Privacy policy

Who to contact

The Friction Office LLC is responsible for your details. The company was formed in Wyoming, United States. We run the business from Germany.

For help with your data, email mail@thefrictionoffice.com. Our business address is in the legal notice.

What you share

The shop form asks for your brand or business name and public store address. It asks what you sell, your store platform, Instagram handle and follower range. We also ask about current DM tools, your advertising setup and priorities. We need your name and email. A phone number is optional.

You can browse without using the form. We use your name and email to reply. Your business details help us review the setup you want. If you give us a phone number, we may call about this request too.

To send the form, fill in the required fields. A person reviews your answers to see if we could help. These requests do not create email reminders. Share your own business and contact details. Leave out your customers’ details.

These forms ask if you run a business or manage clients. We ask for your niche, your own business or agency name and what you sell. Partners also tell us about their SMM work and a typical client offer. Do not name clients or share their data.

We ask about your audience, goal and whether you have a website. We ask which shop or booking tool you use, who handles DMs and what they do. We ask about spare capacity, who can approve the work and when you could start.

For a direct business, we need its public Instagram handle. A partner can choose to share their own handle. Your follower range, website link, ad details and name are optional.

Choose email OR phone for our reply. We need that one contact detail and your clear request for a reply. You can browse without using a form. To send one, fill in its required fields. Please leave out customer lists, private customer chats, passwords and payment details.

Earlier salon forms still work for cached forms and old requests. They ask for your name, salon name, required phone number and email. They ask for your Instagram handle and follower range. We ask for your website link or whether you have a site. We ask who you use for bookings. We ask if you run Meta or other ads. Where needed, we ask for the names of other booking or ad tools. There may be an optional note.

If you email us, we get your email address and what you write. Do not send patient or customer records. Leave out health details, passwords and payment details too.

What we use it for

A person reviews your ecommerce answers. We reply by email, or by phone if you provide a number. We discuss a plan and full setup for Instagram sales chats. We do not approve or reject you by machine. If you email us, we use what you share to help and reply. We do not add you to a mailing list or send your details to ad tools.

We use an earlier salon enquiry to review your salon’s details. We may contact you by phone or email about a custom Black Friday setup. It helps salons turn Instagram chats into enquiries and bookings. A person reviews the request. We do not approve or reject it by machine. These requests do not create email reminders. We only contact you about that request. You can ask us to stop.

A person reviews your answers to see if we could help. They may check the public business Instagram or website links you give us. We reply by the email OR phone you choose. We do not look up extra data by machine. We do not use AI to review you. We do not add you to marketing or share your answers with a referrer.

We use basic web data to run the site and block spam. This can include your IP address and details about the web request. Your IP address is the address your device uses to reach the site. Cloudflare may keep service and error records too. We have turned off sampled request traces in our Worker settings.

The checks below protect earlier salon forms and any live ecommerce or business and social media partner form. They do not run for a form preview.

The form uses a code made from your IP address to limit repeat requests. That code can still be linked to you. Our form code does not log your name, phone number or answers.

Cloudflare Turnstile runs a spam check in your browser. It uses device and browser signals to help tell people from bots. We check its one-use token on our server before we send your request. See Turnstile’s privacy notice.

We keep two counts of email attempts to limit spam. One is for this hour. One is for today. They hold no name, contact details, IP address, answers or token. New counts replace the old ones when a new time window is used.

Why we may use it

If the contract would be with you as an individual, we use the details needed to act on your request before a contract. This includes sole traders. The legal basis is Article 6(1)(b) of the GDPR. The GDPR is the EU’s data protection law.

If you act for a company or make a general request, we use the details needed to help and reply. Our aim is to handle business requests. The law calls this a “legitimate interest” under Article 6(1)(f).

We have a legitimate interest in a safe, working site and in blocking spam. We use Article 6(1)(f) for that too. We must weigh those needs against your rights. We cannot use your details for any purpose we want.

Asking us to reply does not sign you up for marketing. We do not use a mailing-list sign-up or blanket consent to handle your request.

