Privacy notice
Publication status: This is a pre-launch disclosure draft. FlowFix must insert its verified legal entity name, contact details and applicable vendors before launch. It is not a substitute for legal review.
Information we may collect
If you enquire, we may collect your name, business, email address, service interests and the message you submit. If you sign into the portal, an authentication service may process your email and login session. When live voice calls are activated, the voice platform may process call audio, transcripts and call metadata according to the configuration and notices presented before calling.
Why information is used
To answer enquiries, arrange consultations, provide agreed services, secure client accounts, process invoices, provide support and prevent abuse. These activities have different lawful bases under UK GDPR, including pre-contractual steps, contract performance, legitimate interests and applicable consent requirements.
Service providers
Proposed integrations include Retell AI (voice), Google Calendar/Meet (meetings), Supabase (account services), Stripe (payments), Cloudflare (abuse prevention) and an email provider (enquiry delivery). Only providers actually configured and used in production should be included in the final notice, with applicable international transfer safeguards explained.
Retention and your rights
Data should be kept only for the periods necessary for the stated purpose, contractual needs and legal requirements. You may have rights of access, correction, erasure, restriction, objection and complaint to the UK Information Commissioner's Office. The final published policy must identify the controller and usable privacy contact details.
Cookies and technical storage
Necessary authentication storage may be used to keep client sessions secure. Analytics or non-essential tracking should not activate until any required consent and disclosures are in place.