Privacy Policy

1. Who We Are

This website is operated by Flourishing, based in the United Kingdom. We are committed to protecting your personal information and your right to privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

2. What Personal Data We Collect

We may collect and process the following personal data:

  • Usage data: IP address, browser type, pages visited, time spent, referring URL

  • Technical data: Device type, operating system, screen resolution

  • Contact data: Only if you submit a form (e.g., your name, email address)

  • Cookies and tracking data (explained below)

3. How We Collect Data

We collect data in two ways:

  • Directly from you, when you fill out a form or contact us

  • Automatically via analytics tools, cookies, and Webflow’s built-in functionality

4. Why We Collect Data

We process your data for the following purposes:

  • To improve website performance and user experience

  • To understand how visitors interact with our site

  • To respond to contact requests

  • To detect or prevent fraud and security issues

Our legal basis for processing is your consent (for cookies and tracking) and legitimate interest (for security and performance).

5. Cookies and Analytics

We use cookies and similar tracking technologies for analytics purposes. You can manage cookie preferences at any time via our [Cookie Settings].

Google Analytics (GA4)

We use Google Analytics to track anonymous website usage. Google may transfer your data to servers outside the UK, including the US, under standard contractual clauses (SCCs).
More info: Google Privacy Policy

PostHog

PostHog helps us analyse how visitors use our site (e.g., page views, clicks, scroll depth). Depending on the configuration, PostHog may be:

  • Self-hosted (data stays in the UK/EU), or

  • Cloud-hosted (data may transfer to the US with SCCs)

6. Data Sharing

We do not sell or rent your personal data. We may share it only with:

  • Analytics providers (Google, PostHog)

  • Hosting provider (Webflow)

  • Legal or regulatory authorities when required

7. Data Retention

We retain analytics and form data for up to 26 months, unless required longer for legal or security reasons.

8. Your Rights

Under the UK GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Request deletion of your data

  • Withdraw consent at any time

  • Object to certain processing

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

9. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will update the “Last Updated” date above and notify users where appropriate.

10. Contact

If you have questions or requests about this policy, please get in touch.