Privacy policy
How FlowMetrics Ltd uses personal data on this website and in our enquiry and sign-up journeys. Last updated 9 October 2026.
1. Who we are
The data controller is FlowMetrics Ltd, a company registered in England and Wales with company number 16322481. Our registered office is 14 Pinnacle Close, London, England, N10 3BF.
You can contact us about this notice or your personal data at info@flowmetrics.co.uk.
ICO registration number: [TBC: the ICO data protection registration number]
This notice covers this website (flowmetrics.co.uk), demo and sample report requests, and creating an account or workspace. It does not cover the data customers store in their own FlowMetrics workspaces, which we handle under our agreement with each customer. If a project team sends you a secure link to submit an invoice, the organisation that invited you decides what is collected and why, and we handle your details for them. [TBC: confirm that FlowMetrics Ltd acts as processor for workspace and invoice submission data]
2. What we collect and why
When you visit the website
- Analytics (only if you accept): the pages you view, how far you scroll, which buttons you click, errors in your browser, your device, browser and approximate location (taken from your IP address) and the page that referred you. We use this to see what works and to fix problems. Nothing is collected by Google Analytics or PostHog before you accept.
- Technical data: like any website, our servers handle your IP address and details of each request so pages load and the service stays secure. [TBC: how long server and proxy logs are kept]
When you ask for a demo or sample report
- Your email address and the message you write. The form does not ask for your name or company, so we fill those in with placeholders (the part of your email before the @ and "Not provided").
- Your IP address, which our website passes to our back end so we can limit repeated or automated submissions.
- We send you a confirmation email and notify our team inbox at info@flowmetrics.co.uk of the enquiry. If you have accepted analytics, the event "demo requested" is also recorded in PostHog together with your email address.
When you book a call
Our "Book a Demo" and "Book a call" links open a scheduling page on Calendly in a new tab. What you enter there is collected by Calendly under its own privacy policy, and we receive your booking details.
When you create an account or workspace
- Your full name (stored as first and last name), email address and password, and a record that you accepted the End-User Software Licence Agreement.
- For a new workspace, your company name and the web address you choose for it.
- Emails we send you to verify your address, reset your password or invite you to a workspace.
- Session and security cookies that keep you signed in (see the cookies section).
- If you have accepted analytics, PostHog links your sign-up and log-in activity to your email address and records events such as signed up, logged in, login failed, password reset requested, email verified and workspace created.
When you contact us
If you email us we keep your message and email address so we can reply. [TBC: confirm whether enquiries are ever added to a marketing list; none is evidenced in the website code]
3. Lawful bases
- Consent for analytics cookies and similar technologies (UK GDPR Article 6(1)(a) and the Privacy and Electronic Communications Regulations). You can withdraw it at any time.
- Contract (Article 6(1)(b)) to create and run your account, verify your email and provide the service you sign up for.
- Legitimate interests (Article 6(1)(f)) to reply to demo and sample report requests, keep the website secure and prevent abuse, and keep necessary business records. We balance these against your rights, and you can object (see your rights below).
- Legal obligation (Article 6(1)(c)) where the law requires us to keep or disclose records.
[TBC: FlowMetrics Ltd to confirm these lawful bases, and complete a legitimate interests assessment, before launch]
5. International transfers
Some providers above, such as Google, Resend, Calendly and PostHog, are based outside the UK or use providers that are, so personal data may be transferred or accessed from outside the UK. PostHog analytics is configured to use PostHog's EU cloud, and uploaded documents are stored in London.
[TBC: the transfer safeguard relied on for each provider, for example the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum]
6. How long we keep it
- Demo and sample report enquiries: [TBC: retention period]
- Account and workspace records: [TBC: retention period, including after an account is closed]
- Server and proxy logs: [TBC: retention period]
- Google Analytics and PostHog data: [TBC: retention settings in each project]
- Emails to info@flowmetrics.co.uk: [TBC: retention period]
- Cookies last for the periods shown in the cookies section below.
7. Your rights
Under UK GDPR you have the right to:
- be told how your data is used (this notice) and to access a copy of it;
- have inaccurate data corrected;
- have your data erased, in some circumstances;
- restrict how we use your data, in some circumstances;
- receive data you gave us in a portable format, where we use it under contract or consent;
- object to us using your data for our legitimate interests;
- withdraw consent at any time, for example through Cookie settings, without affecting what we did before.
To use any of these rights, email info@flowmetrics.co.uk. We will reply within one month. We may need to confirm who you are first.
8. Complaints
Please tell us first so we can put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk.
10. Changes to this notice
We will update this page when our use of personal data changes and show the date below. If a change is significant we will tell you in a clearer way, for example by asking for your cookie choice again.
Last updated: 9 October 2026.
See also our End-User Software Licence Agreement.