FlowState ITFlowstate IT← Back to site

Legal

Privacy Notice

This notice explains what FlowState IT collects, why, and what you can do about it. It is written in plain English and covers the actual ways this site handles your data under the UK GDPR and the Data Protection Act 2018. We keep it specific — no filler.

Who we are

FlowState IT is a UK-based, production-grade SaaS engineering firm building custom, AI-enabled software to a verifiable standard. For any privacy question, or to exercise a right below, email hello@flowstateit.co.uk. (Our company registration and ICO registration number will be published here before public launch — this Phase-1 build runs on a staging URL.)

What we collect, and where

We only collect what you actively submit. There are three capture points on this site:

  • Contact form & scoping-call notes — your name, email, and anything you write in the message field.
  • Book-a-scoping-call wizard — the answers you choose (project type, stage, timeline, budget band, and similar), plus your name and email.
  • AI-Readiness Scorecard — your answers, the resulting score, and your email address when you request the emailed report.

We do not use tracking cookies for advertising, and we do not buy in or enrich your data from third parties.

Why we can use it (lawful basis)

Our lawful basis is your consent: you submit a form or ask us to email a result. Every capture point shows a short consent line before you send anything. You can withdraw consent at any time (see your rights below).

What we do with it

We use your submission to reply to you, to email the results you asked for, and to arrange a fit call. In this Phase-1 build, submissions are delivered to our team by email and server log; the automatic sync into a CRM is pending and will be documented here before it goes live. We never sell your data and we never share it except with the processors that run our email and hosting, under contract.

How long we keep it

We keep enquiry data only as long as needed to answer you and, if you become a client, for the life of that relationship plus the period UK law requires. If nothing comes of an enquiry, we delete it on request or in routine housekeeping.

Your rights

Under UK GDPR you can ask to access, correct, or erase your data, to restrict or object to its use, and to have it ported. Email hello@flowstateit.co.ukand we’ll action it promptly. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

AI disclosure policy

We build AI-enabled software to a verifiable standard, aligned with the EU AI Act from the first line of code. Where a system we build interacts with people using AI — for example a voice or chat agent — it is disclosed as AI, never passed off as human. AI use is mapped, governed, and least-privilege by design; data is handled under UK GDPR, minimised, and stored in the client’s own systems, with a full audit trail.

Last updated: July 2026. We’ll note material changes here.

Book a scoping call