PRIVACY POLICY

Last updated: 8 August 2026

This document applies to FlowNest Workspace ("we", "us", "our"), a UK sole trader business operated by Mohammad Sahamulla of 43 East Road, Feltham, TW14 8DG, United Kingdom. You can contact us at info@flownestworkspace.co.uk or +44 7344 062403.

1. Who we are

FlowNest Workspace is the data controller for personal data collected through this website and the FlowNest Workspace software. We are a sole trader business based in the United Kingdom and we process personal data in accordance with the UK GDPR and the Data Protection Act 2018.

2. Information we collect

• Contact information you provide through our enquiry form: name, business name, email address, telephone number and the content of your message.
• Purchase information processed through Stripe: billing name, billing address, email address, the plan purchased and the amount paid. We do not receive or store full card numbers.
• Account information for workspace users: name, email address, role and workspace activity needed to operate the service.
• Content you create in the workspace: projects, tasks, notes, client records and uploaded files.
• Technical information: IP address, browser type, device type and pages visited, collected through standard server logs for security and performance.

3. How we use your information

• To respond to enquiries and provide customer support.
• To process payments, issue receipts and provision your workspace licence.
• To operate, maintain, secure and improve the software.
• To send service messages about your account, such as access details or important changes.
• To meet legal, accounting and tax obligations.
• To detect and prevent fraud or misuse of the service.

4. Lawful bases for processing

• Contract: processing necessary to provide the software and fulfil your order.
• Legitimate interests: securing our systems, preventing fraud, improving the service and responding to enquiries.
• Legal obligation: retaining transaction records for tax and accounting purposes.
• Consent: where you have opted in to optional communications. You can withdraw consent at any time.

5. Sharing your information

We do not sell personal data. We share it only with service providers who help us operate the business, including Stripe (payment processing), our hosting provider (secure infrastructure) and our email provider (transactional messages). Each provider is bound by contractual confidentiality and data protection obligations. We may also disclose information where required by law.

6. International transfers

Our primary infrastructure is located in the United Kingdom and the European Economic Area. Where a provider processes data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or International Data Transfer Agreements.

7. How long we keep data

• Enquiry correspondence: up to 24 months after the last contact.
• Transaction and accounting records: seven years, as required by UK tax law.
• Workspace content: for the life of your licence plus a 30 day grace period for export, unless you request earlier deletion.
• Server and security logs: up to 12 months.

8. Your rights

Under UK data protection law you have the right to access your personal data, to have inaccurate data corrected, to request erasure, to restrict or object to processing, to data portability and to withdraw consent where processing is based on consent. To exercise any right, email us and we will respond within one calendar month.

If you are unhappy with how we have handled your data you may complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to resolve the issue with you first.

9. Security

We protect personal data using encryption in transit and at rest, access controls, least-privilege administration, regular software updates and automated backups. No system is perfectly secure, but we take proportionate technical and organisational measures appropriate to the risk.

10. Children

Our services are intended for business use and are not directed at children under 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy to reflect changes in our services or the law. The date at the top of this page shows when it was last revised. Material changes affecting existing customers will be notified by email.

Contact us

If you have any questions about this document, email info@flownestworkspace.co.uk, call +44 7344 062403 or write to FlowNest Workspace, 43 East Road, Feltham, TW14 8DG, United Kingdom. We aim to respond to all written enquiries within five business days.