Privacy Policy

Last updated: April 26, 2026 · SocialSync Flow · Jds Socialsync SL, Marbella, Spain

This Privacy Policy explains how Jds Socialsync SL ("SocialSync Flow," "we," "us," or "our") collects, uses, stores, and protects your personal data when you interact with us through our website, digital products, online courses, email list, and community.

This policy specifically covers:

The 90-Day Growth Engine (our Instagram growth course)
The Social Suite (our Circle-based membership community)
Our digital guides, workbooks, and downloadable resources
Our email newsletter, marketing communications, and discovery calls
Our websites, landing pages, and any other services we offer

We take your privacy seriously. This policy is designed to comply with the EU General Data Protection Regulation (GDPR), the Spanish Organic Law on Data Protection and Digital Rights (LOPDGDD), and applicable international privacy standards.

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

Company: Jds Socialsync SL
Trading as: SocialSync Flow
Registered office: Marbella, Spain
Contact email: [email protected]

For any privacy-related question, data access request, or complaint, please email us at the address above.

2. Information We Collect

We collect different categories of personal data depending on how you interact with us.

2.1 Information You Provide Directly

Name and email address (for email list sign-ups, lead magnets, and free downloads)
Billing and payment details (name, address, country, VAT number where applicable) for course and membership purchases
Account credentials and profile information you provide inside the Social Suite (Circle) community, including username, profile photo, bio, and any posts or comments you publish
Content you submit inside the 90-Day Growth Engine course (e.g., responses, comments, uploaded materials)
Information you share during discovery calls, client onboarding, or direct messages with our team
Testimonials, case studies, or feedback you voluntarily provide

2.2 Information Collected Automatically

Technical data: IP address, browser type, device type, operating system, referring URL, and time zone
Usage data: pages visited, links clicked, time spent, and interaction with our content
Email engagement data: opens, clicks, and bounce data collected by our email platform (Flodesk)
UTM parameters and campaign tracking data to understand how you found us
Cookies and similar technologies (see Section 8)

2.3 Information From Third Parties

Payment processors (Stripe, Circle) share transaction and billing data necessary to process your purchase
Circle.so shares community activity and membership data for the Social Suite
Social media platforms share limited public profile information if you interact with our pages or ads
Analytics providers share aggregated data about site performance

3. How We Use Your Data (Purposes & Legal Basis)

Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

3.1 Performance of a Contract

When you purchase the 90-Day Growth Engine, Social Suite membership, or any digital guide, we process your data to:

Deliver the product or access to the community
Process payments and issue invoices
Provide customer support
Manage your account and membership status

3.2 Consent

With your consent, we process your data to:

Send you marketing emails, newsletters, and promotional content
Show you relevant advertising on social platforms
Use non-essential cookies (analytics, remarketing)

You can withdraw consent at any time - see Section 7.

3.3 Legitimate Interests

We rely on legitimate interests to:

Improve our products, content, and user experience
Protect our website and community from fraud and abuse
Analyse aggregated engagement data to make better content decisions
Communicate service-related updates to existing customers

3.4 Legal Obligation

We process certain data to comply with Spanish and EU law, including:

Tax and accounting obligations (we must keep invoicing records for the period required by Spanish law, typically 4–6 years)
Responding to lawful requests from authorities

4. Who We Share Your Data With

We do not sell your personal data. We share it only with the following categories of recipients, all of whom act as our data processors under written agreements or operate under their own GDPR-compliant terms:

4.1 Service Providers

Circle.so - hosts the Social Suite community, processes membership payments, and stores member profiles, posts, and activity
Flodesk - our email marketing platform, stores your email address and engagement data
Stripe - processes payments and stores billing information
Google Workspace - for email, documents, and internal operations
Course hosting platform - delivers the 90-Day Growth Engine content and tracks your progress
Analytics tools (e.g., Fathom Analytics, Meta Pixel where applicable) - for traffic and conversion measurement
ManyChat - for Instagram DM automations (only if you interact with our keyword-triggered flows, e.g., "comment SUITE" or "comment ENGINE")

4.2 Professional Advisors

Our gestoría (tax advisor), accountants, and legal counsel may access limited data where necessary for compliance and professional services.

4.3 Authorities

We may disclose data if required by law, court order, or to protect our legal rights.

5. International Data Transfers

Some of our service providers are based outside the European Economic Area (EEA), including in the United States. When we transfer your data outside the EEA, we rely on safeguards such as:

EU-US Data Privacy Framework certification (where applicable)
Standard Contractual Clauses (SCCs) approved by the European Commission
Other legally recognised transfer mechanisms

You can request more information about specific transfers by contacting us.

6. How Long We Keep Your Data

We only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.

Email list subscribers: until you unsubscribe or request deletion
Customers (course, guide, or membership buyers): for the duration of your access plus 6 years after, to comply with Spanish tax law
Social Suite members: for the duration of your membership; profile data and posts may remain visible to other members unless you request deletion
Discovery call and prospect data: up to 24 months after last contact, unless you opt in to continued communication
Support tickets and correspondence: up to 3 years
Analytics data: aggregated and anonymised data may be retained indefinitely

7. Your Rights Under GDPR

If you are in the EU, EEA, UK, or Switzerland, you have the following rights in relation to your personal data:

Right of access - request a copy of the data we hold about you
Right to rectification - ask us to correct inaccurate or incomplete data
Right to erasure ("right to be forgotten") - ask us to delete your data where legally permissible
Right to restrict processing - ask us to pause processing in certain cases
Right to data portability - receive your data in a structured, machine-readable format
Right to object - object to processing based on legitimate interests or for direct marketing
Right to withdraw consent - at any time, without affecting lawfulness of prior processing
Right to lodge a complaint - with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or your local supervisory authority

To exercise any of these rights, email us at the contact address in Section 1. We will respond within one month, as required by GDPR.

8. Cookies & Tracking Technologies

Our websites and landing pages use cookies and similar technologies to function, measure performance, and (with your consent) show relevant marketing.

Essential cookies - required for site functionality and cannot be disabled
Analytics cookies - help us understand how visitors use our site
Marketing cookies - used to deliver and measure advertising campaigns

When you first visit our site, a cookie banner lets you accept, reject, or configure non-essential cookies. You can update your preferences at any time via the cookie settings on our site or your browser settings.

9. Children's Privacy

Our products and community are designed for adults (18+) building and growing businesses. We do not knowingly collect data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), secure third-party platforms, access controls, and staff confidentiality obligations.

No system is 100% secure. In the unlikely event of a data breach that affects your rights, we will notify you and the relevant supervisory authority within 72 hours, as required by GDPR.

11. Social Suite Community Rules

The Social Suite is a private community hosted on Circle.so. When you join:

Your profile (name, photo, bio) is visible to other members
Your posts, comments, and reactions are visible to other members within the community
We do not share member content outside the community without permission, except anonymised examples or testimonials you have consented to
Circle.so processes your data according to its own privacy policy; we recommend reviewing it
You are responsible for the personal information you choose to share inside the community

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by email or through a notice on our website. The "Last updated" date at the top of this document will always reflect the most recent revision.

13. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or how we handle your data, please get in touch:

Jds Socialsync SL
Marbella, Spain
Email: [email protected]

You also have the right to contact the Spanish Data Protection Agency (AEPD) directly at www.aepd.es.

Questions about your data? Email [email protected]