Privacy Policy

1. Who’s collecting your data

SIA BMOptimize, a private limited company registered in Latvia (registration number 40203359436), is the data controller for personal data collected through fixmyworkflow.com. FixMyWorkflow is a brand of SIA BMOptimize.

Registered address: Cēsu nov., Vaives pag., Krīvi, "Bērzi 3" - 23, LV-4136, Latvia. Contact: contact@bmoptimize.com.

This policy explains what we collect, why, who we share it with, and your rights under the EU General Data Protection Regulation (GDPR).

2. What we collect

When you request a free page design (the main form on this site), we collect: the kind of business you run, and if you pick “something else” the description you type; what you spend on ads each month, as a band rather than an exact figure; your website address, which is optional and may be left blank; your name; and your email address. We also record which button on the page you opened the form from.

From your answer about ad spend we derive and store a single yes or no flag recording whether the request qualified for the free design. No other profiling is done.

If you ask for the email course from the page shown to requests that do not qualify, we collect your name, your email address, and whether you separately ticked the newsletter box. Asking for the course is its own opt in: submitting the design request form does not subscribe you to anything.

We do not collect payment information. There is no checkout on this Site at this time.

We also receive technical and usage data automatically: IP address (used for rate limiting and abuse prevention), browser and device information, referral URL, and behaviour on the Site if, and only if, you accept analytics cookies.

3. Why we collect it (lawful basis)

• Steps prior to a contract (Art. 6(1)(b) GDPR): handling your free design request, preparing the design, and contacting you to arrange the call where it is presented. This is work you asked us to do, so it does not rest on marketing consent and withdrawing consent to marketing does not stop it.
• Consent (Art. 6(1)(a) GDPR): the email course and the optional Solo Operators Manifest newsletter. Each has its own checkbox or its own button. Nothing else on the Site subscribes you to anything.
• Legitimate interest (Art. 6(1)(f) GDPR): rate-limiting the API to prevent abuse, basic site analytics to improve the Site, and securing our systems.

4. Where your data lives

We use the following processors:

• Brevo (sib SAS, France) for storing your email and attributes, sending emails, and managing lists. Hosted in the EU.
• Vercel (Vercel Inc., USA) for hosting the Site and its serverless functions. Data is processed in the region nearest you and routed through US infrastructure. Vercel is certified under the EU-U.S. Data Privacy Framework.
• Google Analytics, Google Tag Manager, Meta Pixel (only if you accept analytics cookies) for anonymized usage measurement.

Each processor is bound by a Data Processing Agreement (DPA) and processes data only on our documented instructions.

5. How long we keep it

• Email list contacts: retained until you unsubscribe or ask us to delete you.
• Quiz attribute data: retained for as long as your contact record exists in Brevo.
• Server logs and analytics: retained according to the processor’s default retention (typically 14 to 26 months), except where shorter retention is required by law.

6. Your GDPR rights

You have the right to:

• access the personal data we hold about you,
• correct inaccurate or incomplete data,
• request deletion (the “right to be forgotten”),
• restrict or object to processing,
• receive your data in a portable, machine-readable format,
• withdraw consent at any time (without affecting processing done before withdrawal),
• lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or the supervisory authority in your country of residence.

To exercise any of these rights, email contact@bmoptimize.com. We respond within 30 days.

7. Cookies and tracking

We use cookies and similar technologies for:

• Essential: rate-limiting, fraud prevention, and basic Site functionality. No consent required.
• Analytics (Google Analytics): anonymized usage measurement. Loads only if you accept.
• Marketing (Meta Pixel): audience measurement for any future advertising. Loads only if you accept.

You can change your cookie preferences at any time through the cookie banner or by clearing cookies in your browser.

8. Sharing with third parties

We do not sell your data. We share it only with the processors listed in section 4, and only as needed to operate the Site and the email list.

We may disclose data if required by a valid legal order under Latvian or EU law, or to protect against fraud or abuse.

9. International transfers

Some processors (notably Vercel and the US-based analytics services) may transfer or process data outside the European Economic Area. Where they do, transfers are protected by:

• EU Standard Contractual Clauses, and / or
• the EU-U.S. Data Privacy Framework, for certified US processors.

10. Children

The Site is not directed at children under 16. If you believe a child has provided us with personal data, contact us and we’ll delete it.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top reflects the most recent version. Material changes will be flagged on the Site where reasonably possible.

12. Contact

For any privacy questions, requests, or complaints: contact@bmoptimize.com.

See also our Terms of Service.