Flowes Privacy Notice and Cookie Policy

Flowes Privacy Policy

This Notice is effective from 4 November 2026.

Who we are

This Privacy Notice explains how Connecting Commerce Limited, trading as Flowes (“Flowes”, “we”, “us” or “our”), handles personal information when you visit www.flowes.com, contact us or interact with our website. Our registered office is Birches Corner, Heron Gate, Taunton, Somerset, TA1 2LP, company number 07895738. Our privacy contact is [email protected]. Connecting Commerce Limited, trading as Flowes, is the operator of www.flowes.com and the data controller for personal data collected through this website. Where we provide payment, onboarding, fraud, payout or related services for business customers, the parties’ roles and applicable privacy terms depend on the particular service and agreement. This notice covers our public website, not every processing activity undertaken in delivering payment services.

Information we collect

• Technical and usage information: IP address, browser and device details, operating system, referring pages, pages viewed, approximate location derived from IP, access times, security events and error logs.
• Information you provide: name, business email, phone number, organisation, job title, enquiry details and any information you include in forms, emails or correspondence
• Preferences and marketing information: subscription choices, consent records, communications preferences and engagement information where relevant and lawful.
• Cookies and similar technologies: identifiers and preferences as described in our Cookie Policy.
• Event, demo or downloadable-resource registration details: and information provided by referral partners or other business contacts.

Why we use information and our lawful bases

• Operate, maintain, troubleshoot and protect our website, including detecting abuse and security incidents – legitimate interests in operating a safe and reliable site; legal obligation where applicable.
• Respond to enquiries, arrange demonstrations and manage business relationships – legitimate interests in handling business enquiries; steps before entering into a contract where applicable.
• Understand site performance and improve content – consent for non-essential cookies where required; legitimate interests in evaluating and improving our website performance and content.
• Send newsletters, invitations and promotional communications – consent where required by electronic-marketing rules; otherwise our legitimate interests in conducting B2B marketing to corporate subscribers where lawful. You can unsubscribe at any time.
• Meet legal, regulatory, record-keeping and compliance requirements – legal obligation where applicable; legitimate interests for appropriate business records.

Who receives your information

We may share information with authorised staff and companies providing hosting, website development, cybersecurity, analytics, customer relationship management, email marketing, event registration, professional advice and other support services. We may disclose information where required by law or in connection with a legitimate corporate transaction, subject to applicable safeguards. We do not sell personal information.

International transfers

Some suppliers may process information outside the UK. Where UK data protection law requires safeguards, we use an applicable adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to EU standard contractual clauses or another lawful mechanism. You can contact us for information about relevant safeguards.

How long we retain information

We retain personal information only as long as reasonably necessary for the purpose collected, including legal and security needs. We retain:

• Server logs: Typically 30–180 days, unless needed for investigation.
• Contact-form enquiries: Up to 12 months.
• Analytics data: As set by analytics providers, usually 12–26 months.

Data may be retained longer if required for legal or security purposes.

Your rights

Depending on the circumstances and applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent at any time without affecting processing already carried out. We will consider requests in accordance with the law and may need information to verify identity. To exercise your rights, email [email protected]. You may complain to the Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint/. We would welcome the opportunity to address concerns first.

Security, external links and changes

We use appropriate technical and organisational measures to protect personal information, but no online system can guarantee absolute security. Our website may link to third-party sites with their own privacy notices. We may update this notice when our practices change and will publish the revised date.

Flowes Cookie Policy

This Notice is effective from 4 November 2026. This policy explains how Connecting Commerce Limited, trading as Flowes, uses cookies and similar technologies on www.flowes.com. Cookies are small files or identifiers stored on or accessed from your device. Other technologies, including local storage, tags and pixels, can have similar functions.

Types of cookies

• Strictly necessary: required for security, network management, essential functionality and recording cookie choices. These do not require cookie consent.
• Analytics/performance: we use optional analytics and similar technologies to understand how visitors interact with our website and improve its performance. These technologies are used only where you have provided your consent. You can withdraw or change your consent at any time through our cookie settings.
• Functional: enable optional embedded content or preferences (such as regional or language settings); we ask for your consent where required for these technologies.
• Marketing: measure campaigns or personalise advertising, if used. We only enable these cookies where you have provided your consent.

Your choices

When you first visit our website, you can choose whether to accept optional cookies through our cookie consent banner. You can change your preferences or withdraw your consent at any time by clicking the “Cookie Settings” link on our website. This will display the cookie consent notice again, allowing you to update your preferences. You can also block or delete cookies through your browser settings. Please note that disabling certain cookies may affect your browsing experience or the functionality of the website.

Cookie register

Analytics cookies

Third party services and changes

Some cookies or similar technologies may be placed by service providers when you consent or interact with their features. Their own notices may also apply. We will update this policy and cookie register when technologies or purposes change. For questions, contact [email protected].