Privacy Policy

Effective Date: December 17, 2025
Last Updated: December 17, 2025

Scope of This Policy

This Privacy Policy applies to information collected by FLX Websites (“we,” “us,” or “our”) through our website and services. We are a New York-based web design and development agency. This policy is designed to comply with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), and other state privacy regulations.

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Information We Collect

We may collect the following categories of information:

Information You Provide Directly

Identifiers: Name, email address, phone number, and billing address when you make purchases, subscribe to our newsletter, or contact us
Commercial Information: Order details and transaction history for purchases
Communications: Any messages, feedback, or other communications you send to us

Information Collected Automatically

Website Usage Data: Aggregated, anonymized analytics data collected via Fathom Analytics (no cookies, no personally identifiable information)
Technical Error Data: Browser type, operating system, and page URLs when errors occur (via Sentry, no IP addresses or PII)

Sensitive Personal Information

We do not intentionally collect sensitive personal information such as Social Security numbers, financial account numbers (credit card details are handled directly by Stripe), precise geolocation data, health information, or other categories of sensitive data as defined by applicable state privacy laws.

Payment Processing

We use Stripe, Inc. (“Stripe”) as our third-party payment processor to handle all payment transactions. When you make a purchase, your payment information (including credit card details) is collected and processed directly by Stripe. We do not store or have access to your complete credit card numbers. For more information, see Stripe's Privacy Policy.

How We Use Your Information

We use the information collected to:

Process and fulfill your orders
Send order confirmations, receipts, and service communications
Deliver newsletter content and marketing communications
Respond to customer service requests
Analyze website traffic and improve our services
Identify and fix technical issues
Comply with legal obligations

Third-Party Services and Data Processing

We use third-party service providers to help us operate our business and deliver services. These providers may have access to your personal information only to perform specific tasks on our behalf. We maintain appropriate data processing agreements with these vendors to ensure your information is protected in accordance with this Privacy Policy and applicable law.

Stripe - Payment processing. Handles all credit card transactions securely via PCI-compliant infrastructure (Privacy Policy)
Fathom Analytics - Privacy-first website analytics. Collects aggregated usage data without cookies or personally identifiable information. Fully compliant with GDPR, CCPA, and PECR (Privacy Policy)
HubSpot - Newsletter management and email communications. Stores email addresses for subscribers (Privacy Policy)
Sentry - Error monitoring and diagnostics. Collects technical error data including browser type, operating system, and page URLs. Does not collect IP addresses, cookies, or personally identifiable information (Privacy Policy)

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties for their marketing purposes. We may share your information in the following circumstances:

Service Providers: With third-party vendors who assist us in operating our business (as described above), under contractual obligations to protect your data
Legal Requirements: When required by law, subpoena, court order, or other legal process
Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of assets
Protection of Rights: To protect our rights, property, or safety, or that of our users or others

Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

Encryption: All data transmitted between your browser and our website is encrypted using TLS/SSL technology
Payment Security: All payment transactions are processed through Stripe's PCI-compliant infrastructure
Access Controls: Access to personal information is restricted to authorized personnel
Vendor Security: We require our third-party service providers to maintain appropriate security measures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information as follows:

Transaction Records: Retained indefinitely for accounting, tax, and customer service purposes
Newsletter Subscriptions: Until you unsubscribe or request deletion
Website Analytics: Aggregated and anonymized data is retained indefinitely

You may request deletion of your personal information at any time by contacting us. We will honor deletion requests subject to any legal obligations requiring us to retain certain records.

Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We honor the following rights for all users, regardless of location:

Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you
Right to Delete: You may request deletion of your personal information, subject to certain exceptions
Right to Correct: You may request correction of inaccurate personal information
Right to Opt Out: You may opt out of the sale or sharing of your personal information (note: we do not sell personal information)
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise any of these rights, please contact us at team@flxwebsites.com. We will respond to verifiable requests within 45 days.

State-Specific Privacy Rights

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of sale or sharing of personal information. We do not sell or share personal information as defined by the CCPA/CPRA.

Virginia, Colorado, Connecticut, Texas, Utah Residents

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and Utah (UCPA) have similar rights including access, correction, deletion, data portability, and the right to opt out of targeted advertising, sale of personal data, and profiling.

Authorized Agents

You may designate an authorized agent to submit a privacy request on your behalf. For authorized agent requests, we require: (1) a written authorization signed by you, and (2) verification of your identity directly with us, unless the agent has a valid power of attorney.

Appeals

If we decline to take action on your privacy request, you may appeal our decision by contacting us at team@flxwebsites.com with the subject line “Privacy Request Appeal.” We will respond to appeals within the timeframe required by applicable law. If your appeal is denied, you may have the right to contact your state's Attorney General.

Newsletter and Marketing

When you sign up for our newsletter, we collect your email address to send you marketing communications, industry insights, and updates about our services. You may unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us directly.

Children's Privacy

Our website and services are not directed to children under 13 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a new effective date and “Last Updated” date. For material changes, we may provide additional notice.

Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your privacy rights, please contact us at:

FLX Websites
156 Mill Street, Canandaigua, NY 14424
Email: team@flxwebsites.com
Phone: (315) 719-2047

If you need assistance submitting a privacy request due to a disability, please contact us and we will provide reasonable accommodations.