Privacy Policy
1. Who We Are
This website is operated by Flourishing, based in the United Kingdom. We are committed to protecting your personal information and your right to privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
2. What Personal Data We Collect
We may collect and process the following personal data:
- Usage data: IP address, browser type, pages visited, time spent, referring URL
- Technical data: Device type, operating system, screen resolution
- Contact data: Only if you submit a form (e.g., your name, email address)
- Cookies and tracking data (explained below)
3. How We Collect Data
We collect data in two ways:
- Directly from you, when you fill out a form or contact us
- Automatically via analytics tools, cookies, and Webflow’s built-in functionality
4. Why We Collect Data
We process your data for the following purposes:
- To improve website performance and user experience
- To understand how visitors interact with our site
- To respond to contact requests
- To detect or prevent fraud and security issues
Our legal basis for processing is your consent (for cookies and tracking) and legitimate interest (for security and performance).
5. Cookies and Analytics
We use cookies and similar tracking technologies for analytics purposes. You can manage cookie preferences at any time via our [Cookie Settings].
Google Analytics (GA4)
We use Google Analytics to track anonymous website usage. Google may transfer your data to servers outside the UK, including the US, under standard contractual clauses (SCCs).
More info: Google Privacy Policy
PostHog
PostHog helps us analyse how visitors use our site (e.g., page views, clicks, scroll depth). Depending on the configuration, PostHog may be:
- Self-hosted (data stays in the UK/EU), or
- Cloud-hosted (data may transfer to the US with SCCs)
Webflow
Our site is hosted on Webflow. Webflow may collect limited technical data (e.g., IP address, device type) for hosting and security purposes.
More info: Webflow Privacy Policy
6. Data Sharing
We do not sell or rent your personal data. We may share it only with:
- Analytics providers (Google, PostHog)
- Hosting provider (Webflow)
- Legal or regulatory authorities when required
7. Data Retention
We retain analytics and form data for up to 26 months, unless required longer for legal or security reasons.
8. Your Rights
Under the UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Withdraw consent at any time
- Object to certain processing
- Lodge a complaint with the Information Commissioner’s Office (ICO)
9. Changes to This Policy
We may update this Privacy Policy periodically. When we do, we will update the “Last Updated” date above and notify users where appropriate.
10. Contact
If you have questions or requests about this policy, please get in touch.
