Legal & Compliance

Policy Hub

We take your data and your patients' data seriously. No shortcuts, no shady fine print — just clear policies on privacy, security, and how we operate.

Privacy Policy

How FlowLeads collects, handles, and protects your data and your patients' data across every market we operate in.

Read policy →

Terms of Service

The agreement that governs your use of FlowLeads — what we offer, what you can expect, and what's expected in return.

Read terms →

Cookie Policy

What cookies we use, why we use them, and how you can manage your preferences.

Read policy →

Sub-processors

A full list of third-party providers we use to deliver the FlowLeads service, and their data handling practices.

View list →

Data Processing Agreement

Our standard DPA for clinics who require formal documentation of how we process patient data on their behalf.

View DPA →

Compliance Frameworks

FlowLeads is built to meet the data protection obligations that matter to NZ and Australian allied health providers.

NZ Privacy Act 2020 Health Information Privacy Code 2020 Australian Privacy Principles (APP) GDPR (EU/UK) Infrastructure: SOC 2 Type II Data hosted in ANZ (AWS Sydney)

Questions about our policies?

Our team is happy to answer compliance questions, provide a Data Processing Agreement, or discuss your specific requirements.

Contact us →