Privacy Policy (UK)

AIWON BUSINESS SERVICES LTD (company number 11412650), trading as InflowQ. Registered office: 41 Heather Drive, Thatcham, United Kingdom, RG18 4BU.

This Privacy Policy explains how we collect and use personal data when you visit https://inflowq.com/ and when you use the InflowQ service (the "Service"). It also explains your rights under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

For the InflowQ website and for account, billing and support data, we are the Controller.

For form responses and other data you capture about your end‑users via InflowQ, you (the customer) are the Controller and we act as your Processor. We only process that data on your documented instructions and our Data Processing Addendum (DPA).

InflowQ is a client‑intake/forms platform. It does not provide document upload storage or compliance tracking features. It is not a law firm and does not provide legal advice.

We collect data in three ways:

• Directly from you (e.g., when you create an account, complete a form, contact support).
• Automatically (e.g., device/usage data, log files, cookies/SDKs).
• From third parties that help us run our Service (e.g., identity/authentication providers, hosting, analytics, payments).

• Account & profile: name, organisation, role, email, phone.
• Authentication: credentials and identifiers needed for sign‑in (e.g., via our identity service).
• Billing: contact and invoicing details (handled via our payment provider where applicable).
• Form content: the questions you configure and the answers your end‑users submit. You should avoid collecting Special Category data unless you have a lawful basis and have configured appropriate safeguards.
• Technical & usage: IP address, device, browser, pages/actions, timestamps, diagnostic logs.
• Marketing preferences: your choices about communications and cookies.

We process personal data for:

• Providing and securing the Service (performing our contract; legitimate interests).
• Customer support and communications (contract; legitimate interests).
• Billing and account administration (contract; legal obligation for tax/records).
• Improving the Service (legitimate interests; we use aggregated/anonymised analytics where possible).
• Marketing (consent for electronic direct marketing; opt‑out any time).
• Legal and compliance (legal obligations; establishing/exercising/defending legal claims).

We share personal data with:

• Service providers/Processors (e.g., cloud hosting and content delivery; identity/authentication; email and support ticketing; analytics).
• Professional advisers (legal, accounting, insurance).
• Authorities where required by law or to protect rights, safety or security.
• A successor entity in connection with a merger, acquisition or reorganisation.

We require all recipients to protect personal data and only process it under our instructions where they act as Processors.

We primarily host and process data in the UK (London) region. Key infrastructure and services may include Amazon Web Services (AWS) (Cognito, API Gateway, Lambda, S3, DynamoDB, CloudFront) and standard operational tools (email/support/analytics). We put contracts in place with all Processors.

We use strictly necessary cookies to run the site and optional analytics/functional cookies (only with your consent). You can manage preferences via your browser and any cookie banner presented on the site. See our Cookie Notice for details.

We keep personal data only as long as necessary for the purposes set out above:

• Account, billing and contract records: generally up to 6 years after the end of your contract (to meet legal/financial requirements).
• Support tickets/logs: typically 24 months.
• Form responses (customer‑controlled data): retained according to your settings and our contract/DPA; we delete or return data upon termination or on your instruction, subject to legal holds.

We use appropriate technical and organisational measures to protect personal data (including encryption in transit, access controls, monitoring and regular backups). No method of transmission or storage is 100% secure.

You have the right to access, rectify, erase, restrict or object to processing, portability, and to withdraw consent at any time (where processing is based on consent). You also have the right to complain to the UK Information Commissioner's Office (ICO).

ICO: https://ico.org.uk/concerns/

The Service is not intended for children under 16 except where a customer lawfully invites a young person to complete a form and has an appropriate lawful basis and notice.

Our websites may link to third‑party sites; we are not responsible for their privacy practices.

For privacy questions or requests, contact AIWON BUSINESS SERVICES LTD (trading as InflowQ).

Email: privacy@inflowq.com
AIWON BUSINESS SERVICES LTD is registered with the UK ICO. Registration number: ZB285228.
VAT: 378606165
Postal: 41 Heather Drive, Thatcham, United Kingdom, RG18 4BU

We may update this Policy from time to time. We will post the new version with a revised "Effective date" and, where appropriate, notify you by email or in‑product notice.

Controller: AIWON BUSINESS SERVICES LTD, trading as InflowQ.
Registered office: 41 Heather Drive, Thatcham, United Kingdom, RG18 4BU.
Company number: 11412650.
Website: https://inflowq.com/