We are registered in England and Wales under company number 06031868, and our registered office is at 4 Arkwright Road, Bicester, Oxfordshire, United Kingdom, OX26 4SU. For the purpose of the UK General Data Protection Regulation (GDPR), we are the data controller.

1. What Information We Collect

We may collect and process the following data about you:

Information you give us directly:
- Contact Information: When you fill out forms on our Site (e.g., contact forms, newsletter sign-ups), you may provide us with your full name, email address, and phone number, and company name.
- Correspondence: If you contact us, we may keep a record of that correspondence.
- Account Information: If you create an account on our Site (e.g., for a customer portal or forum), we will collect your username, password, and any other information you provide as part of your profile.
Information we collect automatically:
- Technical Data: As you interact with our Site, we automatically collect technical data about your equipment, Browse actions, and patterns. This includes:
  - IP address: A unique number that identifies your computer or other device on the internet.
  - Browser type and version: Information about the software you use to access the internet.
  - Time zone setting: Your geographic location used to determine the correct time.
  - Operating system and platform: The software that supports your computer's basic functions.
  - Device type: Whether you are using a desktop, tablet, or mobile device.
- Usage Data: Information about how you use our Site, including:
  - Clickstream data: The full Uniform Resource Locators (URLs) you visit on, through, and from our Site.
  - Page response times: How long it takes for a page to load.
  - Download errors: Problems encountered when trying to download content.
  - Length of visits to certain pages: How long you spend on specific pages.
  - Page interaction information: Scrolling, clicks, and mouse-overs.
  - Methods used to browse away from the page: How you leave a page.
- Cookies and similar technologies: We use cookies and similar technologies to collect this information. Please refer to the "Cookies" section below for more details.

2. How We Use Your Information

We use the information we collect for the following purposes and under the following lawful bases:

To provide and maintain our Site: This is necessary for our legitimate interests (to run our business and provide you with a functional website).
To improve our Site: We analyze usage patterns to enhance the user experience and optimize our content and services. This is necessary for our legitimate interests (to improve our products/services).
To communicate with you: Respond to your inquiries, provide customer support, and send you important updates or information about our services. This is necessary for our legitimate interests (to respond to your requests and manage our relationship with you) or for the performance of a contract with you.
To send you marketing communications (if you have opted in): If you subscribe to our newsletter or agree to receive marketing, we will send you relevant information about our products, services, and promotions. This is based on your consent. You can withdraw your consent at any time.
To personalize your experience: Tailor the content and features you see based on your preferences and interactions with our Site. This is necessary for our legitimate interests (to provide a more relevant and engaging experience).
For internal operations: Data analysis, troubleshooting, testing, research, statistical, and survey purposes. This is necessary for our legitimate interests (to manage our business effectively).
To ensure the security of our Site: Protect against fraud, spam, and other malicious activities. This is necessary for our legitimate interests (to protect our business and our users).
To comply with legal obligations: Where required by law or regulation. This is necessary for compliance with a legal obligation.

3. How We Share Your Information

We may share your personal data with the following categories of recipients:

Service Providers: We engage third-party companies and individuals to perform services on our behalf (e.g., hosting, analytics, email marketing). These service providers only have access to the personal data they need to perform their functions and are contractually obligated to keep your information confidential and secure.
Google Analytics: As detailed in the "Cookies" section, we use Google Analytics to understand how visitors interact with our Site. Google processes this data on our behalf.
Legal and Regulatory Authorities: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.

We will not sell, rent, or lease your personal data to third parties.

4. International Transfers of Data

Some of our third-party service providers, including Google, may process data outside the UK/EEA. Where your personal data is transferred to a country outside the UK/EEA that has not been deemed to provide an adequate level of protection by the UK government or European Commission, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK government or European Commission, to protect your personal data.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

6. Your Rights

Under the GDPR, you have the following rights concerning your personal data:

The right to be informed: About how we collect and use your personal data.
The right of access: To request a copy of the personal data we hold about you.
The right to rectification: To request that we correct any inaccurate or incomplete personal data.
The right to erasure ("the right to be forgotten"): To request that we delete your personal data in certain circumstances.
The right to restrict processing: To request that we limit the way we use your personal data in certain circumstances.
The right to data portability: To receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
The right to object: To our processing of your personal data in certain circumstances, particularly where we are relying on legitimate interests as the lawful basis.
Rights in relation to automated decision-making and profiling: The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

To exercise any of these rights, please contact us using the details in the "Contact Us" section below. We will respond to your request within one month.

7. Cookies

Our Site uses cookies to distinguish you from other users of our Site. This helps us to provide you with a good experience when you browse our Site and also allows us to improve our Site.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.

We use the following types of cookies:

Strictly necessary cookies: These are cookies that are required for the operation of our Site. They include, for example, cookies that enable you to log into secure areas of our Site, use a shopping cart, or make use of e-billing services.
- Craft CMS Session Cookie: Craft CMS sets a session cookie (CraftSessionId or similar) to manage your user session. This is essential for features like logging in and maintaining your state as you navigate the site.
Analytical/performance cookies (Google Analytics): These allow us to recognise and count the number of visitors and to see how visitors move around our Site when they are using it. This helps us to improve the way our Site works, for example, by ensuring that users are finding what they are looking for easily.
- We use Google Analytics to collect anonymous information about your use of our Site. Google Analytics uses cookies such as _ga, _gid, and _gat. This data helps us understand things like:
  - The number of visitors to our Site.
  - The pages they visit.
  - The time they spend on each page.
  - The website they came from.
  - Their general geographical location (country/city).
- Google's ability to use and share information collected by Google Analytics about your visits to this Site is restricted by the Google Analytics Terms of Service and the Google Privacy Policy.
- You can opt-out of Google Analytics without affecting how you visit our Site – for more information on opting out of being tracked by Google Analytics across all websites you use, visit http://tools.google.com/dlpage/gaoptout.
Functionality cookies: These are used to recognise you when you return to our Site. This enables us to personalise our content for you, greet you by name, and remember your preferences (for example, your choice of language or region).
Targeting cookies: These cookies record your visit to our Site, the pages you have visited, and the links you have followed. We will use this information to make our Site and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

Cookie Consent:

When you first visit our Site, we will display a cookie consent banner asking for your permission to use non-essential cookies. You will have the option to accept all cookies or to manage your preferences. You can change your cookie preferences at any time by clicking on the "Cookie Settings" link [insert link if you have one, or describe how they can access it, e.g., "at the bottom of our homepage"].

How to Control Cookies:

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including strictly necessary cookies), you may not be able to access all or parts of our Site.

You can also find out more information about cookies and how to manage them by visiting www.allaboutcookies.org.

8. Security

We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

9. Links to Other Websites

Our Site may contain links to other websites. This Privacy & Cookie Policy only applies to our Site, so when you link to other websites, you should read their own privacy policies. We are not responsible for the privacy practices or the content of such websites.

10. Changes to This Privacy & Cookie Policy

We may update this Privacy & Cookie Policy from time to time by publishing a new version on our Site. We encourage you to review this page periodically for any changes.

11. Contact Us

If you have any questions about this Privacy & Cookie Policy or our privacy practices, please contact us:

By email: sales@flowrap.com
By post: 4 Arkwright Road, Bicester, Oxfordshire, United Kingdom, OX26 4SU

12. Complaints

If you are not satisfied with our response to a privacy complaint, or if you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). The ICO is the UK's independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

You can contact the ICO via their website: https://ico.org.uk/concerns/ or by calling their helpline on 0303 123 1113.

Last updated: 1 August 2025