Privacy Policy

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide, including:

• Name and contact details (email address, phone number)
• Business name and job title
• Billing and payment information
• Communication preferences
• Any information you provide through our contact forms or during consultations

2.2 Automatically Collected Information

When you access our website or services, we may automatically collect:

• IP address and device identifiers
• Browser type and operating system
• Pages visited and time spent on our website
• Referring website addresses
• Cookies and similar tracking technologies

2.3 Service Usage Data

For clients using our automation services (including Enquiry and Voice AI), we may process data related to your business operations, such as lead enquiries, customer communications, and workflow data. This data is processed solely to provide and improve our services.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Respond to your enquiries and provide customer support
• Send promotional communications (with your consent)
• Analyse usage patterns to enhance user experience
• Comply with legal obligations
• Protect against fraudulent or illegal activity

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Contract: Processing necessary to fulfil our contractual obligations to you
• Consent: Where you have given explicit consent for specific processing activities
• Legitimate Interests: Processing necessary for our legitimate business interests, provided they don't override your rights
• Legal Obligation: Processing required to comply with applicable laws

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist in providing our services (hosting, analytics, payment processing)
• Business Partners: Integration partners necessary for service delivery
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. When data is no longer needed, we will securely delete or anonymise it.

Requests to our public MCP endpoint are logged for abuse prevention and rate limiting. We never store raw IP addresses for this purpose — each address is one-way hashed (SHA-256 with a secret salt) before it is written, and these logs are automatically purged after 30 days.

7. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request restriction of processing
• Portability: Request transfer of your data to another service
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at Management@flowgenixautomations.com.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website. You can control cookie preferences through your browser settings. Essential cookies are necessary for website functionality, while analytics and marketing cookies require your consent.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. International Transfers

If we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your information.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware of such collection, we will take steps to delete the information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.