Where your details go

Cloudflare, Inc. hosts and protects this site. Submitted enquiries use the existing protected delivery path through Cloudflare. This includes saved earlier salon enquiries. They go to our Google Workspace inbox at mail@thefrictionoffice.com. We use Gmail to read and store them and to reply. The site does not keep a second full copy in a customer database. We do not save form answers in your browser’s local storage. We do not send them to an AI model or use an AI service to add more data. The old salon and shop forms do not look up other data from your handle or site. A person may review the public business links you give us. This applies to the new business and social media partner forms. There is no automatic lookup or enrichment.

The shop enquiry uses that same protected email path. Its phone field is optional. If you add a number, we may call about that request.

The new forms use the same Cloudflare to Google Workspace email path. There is no new database. The 90-day rule below applies to copies we control. Instagram applications are not active.

Did you ask for a reminder through our earlier Google Maps offer? Cloudflare stores your email address and the month we asked about. It stores the reminder and expiry times and send status too. It keeps a code to check your private answer link. The code is stored as a hash. Google Workspace sends the reminder. Your later answer goes to our inbox. It is not kept in the reminder record. These details stay tied to that Maps request.

Cloudflare may handle web and form data outside the EU. This includes the United States. Its data terms include the EU’s standard contract clauses where needed. These rules help protect data sent abroad.

You can also read Cloudflare’s list of service providers and privacy policy. Email us to learn more or get a copy of the rules for those transfers.

Form details pass through Cloudflare before they reach Google Workspace. These providers can see the content. There is no end-to-end encryption that hides it from all providers. Cloudflare may hold content as part of its email service too. Our inbox may not be the only copy held by a provider.

Google handles email content for us under its data terms. Google and its providers may handle data outside the EU. This includes the United States. The agreement sets rules for those transfers. These include the EU’s standard contract clauses where they apply. Google also explains the data transfer framework it uses.

Google’s Cloud Privacy Notice covers service data, such as account and usage records. It does not cover the content of your emails. You can also read its Workspace service provider list. Email us to learn more or get a copy of the rules for those transfers.

How long we keep it

If you do not become a client, we keep enquiry details and emails for up to 90 days. That time starts from your request or your last reply about it. We count from the later date. We delete them sooner when we no longer need them. A reminder from us does not restart that time.

Old Google Maps reminder records delete on their own 90 days after the original request. This applies even if you do not answer. The private answer page has a cancel-and-delete button too. We clean up enquiry emails by hand. This covers copies we control in our inbox, sent mail, archive, trash and saved files. We finish deleting them within the time limit. Moving them to trash is not enough.

We keep records that the law requires for the time it requires. The basis is Article 6(1)(c). We may need a record for a legal claim. We keep it while that need lasts under Article 6(1)(f). We record why we must keep it. We set it apart and use it only for that need. We do not use it to follow up with you.

If you become a client, we explain the data rules for that work on their own. Cloudflare and Google keep some service and security records and backups under their own rules. The 90-day limit covers enquiry copies we control. It does not promise to wipe all provider backups at once.

Cookies and tracking

Our site code does not set cookies or run ad trackers. It does not save form answers in your browser’s local storage. Fonts come from this site.

Cloudflare may use service data and security tools to protect the site. Hosting the site can create logs.

Your choices

You can ask us to stop calling or emailing about your request. You can ask to see, fix or delete the details we hold about you. Email mail@thefrictionoffice.com.

You may have the right to limit how we use your details. You may also ask for them in a form you can take elsewhere. The law sets terms for these rights.

If we rely on a legitimate interest, you can object at any time. Give us the reasons linked to your situation. We must stop unless we have strong legal grounds that outweigh your rights. We may also keep using the details if we need them for a legal claim.

If we rely on your consent, you can take it back at any time. This does not change what was lawful before you did so.

You can complain to a data protection authority. It can be in the EU country where you live or work. It can also be where you think a breach took place. We may need to check who you are before we share or change private details.

A person handles your request. This includes earlier salon enquiries and emails. The forms do not ask for revenue. We do not use AI or a score to choose who we work with. No machine makes decisions with legal or other major effects. Submitted enquiries run checks for errors and spam.

If this changes

We update this page when the way we use your details changes. The date at the top shows when we last changed it.