Skip to main content

Privacy Policy

Last updated · 17 June 2026

This privacy notice explains how Workflou Ltd ("Workflou", "we", "us", "our") collects, uses and protects personal data you provide via this website. It is written to satisfy our duties as a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Workflou Ltd is a private limited company registered in England and Wales under company number 17212332, incorporated on 11 May 2026. Our registered office is:

14 Graveleythorpe Road
Leeds
LS15 7EH
United Kingdom

For any privacy-related question, contact us at hello@workflou.co.uk. Workflou is the data controller for the personal data described in this notice.

The personal data we collect

When you contact us via the form on this website, we collect:

  • First and last name
  • Work email address
  • Telephone number (optional)
  • Company name and team size
  • The service you are interested in
  • Any free-text message you choose to send

Our hosting provider also logs technical data — IP address, user-agent string and request timestamps — for security and abuse-prevention purposes.

Why we collect it and the lawful basis

We process the data above to respond to your enquiry, to arrange a discovery call, and to send you proposals or quotations you have asked for. Our lawful basis under UK GDPR Article 6(1) is:

  • Article 6(1)(b) — contract: taking steps at your request before entering into a contract for our services;
  • Article 6(1)(f) — legitimate interests: running and securing our website and replying to enquiries from prospective clients. Our legitimate interest assessment is that you have voluntarily submitted your details to invite a reply, and the processing is limited to that purpose.

Marketing

We do not send marketing communications without your prior consent. If you opt in to receive updates we will rely on UK GDPR Article 6(1)(a) — consent — and you may withdraw consent at any time by emailing hello@workflou.co.uk or by following the unsubscribe link in any message.

Who we share your data with

We do not sell, rent or trade personal data. We share it only with processors that help us run the business:

  • Amazon Web Services EMEA SARL — hosting (United Kingdom / Republic of Ireland regions).
  • Google Ireland Limited — email delivery via Google Workspace.

Each processor is bound by a written contract that meets the requirements of UK GDPR Article 28. We do not transfer personal data outside the United Kingdom or the European Economic Area beyond the processors listed above, all of which store data in the UK or EEA.

How long we keep it

Enquiry data is kept for twelve (12) months from the date of your last contact, after which it is securely deleted unless you have become a client. Where you become a client, records are kept for seven (7) years from the end of the engagement to satisfy UK tax and Companies Act record-keeping obligations.

Security

We protect personal data with appropriate technical and organisational measures, including encryption in transit (TLS), least-privilege access to mailboxes and storage, multi-factor authentication on administrator accounts, and regular review of who can access what.

Your rights

Under UK GDPR you have the right to:

  • access the personal data we hold about you (subject access request);
  • have inaccurate data corrected;
  • have your data erased, where one of the grounds in Article 17 applies;
  • restrict processing in the circumstances set out in Article 18;
  • port your data to another controller in a structured machine-readable format;
  • object to processing carried out under legitimate interests (Article 21), at which point we will stop unless we can show compelling legitimate grounds that override your interests;
  • withdraw consent at any time, where processing is based on consent.

To exercise any of these rights email hello@workflou.co.uk. We will respond within one calendar month.

Complaints

If you believe we have mishandled your personal data you may complain to the UK Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk

Automated decision-making

We do not use your personal data for any automated decision-making or profiling that produces legal or similarly significant effects on you.

Cookies

We use only strictly-necessary cookies. We do not load advertising or analytics trackers. See our Cookie Policy for the full picture.

Changes to this notice

We will update this notice when our practices change. The current version is indicated by the "Last updated" date at the top of the page.

UK GDPR summary

This page is our UK GDPR / Data Protection Act 2018 statement. It sets out the information required by Article 13 of UK GDPR: the controller's identity, the purposes and lawful bases for processing, the categories of recipients, the retention period, your rights, and your right to complain to the ICO.