Privacy Policy
What we collect, why, who else sees it, and how to get it back or removed.
Who we are
Flexify Ltd is the data controller for this website and for the services we provide. We are registered in England and Wales, company number 16871618, at Unit 82a James Carter Road, Bury St Edmunds IP28 7DE, United Kingdom. For anything in this policy, write to info@flexify.ltd.
This policy covers flexify.ltd. Our products — FlexifySuite, FlexifyDine and our Shopify apps — process data under their own terms, because there we usually act as a processor for the business using them rather than as controller.
What we collect, and why
When you use the contact form
We collect your name, email address, company name if you give one, what you need help with, and your message. We use it to answer you and, if we work together, to deliver the work. The lawful basis is our legitimate interest in responding to enquiries, and performance of a contract once one exists.
When you subscribe to the newsletter
We collect your email address only. We use it to send occasional updates about our work and products. The lawful basis is consent, which you give by subscribing and can withdraw at any time using the unsubscribe link in every email or by emailing us. We do not add people who have only sent an enquiry.
When you book a call
Booking runs through Calendly. You give them your name, email and chosen time, and we receive that booking. Calendly's own privacy terms apply to their handling of it.
When you message us on WhatsApp
Your phone number and messages are visible to us and are processed by WhatsApp under their own terms. If you would rather not use it, email works just as well.
When you browse the site
With your consent, Google Analytics tells us which pages are read and roughly where visitors come from. It does not tell us who you are. Nothing analytics-related is set until you accept — see our cookie policy. Separately, our hosting provider keeps standard server logs, including IP addresses, for security and troubleshooting. That is our legitimate interest in keeping the site available and secure.
What we do not do
- We do not sell personal data, ever.
- We do not run advertising or remarketing cookies on this site.
- We do not use your data to train AI models.
- We do not make automated decisions that produce legal effects about you.
- We do not knowingly collect data from children under 13.
Who processes data on our behalf
We keep this list short on purpose. Each of these providers is bound by contract to process data only on our instructions.
| Provider | What for | What they see |
|---|---|---|
| Hostinger | Website hosting | Server logs, including IP addresses |
| Web3Forms | Contact form delivery | What you type into the form |
| MailerLite | Newsletter | Your email address and subscription activity |
| Google Analytics | Website analytics, with consent | Pages viewed, approximate location, device |
| Calendly | Call booking | Name, email and meeting time |
International transfers
Some of these providers are based outside the UK, mainly in the United States. Where data leaves the UK it is transferred under the safeguards those providers offer, such as the UK extension to the EU–US Data Privacy Framework or the International Data Transfer Addendum to the standard contractual clauses.
How long we keep things
- Enquiries that do not become work — up to two years, then deleted.
- Client records — for the duration of the engagement, then six years to meet UK accounting and tax requirements.
- Newsletter subscribers — until you unsubscribe, and removed promptly after.
- Analytics — retained by Google for fourteen months.
- Server logs — a matter of weeks, as set by our host.
Your rights
Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or send it to someone else. You can object to processing based on legitimate interests, and withdraw consent for anything based on consent. Exercising any of these costs nothing and will not affect how we treat you.
Email info@flexify.ltd and we will respond within one month. We may ask you to confirm your identity first, so that we do not hand your data to somebody else.
Complaints
If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.
Security
The site is served over HTTPS. Access to enquiry and client data is limited to the people who need it. No system is perfect, and we will not pretend otherwise — if a breach affects you and carries real risk, we will tell you and the ICO within the required timescales. Security issues can be reported to us directly; see our security page.
If any part of this site is difficult for you to use, our accessibility statement explains what we have done and how to tell us.
Changes to this policy
If we change how we handle personal data we will update this page and the date at the top. Material changes affecting people already on our list will be told directly rather than left here to be discovered.
Flexify Ltd is registered in England and Wales, company number 16871618, at Unit 82a James Carter Road, Bury St Edmunds IP28 7DE.