As a UK-based organisation, we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. These laws ensure that your personal data is:

• Processed lawfully, fairly, and transparently.
• Collected for specified, legitimate purposes and not further used in an incompatible way.
• Accurate, kept secure, and not retained longer than necessary.

Your rights under these laws include:

• Accessing the data we hold about you.
• Correcting inaccurate or incomplete data.
• Requesting deletion of your personal information where appropriate.

If you have any questions about these rights or how they apply, feel free to contact us.

To deliver our services effectively, we may need to collect basic personal information, such as:

• Your first and last name.
• Your company name.
• Your email address.
• Any messages or queries you submit through our website forms.

This data is collected exclusively to help us provide and tailor our services to meet your needs. It is never shared without your consent.

The data you share with us is securely stored and used only for the following purposes:

• Communicating with you about your inquiries, projects, or updates.
• Enhancing and personalising your experience with Flow Strategies.

We only contact you when you’ve given us explicit consent to do so.

Our website, hosted on Bluehost, uses cookies to improve your experience. Cookies are small, harmless text files stored on your device that help us:

• Remember your preferences.
• Analyse how you use our website, such as which pages you visit most often.

Cookies carry data, not code, and cannot harm your device. You can manage or disable cookies through your browser settings if you prefer.

We take data security seriously and employ several measures to protect your information:

• Secure hosting: Our website is hosted on Bluehost, a trusted provider with strong security protocols.
• Encryption and cloud storage: Your data is stored securely in encrypted, cloud-based systems.
• VPN Use: We use Virtual Private Networks (VPNs) for secure and encrypted internet connections.
• Regular reviews: Our security practices are continuously updated to combat new cyber threats.

To ensure data minimisation, all client data is scheduled for deletion within six months of project completion unless required otherwise. This reduces risks and ensures we handle your information responsibly.

Our website may mention other organisations we’ve worked with to highlight our experience. However, we are not responsible for the content, policies, or practices of external websites.

Under UK data protection laws, you have the right to:

• Access the information we hold about you.
• Request corrections to inaccurate or incomplete data.
• Ask for your data to be deleted when no longer needed.

If you have any concerns or wish to exercise these rights, contact us at hello@flowstrategies.co.uk. We are here to address your questions transparently and ensure your peace of mind.