Privacy Policy

Last Updated: November 8th, 2025

This privacy policy explains how Leaf Generation (operating under the legal entity Startup Funnels), referred to in this policy as "Leaf Generation", "we", "our", or "us", collects, uses, and protects your personal data when you interact with us, including when you visit our website, join our community, subscribe to services, purchase products, or otherwise engage with our business.

This website and our services are not intended for children, and we do not knowingly collect data related to children.

1. Who We Are

Controller:
Startup Funnels (trading as Leaf Generation) is the controller responsible for your personal data.

If you have any questions regarding this policy or your personal information, please contact us at:
Email: [email protected]
Business Address: [Insert Registered Business Address]

2. Types of Personal Data We Collect

We may collect, store, and process the following categories of data:

Data CategoryExamplesIdentity DataFirst name, last name, username, date of birth (where voluntarily provided).Contact DataEmail address, phone number, billing address, business address.Financial DataPayment card details (processed securely via our payment processors; we do not store full card details).Transaction DataDetails about services purchased, invoices, payment history.Technical DataIP address, browser information, device type, operating system, referring URLs, session activity.Profile DataAccount login details, preferences, interests, purchase history.Usage DataHow you interact with the website, platform features, and digital content.Marketing DataCommunication preferences and engagement with campaigns.

We may also store aggregated or anonymised data that does not identify you personally.

3. How We Collect Personal Data

We collect data through:

Direct Interactions

You provide data when you:

Fill out a form

Subscribe to newsletters or training content

Purchase a service or digital product

Engage with live chat, email, or messaging channels

Automated Tracking

We use:

Cookies

Pixel tracking

Analytics scripts
To better understand user behavior and improve performance.

Third-Party Sources

We may receive data from:

Advertising platforms: Meta, Google, LinkedIn

Analytics tools: Hyros, Google Analytics

Scheduling tools: Calendly

Payment processors: Stripe

4. How We Use Your Data

We use your data to:

Provide and deliver our services

Communicate with you effectively

Improve our programs, products, ad performance, and customer experience

Personalize recommendations and marketing communications (only where permission is granted)

Maintain security, prevent fraud, and comply with legal obligations

Legal Bases for Processing

We rely on:

Performance of Contract (to deliver services you have purchased)

Legitimate Interests (business optimization, analytics, community support)

Consent (for email marketing or promotional messages)

Legal Obligation (record keeping, tax compliance)

5. Sharing Your Data

We may share your information with trusted service providers who assist in delivering our services, including:

Hyros (tracking and attribution)

Meta & Google (advertising)

Zapier / Make / n8n (automation workflows)

GoHighLevel / Skool (CRM, client portals, community platform)

Stripe / PayFunnels (payment processing)

DocuSign (contract signing)

We do not sell your personal data.
We require all third-party processors to maintain data confidentiality and security.

6. International Data Transfers

Some of our service providers are located outside the EU/EEA/UK.
Where transfers occur, we ensure they meet GDPR-aligned safeguards such as:

Adequacy Decisions

Standard Contractual Clauses

7. Data Security

We implement security controls to protect your data, including encryption, limited-access systems, password protection, and secure transmission protocols.
Only authorized personnel may access your data.

8. Data Retention

We retain personal data only as long as necessary for:

Service delivery

Legal and tax compliance

Dispute resolution

Business operations

Typically, client records are retained for up to 6 years unless data erasure is requested sooner (where legally allowable).

9. Your Rights

You have the right to:

Access your personal data

Request correction or deletion

Withdraw marketing consent at any time

Request restriction or transfer of data

Object to processing based on legitimate interests

To exercise your rights, email: [email protected]

10. Complaints

If you are unhappy with how we handle your data, please contact us first.
You may also contact your local data protection authority.
(E.g., Belgium DPA, ICO UK, or your regional regulator.)

11. Updates to This Policy

We may occasionally update this privacy policy.
The latest version will always be published on our website.
Please review it periodically.

12. Third-Party Links

Our website, training platforms, and webinars may link to external sites.
We are not responsible for the privacy policies of external services.