Privacy Policy

1. Introduction

Flowtix Ltd ("Flowtix", "we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website flowtix.co.uk or use our services. We are the data controller for the personal data we collect from you, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect and process the following data about you:

• Identity Data: First name, last name, username or similar identifier.
• Contact Data: Email address, telephone numbers, and business addresses for partners.
• Transaction Data: Details about payments to and from you and other details of services you have purchased from businesses via our platform. We do not store full credit card details on our servers; these are securely managed by Stripe.
• Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, operating system, and platform.
• Usage Data: Information about how you use our website, products, and services.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Performance of Contract: To process and confirm bookings, manage your account, and provide customer support.
• Legitimate Interests: To improve our platform, send technical notices, security alerts, and analyse usage trends to enhance the user experience and our AI features.
• Consent: To send you marketing communications, if you have explicitly opted in. You can withdraw consent at any time.

4. Disclosures of Your Personal Data

When you make a booking, we share necessary information (such as your name, email, and phone number) with the specific business you are booking with so they can fulfil the service. We do not sell your personal data to third parties. We may share data with trusted third-party service providers acting as processors who provide IT and system administration services (e.g., Clerk for authentication, Supabase for secure database hosting, Stripe for payments, and Resend/Twilio for notifications).

5. Data Security & Retention

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. Access to your personal data is limited to those employees, agents, and contractors who have a business need to know.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

6. Your Legal Rights

Under data protection laws, you have rights including:

• Request access: Get a copy of the personal data we hold about you.
• Request correction: Correct any incomplete or inaccurate data we hold about you.
• Request erasure: Ask us to delete or remove personal data where there is no good reason for us continuing to process it.
• Object to processing: Object to our processing of your personal data based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, please email us at privacy@flowtix.co.uk.