Contact

WorkFlowz
Privacy Policy

This privacy notice is for Flowz Limited t/as Work Flowz of Office 5, Rec 2, Enterprise Centre, Randall Way, Retford, Nottinghamshire, DN22 7GR. Email: contactus@work-flowz.com, tel: +44(0) 1777 23 7771.

 

Purposes of processing

Flowz is a processor for customers and their user’s data processed in Flowz and Work Flowz software.

Flowz is a controller for personal data it processes in the course of business activities, these include:

  1. Customers, potential customers and past customers for sales, marketing and financial recordkeeping purposes as appropriate to the relationship.
    1. We largely rely on our legitimate interests for these purposes, but also have a legal duty to process and retain financial records for up to 7 years. 
    2. Where we hold data for marketing purposes, we periodically cleanse the data, although opt-out is offered in every communication and we delete the data of opted-out potential customers.
    3. We do not share customer data with anybody outside the company except as required by law, courts and law enforcement.
  2. Suppliers, potential suppliers and past suppliers for procurement, contract management and financial recordkeeping purposes as appropriate to the data subject type.
    1. We rely on our legitimate interests for these purposes described, but may also have a legal duty to process and retain financial records for up to 7 years. 
    2. We do not share supplier data with anybody outside the company except as required by law, courts and law enforcement.
  3. Staff, potential staff and past staff for recruitment, training, payroll, taxation, pension, disciplinary and financial recordkeeping purposes as appropriate to the data subject type.
    1. We rely on our contract with staff members past and present, or legitimate interests to process for business management for past, present and potential staff. We also have a legal duty to process and retain financial records for up to 7 years. 
    2. We will hold pension records for up to 50 years
    3. The data we hold is deleted over time as it loses its usefulness and is cleansed out.
    4. We do not share this data with anybody outside the company except as required by law, courts and law enforcement.
  4. Website visitors to the extent that any data processed is personal data in our hands. 
    1. We try not to process personal data for this purpose but do analyse website visitors without knowing who they are as appropriate to the data subject type. What we cannot delete immediately is held for less than 12 months.
    2. We do not share this data with anybody outside the company except as required by law, courts and law enforcement.

All data is processed in the United Kingdom and Flowz Limited is exempt from the requirement to register with the Information Commissioner’s Office.

If you have a question or complaint about the ways in which we process personal data, please contact us in the first instance. If we are not able to satisfy your questions, you should contact the Information Commissioner’s Office. There are multiple contact channels. Please see www.ico.org.uk for details.

All of the end user created data we process is held encrypted in Microsoft 365 suite of products, similar software providers, or on our own hosted servers (customer data). Data access is controlled by username, password and multifactor authentication.

Data subjects may have the following rights in respect of the personal data we process about them:

  1. The right of access
  2. The right to request rectification of errors
  3. The right to restrain further processing
  4. The right to erasure
  5. The right to object to the processing
  6. The right to not be subject to decision making without human input (we don’t do this)

These rights are not all absolute rights, but if you are a data subject of data we process as a controller and would like to access any of these rights, please contact us in the first instance.