Effective Date: 19th April 2025

1. Our Commitment to Your Privacy

We are committed to respecting and protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you interact with any of our websites or services.

This policy complies with the Australian Privacy Act 1988 (including the Australian Privacy Principles), the EU General Data Protection Regulation (GDPR), UK GDPR, and applicable United States privacy laws, including the California Consumer Privacy Act (CCPA/CPRA).

By using our websites or services, you agree to the terms set out in this Privacy Policy.

2. Who We Are

This Privacy Policy applies to all websites owned or operated by Flow State Business and Ruby Lee. These include, but are not limited to:

• flowstatebusiness.co

• flowstatebusiness.com

• flowstateoffers.co

• flowstatemastery.co

• rubylee.co

These websites are collectively referred to as “we,” “our,” or “us” in this policy. Flow State Business and Ruby Lee are the data controllers for any personal data collected through these channels.

If you have questions, please contact us at support@rubylee.co.

3. What Personal Data We Collect

We collect personal data when you provide it to us voluntarily, such as when you:

• Sign up for free content, including downloadable resources, videos, courses, live trainings, or emails

• Purchase a product, service, or digital program

• Fill in a form on our website or landing page

• Send us a message via social media or email

The types of personal data you may provide include your name, email address, phone number, business name, and any additional information you share when completing a form or making a purchase. If you are buying a product, we may also collect your billing address. However, your payment details are securely handled by third-party processors and are never stored on our servers.

We may also collect information automatically when you visit our websites. This includes your browser type, operating system, IP address, time spent on our pages, and which pages you visit. This data is collected through cookies and similar technologies. It helps us improve the user experience but is not used to personally identify you unless combined with other information.

For more information, refer to our Cookie Policy.

4. How We Use Your Personal Data

We use your personal data to:

• Deliver resources, programs, and services you’ve requested

• Process transactions and manage customer service interactions

• Send you emails or updates that you’ve opted into

• Improve the quality and performance of our websites

• Deliver advertising, where applicable, with your consent

• Ensure compliance with legal obligations

We rely on a combination of legal grounds to collect and use your personal data, including your consent, the performance of a contract, compliance with legal obligations, and our legitimate business interests where these are not overridden by your rights.

5. Data Sharing

We may share your personal data with trusted third-party service providers who assist us in delivering our services, managing our systems, and communicating with you.

These providers include email marketing platforms, course hosting services, sales and payment processors, document signing tools, and customer communication tools. For example, we may use platforms such as Kartra, Zapier, ThriveCart, SamCart, Stripe, PayPal, QuickBooks, Meta (including Facebook and Instagram), Google Ads, Zoom, Voxer, and DropBox Sign.

These services may only use your data as needed to perform their roles on our behalf, and they are required to handle your data securely and in accordance with relevant privacy laws.

We do not sell your personal data. If we ever intend to change this, you will be notified and given the opportunity to opt out.

6. International Data Transfers

As an Australian-based business with a global audience, we may transfer your data to countries outside your own, including the United States. When doing so, we ensure appropriate safeguards are in place to protect your information. For example, we may rely on Standard Contractual Clauses or similar legal mechanisms where required by law.

7. Data Security

We have implemented appropriate security measures to protect the personal data we collect. These include secure servers, access restrictions, encrypted transmissions, and privacy-focused platforms. We regularly review our practices to ensure ongoing compliance and security.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When it is no longer needed, we securely delete or anonymise the data.

9. Your Rights

Depending on your location, you may have rights over your personal data. These may include the right to:

• Access the data we hold about you

• Request that we correct or update your data

• Request deletion of your data

• Withdraw your consent or opt out of marketing communications

• Object to how we process your data

• Request a copy of your data in a portable format

• Lodge a complaint with a relevant regulatory authority

To exercise any of these rights, contact us at support@rubylee.co.

10. Children’s Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from individuals under 18. If you believe that we have collected such data, please contact us and we will remove it.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business, technology, or legal obligations. Any updates will be posted to this page with the revised effective date. We recommend reviewing this page periodically to stay informed.

12. Contact Us

If you have any questions or concerns about this policy or how we handle your data, please contact:

• Email: support@rubylee.co
• Cookie Policy: https://www.flowstatebusiness.co/cookie-policy