Privacy Policy

1. Introduction

Flow Sleep Repeat Ltd ("we", "us", "our") operates FlowsReport, a commissioning and asset tracking platform for data center contractors. This Privacy Policy explains how we collect, use, and protect your information.

2. Information We Collect

We collect information you provide directly:

• Account information (name, email, company)
• Project and asset data you upload or create
• Photos, documents, and reports
• Communications with our support team

We automatically collect:

• Usage data (features used, actions taken)
• Device and browser information
• IP address and approximate location

3. How We Use Your Information

We use your information to:

• Provide and maintain FlowsReport services
• Process your transactions and send related information
• Respond to your requests and provide support
• Improve our platform and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

4. Data Storage & Security

Your data is stored in managed cloud infrastructure located in the UK and EU. We implement industry-standard security measures including:

• TLS 1.3 encryption in transit
• AES-256 encryption at rest
• Role-based access controls
• Regular security audits
• Automated backups with encryption

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers who assist in operating our platform (hosting, email, analytics)
• Professional advisors (legal, accounting) under confidentiality obligations
• Law enforcement when required by law

6. Your Rights

Under GDPR and UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format
• Object to processing in certain circumstances
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected]

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account closure, we retain data for up to 90 days before deletion, unless longer retention is required by law or for legitimate business purposes (e.g., resolving disputes).

8. Cookies

We use essential cookies for authentication and session management. We use analytics cookies to understand how the platform is used. You can manage cookie preferences through your browser settings. See our Cookie Policy for more details.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before taking effect.

10. Contact

For privacy-related questions, contact us at [email protected]