Privacy Notice

FlacRev Solutions ("FlacRev", "we", "us") is a revenue operations and CPQ consulting firm with its registered office at Eiffelstraat 203, 2132 HS Hoofddorp, The Netherlands, and presence in San Francisco (USA) and Chennai (India). For the personal data described in this notice, FlacRev Solutions is the data controller under the EU General Data Protection Regulation (GDPR).

Questions, requests or complaints about privacy can be sent to Jeff@flacrev.com or by phone on +31 6 8546 0388.

• Contact form data — your name, email address, company (optional), the purpose of your enquiry and your message.
• Consent records — whether you agreed to this notice, whether you opted in to marketing updates, the version of this notice you accepted (currently 2026-08-27a) and the timestamp of that choice.
• Anti-spam and security signals — a coarse rate-limiting record, the time spent completing the form, a hidden honeypot field and a bot-protection token from our CAPTCHA provider.
• Technical data — IP address, user agent and request timestamps captured in server and CDN logs for security, abuse prevention and troubleshooting.

We do not run advertising or analytics trackers, we do not buy or sell personal data, and we do not knowingly collect special-category data. Please do not include sensitive personal information in the enquiry message.

• Responding to your enquiry — legal basis: your consent (GDPR Art. 6(1)(a)) given when you tick the privacy consent box, and our legitimate interest in replying to business enquiries (Art. 6(1)(f)).
• Pre-contractual discussions and proposals — legal basis: steps towards a contract at your request (Art. 6(1)(b)).
• Marketing updates — only where you gave a separate, unbundled opt-in (Art. 6(1)(a)). You can withdraw it at any time.
• Security, spam prevention and service integrity — legal basis: our legitimate interest in protecting the website and its users (Art. 6(1)(f)).
• Legal and accounting obligations — legal basis: compliance with a legal obligation (Art. 6(1)(c)).

This website uses strictly necessary storage only. We do not set analytics, advertising or cross-site tracking cookies, so no prior consent is legally required for the technology we use. The banner you see on your first visit records your acknowledgement (and your accept or reject choice) in your browser's local storage under the key flacrev-cookie-consent-v1 so we do not ask again.

Additional strictly necessary storage may be set by our bot-protection provider to distinguish humans from automated traffic. Clearing your browser's site data removes all of these entries, and the banner will reappear on your next visit.

We share personal data only with service providers acting as processors under written data processing agreements, and only as far as necessary to run this website and reply to you:

• Cloud hosting and edge delivery for serving this website and its server functions.
• A managed database platform where contact submissions and consent records are stored.
• An email delivery provider used to notify us of your enquiry and to reply to you.
• A bot-protection provider used to filter automated form submissions.

We may also disclose data to professional advisers or authorities where we are legally required to do so.

Some of our providers process data outside the European Economic Area, including in the United States. Where that happens, transfers are protected by an adequacy decision or by the European Commission's Standard Contractual Clauses together with supplementary technical and organisational safeguards such as encryption in transit and at rest. You can request more detail on the transfer mechanism used for a specific provider by emailing us.

• Enquiries that do not lead to an engagement — up to 24 months from your last contact with us, then deleted.
• Enquiries that become client relationships — kept for the duration of the engagement plus the statutory retention periods that apply to contracts and accounting records (up to 7 years in the Netherlands).
• Marketing consent records — kept until you withdraw consent, plus a short record of the withdrawal to prove we honoured it.
• Security and rate-limiting logs — retained for a short period (typically up to 12 months) and then deleted or aggregated.

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate or incomplete data rectified;
• have your data erased where there is no ongoing lawful basis for keeping it;
• restrict processing while a request or objection is being assessed;
• object to processing based on our legitimate interests;
• receive data you provided in a portable, machine-readable format where processing is based on consent or contract;
• withdraw consent at any time, without affecting processing already carried out; and
• not be subject to decisions based solely on automated processing — we do not carry out such decision-making or profiling.

To exercise any of these rights, email Jeff@flacrev.com. We respond within one month and may ask for information to verify your identity. If you are unhappy with our response you can lodge a complaint with your local supervisory authority — in the Netherlands this is the Autoriteit Persoonsgegevens.

We apply appropriate technical and organisational measures to protect personal data, including HTTPS/TLS for all traffic, encryption at rest at our hosting and database providers, least-privilege access controls and row-level security on stored submissions, server-side validation and rate limiting on the contact form, and regular dependency and security reviews. No system is perfectly secure, so we also maintain processes to detect, investigate and, where legally required, report personal data breaches to the supervisory authority and to affected individuals.

This website and our services are intended for business use by adults. We do not direct this site at children and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this notice to reflect changes in our services, providers or legal obligations. The current version identifier is 2026-08-27a; the version you consented to is stored alongside your enquiry. Material changes will be reflected here with an updated version identifier, and where the law requires it we will ask for renewed consent.