Privacy Policy

1. Introduction

eflow Ltd (“eflow”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website:
https://eflowglobal.com

This Policy complies with:

• UK General Data Protection Regulation (UK GDPR)

• Data Protection Act 2018

• Privacy and Electronic Communications Regulations (PECR)

• Data (Use and Access) Act 2025 (“DUAA”)

‍‍

2. Data Controller

eflow Ltd is the Data Controller responsible for your personal data.

Contact details:

• Email: dataprotectionofficer@eflowglobal.com

• Phone: +44 (0) 207 101 4493

• Registered office: Davidson House, The Forbury, Reading, RG1 3EU

• Company number: 05066228

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this policy.
‍‍

3. Information We Collect

We may collect and process the following categories of personal data:

3.1 Personal Data

• Name

• Email address

• Phone number

• Address details

• Information submitted via forms or correspondence

3.2 Usage Data

• IP address

• Browser type and version

• Pages visited, time and date

• Device identifiers

3.3 Cookies and Tracking Technologies

We collect data via cookies and similar technologies.

3.4 Location Data

Where enabled via your device.
‍

4. How We Use Your Data

We process personal data for the following purposes:

• To provide and maintain our services

• To respond to enquiries and provide support

• To improve website functionality and performance

• To monitor usage and ensure security

• To send marketing communications (where permitted)

• To comply with legal and regulatory obligations
  ‍

5. Lawful Basis for Processing

We rely on the following lawful bases:

• Contract – to provide requested services

• Consent – for marketing and optional cookies

• Legitimate interests – business improvement, fraud prevention, security

• Legal obligation – regulatory compliance

Where we rely on legitimate interests, we ensure these do not override your rights.

‍

6. Cookies

We use cookies to:

• Enable core website functionality

• Remember preferences

• Analyse usage

A cookie consent banner is used to allow you to accept or reject non‑essential cookies.

You may also control cookies via your browser settings.

‍

7. Data Retention

We retain personal data only for as long as necessary to:

• Fulfil the purposes outlined in this policy

• Comply with legal obligations

• Resolve disputes and enforce agreements

‍‍

8. International Transfers

Your personal data may be transferred outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, including:

• UK International Data Transfer Agreements (IDTAs)

• Standard Contractual Clauses (SCCs)

• Transfers to countries with adequacy decisions

‍

9. Data Sharing

We may share your personal data with:

• Service providers and business partners

• IT and analytics providers (e.g. Google Analytics)

• Regulators or authorities where required by law

All recipients are required to protect your data and process it only for specified purposes.

‍

10. Security of Data

We implement appropriate technical and organisational measures, including:

• Access controls

• Encryption where appropriate

• Secure storage and transfer

However, no system is completely secure and we cannot guarantee absolute security.

‍

11. Automated Decision-Making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

If this changes, we will update this policy and provide appropriate safeguards.

‍

12. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Rectify inaccurate data

• Erase your data

• Restrict processing

• Data portability

• Object to processing

• Withdraw consent

To exercise your rights, contact:
dataprotectionofficer@eflowglobal.com

‍

13. Complaints Procedure (DUAA Compliance)

Under the Data (Use and Access) Act 2025, individuals have the right to submit a data protection complaint directly to us.

13.1 How to Submit a Complaint

You can submit a complaint via:

• Email: dataprotectionofficer@eflowglobal.com

• Phone: +44 (0) 207 101 4493

• Website contact form

‍

13.2 Our Complaints Process

We will:

1. Acknowledge your complaint within 30 days

2. Investigate the issue without undue delay

3. Keep you informed of progress

4. Provide a clear outcome
   ‍

13.3 Escalation

If you are not satisfied, you can contact the Information Commissioner’s Office (ICO):

ICO Contact Details:

• Email: casework@ico.org.uk

• Telephone: 0303 123 1113

• Address:
  Wycliffe House
  Water Lane
  Wilmslow
  Cheshire
  SK9 5AF
  ‍

14. Third-Party Links

Our website may include links to third-party sites.

We are not responsible for their content or privacy practices.

‍

15. Children’s Privacy

Our services are not intended for individuals under 18.

We do not knowingly collect personal data from children.

‍

16. Changes to This Policy

We may update this Privacy Policy from time to time.

Changes will be:

• Published on this page

• Notified where appropriate