Privacy Policy

Last updated: 1 January 2025

1. Who we are

NodeFlow Cloud Ltd ("we", "us", "our") is a company registered in England and Wales under company number 14872391. Our registered address is 11 Central Hill, London SE19 1BG. We are the data controller for personal data collected through this website.

You can contact us about data protection matters at: [email protected]

2. What personal data we collect

We collect personal data in the following ways:

Contact form

When you submit our contact form, we collect: your name, email address, company name (optional), and the content of your message. We use this data to respond to your enquiry.

Analytics cookies

If you accept analytics cookies, we collect anonymised data about how you use this website, including pages visited, time spent, and general location (country level). We do not collect personal identifiers through analytics.

Server logs

Our web hosting provider automatically collects standard server log data including IP addresses, browser type, and pages requested. This data is retained for up to 30 days for security purposes.

3. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

  • Legitimate interests (Article 6(1)(f)): responding to enquiries, server log retention for security purposes, and analytics (where cookies are accepted).
  • Consent (Article 6(1)(a)): analytics cookies, where you have given consent via our cookie banner.
  • Contract (Article 6(1)(b)): processing necessary for the performance of a contract with you, including service delivery and invoicing for clients.

4. How we use your data

We use the personal data we collect to:

  • Respond to enquiries submitted through our contact form
  • Communicate with existing and prospective clients about our services
  • Understand how our website is used and improve its content
  • Comply with legal obligations

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling.

5. Data sharing

We share personal data only in the following circumstances:

  • With our hosting provider (for server infrastructure and log retention)
  • With analytics service providers (where you have consented to analytics cookies)
  • Where required by law or to protect our legal rights

Any third parties with whom we share data are required to process it in accordance with applicable data protection law.

6. Data retention

Contact enquiries: we retain email correspondence for up to 3 years from the date of last contact. Client engagement records are retained for 7 years in accordance with UK tax law requirements. Analytics data is aggregated and anonymised and is not subject to a retention limit. Server logs are retained for 30 days.

7. Your rights

Under UK GDPR you have the following rights in relation to your personal data:

  • Right of access: you can request a copy of the personal data we hold about you.
  • Right to rectification: you can ask us to correct inaccurate data.
  • Right to erasure: you can ask us to delete your data in certain circumstances.
  • Right to restrict processing: you can ask us to limit how we use your data.
  • Right to data portability: you can ask us to provide your data in a machine-readable format.
  • Right to object: you can object to processing based on legitimate interests.
  • Right to withdraw consent: where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use essential cookies (required for the website to function) and, with your consent, analytics cookies. For full details see our Cookie Policy.

9. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction. Our website uses HTTPS. Access to personal data is restricted to individuals who need it for their work.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of the website after changes constitutes acceptance of the updated policy.

11. Contact

For data protection queries: [email protected] or by post to NodeFlow Cloud Ltd, 11 Central Hill, London SE19 1BG.