Short version: we collect only what we need to answer your enquiry and deliver the work, we do not sell it, this site sets no tracking cookies, and you can ask us to delete your data at any time.
On this page
01Who we are
FlowStack Consultancy is a trading name of Omelia Ventures based in the United Kingdom. For the purposes of UK data protection law, FlowStack Consultancy is the data controller for personal data collected through this website and in the course of providing services.
| Contact | hello@flowstackconsultancy.com |
|---|---|
| Telephone | 07353 482403 |
| Postal address | Suite 723, 80A Ruskin Avenue, Welling DA16 3QQ |
| ICO registration | [ICO REGISTRATION NUMBER] |
This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it. It applies to visitors to flowstackconsultancy.com, people who contact us about our services, and clients.
02The information we collect
Information you give us
- Enquiry and booking details — your name, email address, telephone number where you provide it, the company you represent, and whatever you choose to tell us about the process you would like to automate.
- Client and project information — during an engagement, the contact details of the people we work with, together with any information about your systems and processes that is necessary to deliver the work.
- Billing information — the details needed to raise and settle invoices. We do not collect or store card details; payment is by bank transfer.
Information collected automatically
This site does not use analytics, advertising or tracking scripts. Our hosting provider processes standard server and security logs, which may include IP addresses, for the purpose of delivering the site and protecting it from abuse.
Information we do not want
Please do not send us special category data — health information, biometric data, information about political or religious beliefs, and similar — unless we have specifically agreed that it is necessary for an engagement.
03Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and arranging discovery calls | Legitimate interests — responding to someone who has approached us |
| Preparing proposals and scoping work | Steps taken at your request before entering a contract |
| Delivering the agreed services | Performance of a contract |
| Invoicing, accounting and tax records | Legal obligation |
| Keeping records of past work and correspondence | Legitimate interests — running and defending the business |
| Occasional follow-up about services to existing or prospective business clients | Legitimate interests, with an opt-out in every message |
We do not sell personal data, and we do not use it for automated decision-making or profiling.
05How long we keep it
- Enquiries that do not become engagements — up to 24 months from the last contact, then deleted.
- Client records and project documentation — for the duration of the engagement and six years afterwards, to cover our legal, tax and professional obligations.
- Financial records — six years from the end of the relevant tax year, as required by HMRC.
- Credentials and system access — revoked and deleted at handover, or immediately on request.
06How we protect it
Access to business systems is protected by unique passwords held in a password manager and by multi-factor authentication where the provider supports it. Client system credentials are held only for as long as an engagement requires them, are never shared, and are handed back or revoked at the end of the work. Devices are encrypted at rest.
No system is perfect. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and tell you directly where the law requires it.
07Your rights
Under UK data protection law you have the right to:
- ask what personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- ask us to delete data, where we have no continuing basis to keep it;
- ask us to restrict how we use it, or object to our use of it on legitimate interests grounds;
- receive data you gave us in a portable format;
- withdraw consent at any time, where consent is the basis we rely on.
To exercise any of these, email hello@flowstackconsultancy.com. We will respond within one month, and there is no charge for a reasonable request.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would rather you came to us first, so we have the chance to put it right.
09Changes to this policy
We update this policy when our practices or the services we use change. The date at the top of the page shows when it was last revised. Material changes affecting existing clients will be notified by email.
Questions about any of this: hello@flowstackconsultancy.com.