FunnelCraft
LEGAL & PRIVACYEU GDPR & ePrivacy Compliant

Privacy Policy & Data Protection

FunnelCraft Agency Partnerships ("FunnelCraft", "we", "us", or "our") is committed to protecting the privacy, confidentiality, and data security of our partner digital agencies, software houses, and visitors across the United States, United Kingdom, Australia, United Arab Emirates, and the European Union.

Last Updated: September 3, 2026 • Effective Date: September 3, 2026

1. Data Controller & Contact Information

FunnelCraft operates as the Data Controller for personal data collected through funnelcraft.online. If you have questions about this Privacy Policy, your data rights, or wish to exercise your statutory rights under the General Data Protection Regulation (GDPR) or ePrivacy Directive, please contact our Data Protection Officer:

Data Controller: FunnelCraft Agency Partnerships
Target Markets Served: United States, United Kingdom, Australia, United Arab Emirates (GCC), and European Economic Area (EEA).

2. Personal Data We Collect

We process personal data provided directly by you when submitting lead scoping forms or interacting with our platform:

  • Identity & Professional Data: Full name, work email address, agency name, country of residence, contact phone number, and agency website URL.
  • Scoping & Project Details: Technical requirement notes, service tags, source URL paths, and scoping messages.
  • Technical & Usage Data: IP address, browser user-agent string, operating system metadata, and referral headers collected for security, rate-limiting, and fraud prevention.
  • Cookie & Preference Data: User consent state for performance analytics and session preferences.

3. Lawful Basis for Processing (GDPR Art. 6)

Under EU GDPR Article 6, we process your personal data under the following lawful bases:

Legitimate Interest (Art. 6(1)(f))

Processing B2B agency scoping inquiries, preventing brute-force submission spam, and maintaining platform security.

Explicit Consent (Art. 6(1)(a))

Setting non-essential analytics cookies or optional marketing tracking via our ePrivacy consent manager.

4. Data Retention & Third-Party Processors

We do not sell, rent, or trade personal data to third parties. Data is processed solely by verified infrastructure providers under strict Data Processing Agreements (DPAs):

  • Resend, Inc. (Transactional Email Dispatch): Encrypted email notifications sent to FunnelCraft key account managers upon lead submission.
  • Prisma & Persistent Infrastructure: Encrypted database storage for agency partner inquiries.
  • Google Tag Manager / Analytics (Optional): Fired strictly in accordance with Google Consent Mode v2 only after user opt-in.

Data Retention Period: Lead scoping data is retained for a maximum of 24 months from submission date unless an ongoing partner agreement is established, or unless erasure is requested.

5. Your Statutory Rights (GDPR & International)

Regardless of whether you are located in the EU, UK, US, Australia, or UAE, FunnelCraft grants you full control over your personal data:

Right of Access (Art. 15): Request a copy of all personal data held about you.
Right to Erasure (Art. 17): Request deletion of your personal data ("Right to be Forgotten").
Right to Rectification (Art. 16): Correct inaccurate or incomplete contact details.
Right to Object (Art. 21): Object to processing based on legitimate interest at any time.

To exercise any of these rights, email us at partner@funnelcraft.online. Requests are processed within 24 business hours free of charge.

6. International Transfers & Ad Network Compliance

Our platform complies with standard Data Transfer Frameworks (including EU Standard Contractual Clauses SCCs) for international transfers between the US, UK, Australia, UAE, and EU.

Ad Network Verification (Meta Ads & Microsoft Bing Ads): This Privacy Policy satisfies all advertiser transparency requirements for Meta Lead Ads, Google Ads, Microsoft Advertising, and LinkedIn Marketing Solutions.

Privacy Summary

Strict NDA Commitment on all Agency Client Work
Zero Selling or Renting of Partner Data
256-bit SSL Encrypted Transit & Persistence
Free Data Erasure upon Email Request