Privacy Policy

This may include your name, email address, phone number, and any messages or comments you provide.

We may also collect information automatically, such as your IP address, browser type, and website usage, to improve our services.

2. How we use your information

We process your personal data for purposes including:

• Providing, maintaining and improving our services
• Processing enquiries, orders and payments
• Sending updates, security alerts and support messages
• Responding to your comments and customer service requests
• Marketing and promotional communications, with consent
• Monitoring and analysing website usage and trends

We ensure all processing has a lawful basis under UK GDPR, such as consent, contractual necessity, or legitimate interest.

3. Information sharing

We do not sell your personal data. We may share information in the following circumstances:

• With your consent
• To comply with legal obligations
• To protect our rights, property or safety
• With trusted service providers who assist in operating our services

The service providers we use fall into these categories:

• Hosting our website and storing our data
• Keeping encrypted backups of our data
• Sending email, such as replies to your enquiry, account messages and invoices
• Secure sign in to our client portal
• Taking payments
• Protecting our forms from spam and automated abuse
• Measuring how our website is used
• Detecting and fixing errors on our website, with personal details removed before an error report is sent

Each provider is bound by a data processing agreement that requires them to keep your data secure and to use it only to provide their service to us. Some may also use limited data for their own legitimate purposes, such as preventing fraud and misuse of their service.

4. International transfers

Some of our service providers store or process data outside the UK, for example in the European Union or the United States. Where your data leaves the UK, it is protected either by a UK adequacy decision or by the UK International Data Transfer Addendum to the standard contractual clauses approved by the Information Commissioner.

5. Data security

We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised access, alteration, disclosure or destruction. However, no system is completely secure.

6. Cookies and tracking

We use cookies and similar technologies to improve your experience, remember preferences and analyse site usage. You can manage or disable cookies via your browser settings.

7. Your rights

Under UK GDPR, you have the following rights:

• Access, update or request deletion of your personal data
• Withdraw consent at any time
• Object to processing for marketing purposes
• Request data portability

8. Data retention

We retain personal data only as long as necessary for the purposes outlined, or as required by law. Once no longer needed, we securely delete or anonymise the data.

We keep encrypted backups of our systems so we can recover from a fault. Daily backups are deleted after 90 days and monthly backups after 12 months, so data we delete is also removed from our backups within that time.

9. Changes to this policy

We may update this Privacy Policy occasionally. We will notify you by updating the “Last updated” date and, where appropriate, via direct communication.

10. Contact us and complaints

If you have a question about this policy or want to exercise any of your rights, email info@flvngroup.com or write to FLVN Group Limited, 86-90 Paul Street, London EC2A 4NE.

If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to resolve your concern first, so please contact us before you do.