Data Collection
Connected Flow does not collect personal information directly from customers through our website. Our website host, Cloudflare, may use cookies and similar technologies to enable security and functionality. According to their policies, they do not collect user information from static websites hosted on their platform. More details can be found at the following links:
Cloudflare Cookie Policy: https://www.cloudflare.com/en-gb/cookie-policy/
Cloudflare Cookies Documentation: https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/
Client Data
We collect personal data solely for consultation and treatment purposes, never indirectly through our website. By contacting us directly, you consent to our processing your data to discuss treatment options, manage bookings, create and maintain on-going treatment notes for the duration of your treatment plan. Data is anonymized wherever possible and held securely in encrypted storage with zero access, other than to authorized personnel. All data storage programs are covered by a Data Processing Agreement (DPA). Your data is not shared by us with any other individual/organisation without prior written consent of the client. Where necessary, such as in the process of any legal proceedings, it may become necessary to release client information. If this is necessary, the client will be given due notice of this in writing.
Legal Basis for Processing
The legal basis for processing your personal data includes your consent, the necessity to perform a contract with you, compliance with legal obligations, and the requirement for data relevant to your consultation, treatment plan, and client notes.
Data Retention and Security
Client data is retained for 7 years (or 7 years following a client's 18th birthday) following the last treatment for insurance purposes, after which it is securely destroyed. We employ industry-standard measures to protect your data against unauthorized access, loss, or disclosure.
Use of Information
Personal information collected by Connected Flow is used to:
Communication
We do not engage in direct communication with general site visitors. If you make an inquiry, we may respond via email, telephone, text messages, or postal mail regarding appointments, treatments, disputes, or updates about our services.
Cookies and Tracking Tools
Connected Flow does not directly use cookies or tracking tools. Cloudflare may use cookies to provide site functionality and security. We do not access any of this data.
Withdrawal of Consent
As we do not collect data from general website users, any cookies used are solely for functionality and security by Cloudflare. Client data that is collected as part of our business relationship with clients is maintained confidentially and can be destroyed upon request by contacting us at [email protected], except for the above clause regarding data retention, and cases of potential, ongoing or pending investigations.
Data Subject Rights
You have the right to access, rectify, erase, restrict processing, data portability, and object to data processing. To exercise these rights, please contact us at [email protected]. Please be aware that limitation of data access/processing may impact our ability to provide services to you. In these instances, you will be informed of this at the point of request.
Data Breach Notification
In the event of a data breach, we will notify affected individuals and relevant authorities in accordance with GDPR requirements.
International Transfers
If we transfer your data outside the EU, we ensure that appropriate safeguards are in place to protect your data in accordance with GDPR.
Data Protection Officer (DPO)
As a small business we do not employ a Data Protection Officer, as per the guidelines of the Information Commisioners Office. All data is maintained and secured by us as the Data Controller. You can contact us regarding this at: [email protected]
Policy Updates
We reserve the right to modify this privacy policy at any time. Changes will take effect immediately upon posting on our website. For material changes, we will notify you here.
Contact Us
For access, correction, amendment, or deletion of personal information, please contact us at [email protected]