Privacy notice
Template awaiting legal review
Last updated: 1 October 2026
Who we are
East Side Flow Consultancy (“we”, “us”) is the data controller for the personal information described in this notice. You can contact us about your data at hello@example.com or by post at Office address to be confirmed, United Kingdom.
What we collect
When you send a consultation request or contact form, we collect:
- your name, email address and, if you give them, phone number, country of residence and nationality;
- the destination and type of visa you are interested in, and the message you write to us;
- the date and time you agreed to us using these details to respond to you;
- a keyed, one-way hash of your internet (IP) address, used only to stop abuse of the form. We never store the address itself, and we delete the hash after 24 hours.
Please do not include sensitive information, such as health details or criminal records, in the form. If we need information like this to advise you, we will ask for it securely and explain why.
How we use it and why we are allowed to
- To reply to your enquiry and arrange a consultation. We rely on your consent, which you give by ticking the box on the form, and on taking steps at your request before entering into a contract.
- To provide our services if you become a client. This is necessary to perform our contract with you.
- To keep records that our regulator requires. This is necessary to meet our legal and regulatory obligations.
- To keep the website secure and prevent spam. This is in our legitimate interests.
We never sell your information or use it for advertising.
Who we share it with
We share your information only with service providers who help us run the website and our business (for example hosting and email providers), under contracts that require them to protect it. We may disclose information if the law requires us to. We will not submit anything to a government or embassy on your behalf without your instruction.
International transfers
If a service provider processes your information outside the UK, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement.
How long we keep it
If your enquiry does not lead to us working together, we delete it within 12 months. If you become a client, we keep your file for as long as our regulator and the law require, and then delete it securely.
Your rights
You have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to limit how we use it, or object to how we use it;
- withdraw your consent at any time, without affecting anything we did before you withdrew it.
To use any of these rights, email hello@example.com. We will reply within one month.
Cookies and similar technology
The public website does not use advertising or analytics cookies. If you choose a light or dark colour theme, the choice is stored on your own device. Staff who sign in to manage the website use a strictly necessary session cookie.
Complaints
If you are unhappy with how we handle your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this notice
We will update this notice if how we use your information changes. The date at the top shows when it last changed. See also our terms of service.