them to people who visited us | Marketing cookies | Your consent |
| To deliver the site and keep it secure | Technical data | Our legitimate interest in a working, secure site |
| To remember your cookie choice | The choice cookie | Our legitimate interest in respecting your choice and keeping a record of it |
| To protect our rights in a dispute | The records that matter | Our legitimate interest |
These legal bases are named as in the EU and UK GDPR. Georgian law has similar ones.
We don’t put personal data from inquiries into AI tools, and we don’t use it to train AI models. For analysis we use data without personal details, such as site analytics.
We don’t make decisions about you by automated means alone. You don’t have to give us personal data. Without a way to reach you, though, we can’t reply, and without contact and invoicing details, we can’t sign a contract or invoice the work.
Who else sees it
We don’t sell personal data. We share it only with the recipients below, and only what each needs:
- Our hosting provider, which keeps this site online.
- The service that delivers form requests and filters out spam.
- Our email provider. Requests from the forms arrive in the founders’ mailboxes and in our shared one, hello@wonderflow.agency.
- Tools we use for video calls, calendars, documents and project work, when we talk or work together.
- Analytics providers, only if you allow analytics cookies.
- Advertising platforms, only if you allow marketing cookies. They may combine data about your visit with data they already hold and use it under their own privacy policies.
- Banks and accountants, when we invoice clients.
- Public authorities, when the law requires it.
Only if you turn on marketing cookies, ad platforms may collect information about what you do on our site and on other sites over time. The Cookie Policy names them.
Data across borders
The business that runs this site is registered in the country of Georgia, and some of our providers process data in other countries, such as the United States. Your data may be processed outside the country where you live. When data leaves the EU, the UK or Georgia, we rely on the safeguards the law requires, such as standard contractual clauses or a decision that the receiving country protects data well enough. Write to us for a copy of these safeguards.
How long we keep it
- Inquiries that don’t lead to work: 24 months after our last contact. Then we delete them.
- Records of work with clients: while we work together, then as long as tax and accounting laws require.
- Your cookie choice: up to 12 months. Then we ask again.
- Analytics data: X months, set in the analytics tool.
- Advertising data: ad platforms keep it under their own policies.
- Technical data: X days, in our hosting provider’s logs.
Your rights
Wherever you live, you can ask us to:
- show you the personal data we hold about you and give you a copy
- correct it if it’s wrong or incomplete
- delete it
- pause or limit how we use it
- give you the data you provided in a common file format, so you can move it elsewhere
- withdraw your consent. This doesn’t affect what we did before. For cookies, use Cookie settings at the bottom of any page.
Your right to object. You can object to any use of your data that relies on our legitimate interest. We’ll stop unless we have compelling grounds that outweigh your interests, or need the data for a legal claim.
To make a request, email hello@wonderflow.agency. We may ask you to confirm who you are. We act on requests within 10 business days. If you ask us to pause the use of your data, we respond within 3 business days. It’s free.
Complaints
If you think we’ve handled your data wrongly, please tell us so we can fix it. You can also complain to the State Audit Office of Georgia, which supervises data protection in Georgia. If you live or work in the EU or the UK, you can complain to your local data protection authority. In the UK, that’s the Information Commissioner’s Office. You don’t need to contact us first.
Cookies and privacy signals
We set no analytics or advertising cookies until you allow them in the cookie banner. The Cookie Policy has the details.
Global Privacy Control. If your browser sends this signal, we treat it as a no to marketing cookies, and the banner says so.
Do Not Track. There’s no common standard for this browser signal, so our site doesn’t respond to it. Analytics and ad cookies stay off until you say yes either way.
Children
This site is for businesses and isn’t meant for children. We don’t knowingly collect personal data from anyone under 16. If you think a child has sent us their details, tell us and we’ll delete them.
Keeping data safe
We protect personal data with reasonable technical and organizational measures. If a breach puts your data at risk, we’ll tell you and the authorities as the law requires.
Changes to this policy
When we change this policy, we update the date at the top. That date is when the current version took effect. If a change affects how we use your data, we’ll point it out at the top of this page.
Contact
- Email: hello@wonderflow.agency
- Mail: Individual Entrepreneur Mikhail Sezemov, 29a Gagarin Street, Tbilisi 0160, Georgia