1. Introduction
Flowmap ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
We act as a data controller for information collected through our website and as a data processor when providing identity verification and compliance services to our clients. This Privacy Policy primarily addresses our role as a data controller.
2. Data Controller Information
Flowmap Ltd
1st Floor, 286C Chase Road
Southgate Office Village Block H
London N14 6HF
United Kingdom
For questions about this Privacy Policy or to exercise your rights regarding your personal data, please contact our Data Protection Officer at:
Email: [email protected]
Phone: +44 203 287 0054
3. Information We Collect
3.1 Information You Provide to Us
We may collect personal information that you voluntarily provide when visiting our website, using our services, or communicating with us, including:
- Contact information (name, email address, phone number, company name)
- Account credentials (username, password) if you create an account
- Business information (job title, department, company needs)
- Information provided in forms, surveys, or other interactive features
- Communication content and metadata when you contact us
3.2 Information Collected Automatically
When you visit our website, we may automatically collect certain information about your device and usage patterns, including:
- IP address, browser type, operating system, and device information
- Pages visited, time spent on pages, links clicked, and browsing patterns
- Referral sources and exit pages
- Time and date of your visits
We collect this information using cookies and similar technologies. For more information about our use of cookies, please see our Cookie Policy.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Consent: Where you have explicitly agreed to the processing of your personal data for specific purposes.
- Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
- Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided these interests are not overridden by your rights and freedoms.
- Legal Obligation: Where processing is necessary to comply with our legal obligations.
5. How We Use Your Information
We use the information we collect for various purposes, including:
- Providing, maintaining, and improving our website and services
- Processing and fulfilling your requests, inquiries, and transactions
- Communicating with you about our services, updates, and promotions
- Personalizing your experience and delivering tailored content
- Analyzing usage patterns to improve our website and services
- Detecting, preventing, and addressing technical issues, fraud, or illegal activities
- Complying with legal obligations and enforcing our terms and policies
6. Data Sharing and Disclosure
We may share your personal information with the following categories of recipients:
- Service Providers: Third-party vendors who perform services on our behalf, such as hosting, analytics, customer service, and marketing.
- Business Partners: Companies with whom we collaborate to offer joint services or promotions.
- Legal Requirements: When required by law, regulation, or legal process, or to protect our rights, property, or safety.
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets.
- With Your Consent: In other circumstances where we have your explicit consent.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.
7. International Data Transfers
We primarily process and store your personal data within the United Kingdom and the European Economic Area (EEA). However, some of our service providers may be based outside these regions, which may involve the transfer of your personal data to countries with different data protection laws.
When transferring personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission or UK authorities
- Binding Corporate Rules for transfers within a corporate group
- Adequacy decisions recognizing that certain countries provide adequate protection
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.
To determine the appropriate retention period, we consider:
- The amount, nature, and sensitivity of the personal data
- The potential risk of harm from unauthorized use or disclosure
- The purposes for which we process the data and whether we can achieve those purposes through other means
- Applicable legal, regulatory, or contractual requirements
When personal data is no longer needed, we will securely delete or anonymize it.
9. Your Data Protection Rights
Under the UK GDPR and related data protection laws, you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete personal data.
- Right to Erasure: You can request deletion of your personal data in certain circumstances.
- Right to Restrict Processing: You can request that we limit the processing of your personal data.
- Right to Data Portability: You can request a copy of your data in a structured, machine-readable format for transfer to another provider.
- Right to Object: You can object to our processing of your personal data in certain circumstances.
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time.
- Right to Complain: You have the right to lodge a complaint with a supervisory authority.
To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 2. We may need to verify your identity before responding to your request.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:
- Encryption of sensitive data in transit and at rest
- Regular security assessments and penetration testing
- Access controls and authentication mechanisms
- Regular backup procedures
- Staff training on data protection and security
While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to implementing reasonable security measures.
11. Children's Privacy
Our website and services are not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected personal data from a child, please contact us immediately, and we will take steps to delete such information.
12. Third-Party Links
Our website may contain links to third-party websites, plugins, or applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit.
13. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and use personal information about you. For more detailed information about the cookies we use, the purposes for which we use them, and how to control them, please see our Cookie Policy.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make.
We encourage you to periodically review this page for the latest information on our privacy practices. The "Last updated" date at the top of this Privacy Policy indicates when it was last revised.
15. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at:
Email: [email protected]
Phone: +44 203 287 0054
Mail: Data Protection Officer, Flowmap Ltd, 1st Floor, 286C Chase Road, Southgate Office Village Block H, London N14 6HF, United Kingdom
16. Supervisory Authority
If you are located in the United Kingdom and believe we are processing your personal data in violation of applicable law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk
Phone: 0303 123 1113