F/M/Wsystems coaching · for solo service businesses
DOC · PRIVACY·privacy policy

Privacy Policy

Last updated: 20 May 2026

1. Who’s collecting your data

BMOptimize SIA, a private limited company registered in Latvia (reg. no. 40203359436), is the data controller for personal data collected through fixmyworkflow.com. Contact: contact@bmoptimize.com.

This policy explains what we collect, why, who we share it with, and your rights under the EU General Data Protection Regulation (GDPR).

2. What we collect

When you sign up via a form on the Site, we collect:

  • Email address (required to send you the course or waitlist updates),
  • First name (derived from your email if you don’t provide one explicitly),
  • Form source and section (which page and which form you used: hero or final-cta),
  • Newsletter opt-in flag (whether you ticked the Substack checkbox),
  • Quiz answers, if you complete the 3-question waitlist quiz (business type, delivery bottleneck, timeline).

We do not collect payment information. There is no checkout on this Site at this time.

We also receive technical and usage data automatically through third-party services: IP address (used for rate-limiting and fraud prevention), browser and device information, referral URL, and behavior on the Site if you accept analytics cookies.

3. Why we collect it (lawful basis)

  • Consent (Art. 6(1)(a) GDPR): sending you the 7-day email course, waitlist updates, and the optional Solo Operators Manifest newsletter. You give consent by submitting a form and, where applicable, ticking the newsletter checkbox.
  • Legitimate interest (Art. 6(1)(f) GDPR): rate-limiting the API to prevent abuse, basic site analytics to improve the Site, and securing our systems.

4. Where your data lives

We use the following processors:

  • Brevo (sib SAS, France) for storing your email and attributes, sending emails, and managing lists. Hosted in the EU.
  • Vercel (Vercel Inc., USA) for hosting the Site and its serverless functions. Data is processed in the region nearest you and routed through US infrastructure. Vercel is certified under the EU-U.S. Data Privacy Framework.
  • Google Analytics, Google Tag Manager, Meta Pixel (only if you accept analytics cookies) for anonymized usage measurement.

Each processor is bound by a Data Processing Agreement (DPA) and processes data only on our documented instructions.

5. How long we keep it

  • Email list contacts: retained until you unsubscribe or ask us to delete you.
  • Quiz attribute data: retained for as long as your contact record exists in Brevo.
  • Server logs and analytics: retained according to the processor’s default retention (typically 14 to 26 months), except where shorter retention is required by law.

6. Your GDPR rights

You have the right to:

  • access the personal data we hold about you,
  • correct inaccurate or incomplete data,
  • request deletion (the “right to be forgotten”),
  • restrict or object to processing,
  • receive your data in a portable, machine-readable format,
  • withdraw consent at any time (without affecting processing done before withdrawal),
  • lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or the supervisory authority in your country of residence.

To exercise any of these rights, email contact@bmoptimize.com. We respond within 30 days.

7. Cookies and tracking

We use cookies and similar technologies for:

  • Essential: rate-limiting, fraud prevention, and basic Site functionality. No consent required.
  • Analytics (Google Analytics): anonymized usage measurement. Loads only if you accept.
  • Marketing (Meta Pixel): audience measurement for any future advertising. Loads only if you accept.

You can change your cookie preferences at any time through the cookie banner or by clearing cookies in your browser.

8. Sharing with third parties

We do not sell your data. We share it only with the processors listed in section 4, and only as needed to operate the Site and the email list.

We may disclose data if required by a valid legal order under Latvian or EU law, or to protect against fraud or abuse.

9. International transfers

Some processors (notably Vercel and the US-based analytics services) may transfer or process data outside the European Economic Area. Where they do, transfers are protected by:

  • EU Standard Contractual Clauses, and / or
  • the EU-U.S. Data Privacy Framework, for certified US processors.

10. Children

The Site is not directed at children under 16. If you believe a child has provided us with personal data, contact us and we’ll delete it.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top reflects the most recent version. Material changes will be flagged on the Site where reasonably possible.

12. Contact

For any privacy questions, requests, or complaints: contact@bmoptimize.com.

See also our Terms of Service.