Privacy notice

This notice covers the riskflowdigital.com website and the enquiry form on it. The website is an informational marketing site for the RiskFlow Digital practice.

There are no user accounts, no sign-in, no client portal, and no customer database behind this website. Information handled under this notice is limited to what you choose to send us.

The only information we collect directly is what you enter into the enquiry form or include in an email to us.

• Your name
• Your email address
• Your organisation
• Your website address, if you choose to provide it
• The service area and enquiry type you select
• Your indicative timeline, if you choose to provide it
• The message you write
• Your confirmation that you are content for us to reply

We use these details to read, understand, and respond to your enquiry, and to hold the subsequent correspondence if a conversation follows.

We do not add enquiry details to a marketing list, use them for advertising, profile you, or sell or share them with third parties for their own purposes.

Where you submit an enquiry, we rely on our legitimate interest in responding to a business enquiry that you initiated, and on your consent as confirmed in the form.

Where a conversation leads to an engagement, correspondence is then held in connection with that engagement and any record-keeping obligations that apply to it.

Enquiry submissions are delivered to us as email using Brevo (Sendinblue SAS) as our transactional email provider. Brevo processes the content of your submission in order to deliver that message to us.

Brevo acts as a processor on our behalf for this purpose. The submission is sent from our server to Brevo; our Brevo credentials are held server-side and are never exposed in the browser.

Transactional messages from the website may be sent from a no-reply sender address. The public contact address for the practice is info@riskflowdigital.com, and that is where replies should be directed.

The website is served by a hosting provider that, in common with all web hosting, processes technical request information such as IP address, user agent, requested path, and timestamp in order to serve pages and maintain security and availability.

These logs are generated by the hosting infrastructure rather than by us, are retained for short operational periods by the provider, and are not used to build profiles of visitors.

This website does not run advertising trackers, social media pixels, or cross-site profiling tools. If we introduce a privacy-respecting analytics tool in future, this notice will be updated before it goes live and the cookie notice will reflect it.

• Payment card or bank details — no payment is taken through this website
• Account credentials — there is no sign-in
• Special category data — please do not include it in an enquiry
• Documents or files — the form does not accept attachments

Enquiry correspondence is kept for as long as needed to deal with the enquiry and for a reasonable period afterwards in case the conversation resumes, then deleted.

Where an enquiry leads to an engagement, related correspondence is retained for the duration of that engagement and for the period required afterwards for professional and legal record-keeping.

You have the right to ask what information we hold about you, to have inaccurate information corrected, to ask for deletion, to object to or restrict our use of it, and to receive a copy in a portable form where that applies.

To exercise any of these, email info@riskflowdigital.com. You also have the right to complain to your data protection supervisory authority.

If how we handle enquiry information changes, this notice will be updated and the review date at the top will change. Material changes will be described here rather than made silently.