Privacy and cookies policy

Last updated: 13/01/2025

Flowify ("we", "us", or "our") is committed to protecting the privacy of our users. This policy explains how we collect, use, and manage personal data, as well as our use of cookies on our website.

1. Data Controller
Flowify operates as a sole trader under the direction of Charlie Brook, CEO and Data Protection Officer (DPO). You can contact us regarding privacy matters at info@flowify.works.

2. Information We Collect
We collect and process the following personal data:NameEmail addressCompany namePhone numberPayment detailsWe do not collect special categories of personal data.

3. How We Collect Data
We collect personal data through:Website forms (e.g., account registration, contact forms).Cookies and analytics tools (e.g., Google Analytics, Posthog).

4. Purpose and Legal Basis for Processing
We process personal data for the following purposes and under the corresponding legal bases:Marketing: With the user’s consent.Account setup and management: Necessary for contract performance.Processing payments: Necessary for contract performance.We do not engage in automated decision-making or profiling.

5. Third-Party Tools and Data Sharing
We use the following tools to enhance our services:
Stripe: For secure payment processing.Google Analytics and Posthog: For website analytics.We do not share your personal data with third parties for marketing purposes.

6. International Data Transfers
We do not transfer personal data outside the UK.

7. Cookies
Cookies are small text files stored on your device to improve your experience. We use the following types of cookies:
Essential cookies: Required for the operation of our website.
Analytics cookies: To understand user interactions and improve our services.
Marketing cookies: To deliver relevant content and advertising.

Cookie Consent
Our website displays a cookie banner allowing users to consent or reject non-essential cookies. We securely store and manage user consent.

8. Data Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations (e.g., tax laws), and protect our legitimate interests. Retention periods are determined based on the type of data and its use.

9. Data Security
We implement appropriate technical and organizational measures, including secure servers, to protect personal data against unauthorized access, disclosure, alteration, or destruction.

10. Your Rights
Under the UK GDPR, you have the following rights:Access your data.Rectify inaccurate or incomplete data.Request deletion of your data.Restrict or object to data processing.Data portability.To exercise these rights, contact our DPO at info@flowify.works.

11. Policy Updates
We review and update this policy annually or immediately after significant changes to our operations or data processing practices. Users will be notified of changes via email or a website announcement.