Legal
Privacy Policy
What we collect when you contact us, why we hold it, how long we keep it and how to exercise your rights.
Who is responsible for your data
FLWR TECH LTD (registration HE 494772), based in Limassol, Cyprus, is the data controller for the personal data described on this page. You can reach us at hello@flwrtech.com with any question about how your information is handled.
What we collect
We collect the information you submit, plus the limited technical information described below. There are two forms on this site — the project enquiry form and the 30-minute consultation request — and between them they collect:
- Your name, and your company name if you provide it
- Your email address and telephone number — at least one is required so we can reply
- The service or engagement type you selected
- The description of your project or business challenge, and any note you add
- Your estimated budget and preferred timeline, if you choose to share them
Technical information collected automatically
When a form is submitted we also record the page it was sent from, the IP address it came from and the browser user-agent string. We use this only to identify and filter automated spam submissions and to understand which page prompted an enquiry. It is not used to build a profile of you and it is not sold or shared for advertising.
Each form asks you to accept the Terms of Use and confirm that you have read this Privacy Policy. We record the time you did so and the version of these documents in force, as a record of what you agreed to.
Free tools
The free tools on this site process the files you choose entirely in your browser. Your files and their contents are not uploaded to us or to anyone else, and we cannot see them. Tool pages load no analytics or other third-party scripts.
If you follow a link from a tool to our enquiry form, the page address records which tool you came from, and it is stored with your enquiry as the page it was sent from, as described above.
Why we use it, and our legal basis
We use the information you send to respond to your enquiry, prepare a recommendation and, where it goes further, to discuss and deliver work for you.
Under the GDPR our legal basis is the taking of steps at your request prior to entering into a contract, and our legitimate interest in responding to business enquiries and in protecting this site from automated abuse. We do not use your details for marketing without asking you separately first.
How long we keep it
Enquiries that do not lead to work are kept for up to 24 months so that we have context if you come back to us, and are then deleted. Where an enquiry becomes a project, the associated records are retained for as long as needed to deliver and support that work and to meet Cypriot accounting and tax obligations. You can ask us to delete your enquiry sooner at any time.
Who else sees it
Our website and its database are hosted on Laravel VPS in Frankfurt, Germany. We use Laravel Forge to manage the server and deployments. Enquiry records are stored in the database on that VPS.
We use Twilio SendGrid to send enquiry notifications, acknowledgements and replies. Sending an email shares the recipient address and message content with SendGrid. Our business email is hosted by Google Workspace, which receives and stores correspondence, including copies of enquiries sent to our inbox.
The Frankfurt location describes our website server and database. It does not mean that every email, booking record or provider support operation is processed exclusively in Germany or the European Economic Area.
We do not sell your personal data or share it with third parties for their own marketing. Access to enquiries is limited to people who need the information to respond to or manage the work.
Email delivery records
We do not use email open-tracking pixels or click tracking. Delivery records tell us about message transport, not whether you read an email or clicked a link.
We keep a record of outgoing messages, including the recipient, subject, send time and delivery events returned by SendGrid. Delivery, bounce and spam-report information helps us identify messages that did not arrive and follow up appropriately. Queued messages and failed delivery attempts are held so we can process or investigate them.
An email delivery status does not necessarily mean a person has read the message. We use these records to manage your enquiry, not to make automated decisions with legal or similarly significant effects.
Booking a consultation
If you provide an email address with your enquiry, we send an automatic acknowledgement through our email provider, including a link to book a consultation. You can also load the Calendly calendar on our contact page. We do not automatically pass your enquiry form details to Calendly.
When you load the calendar or follow a booking link, Calendly receives technical information from your browser and the booking details you enter. Those details are used to arrange your appointment. Calendly’s privacy notice is available at https://calendly.com/privacy.
Your rights
Under the GDPR you have the right to access the personal data we hold about you, to have inaccurate data corrected, to have your data erased, to restrict or object to how we process it, and to receive it in a portable format. To exercise any of these, email hello@flwrtech.com and we will respond within one month.
Complaints
If you believe we have handled your personal data improperly, please raise it with us first so we can put it right. You also have the right to complain to the Office of the Commissioner for Personal Data Protection in Cyprus, which is the supervisory authority for this company.
Changes to this policy
If we change how we handle personal data we will update this page and the date shown at the top of it.