Privacy Policy

Flow 3 Drains (UK) Ltd (‘we’, ‘our’, or ‘us’) is committed to safeguarding your personal data. This Privacy Policy outlines how we collect, use, and protect your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are a registered data controller and take our responsibilities under data protection laws seriously.

1. About Flow 3 Drains
We are a specialist drainage contractor operating across the UK, predominantly servicing Local Authorities, Housing Associations, and public sector entities. We collect personal data to fulfil our contracts, maintain operations, and improve customer service. This policy applies to all personal data processed through our website, communication channels, service delivery, and internal systems.

2. What Personal Data We Collect
We may collect the following types of data:
 – Full name
 – Job title and employer information (if applicable)
 – Email address and telephone numbers
 – Home or business address
 – Enquiry content and project details
 – Payment and invoicing data (bank account details, payment history)
 – Website usage data including cookies and IP addresses
 – Any additional information you provide voluntarily

3. How We Collect Your Information
We collect personal data when you:
 – Visit our website or interact with our forms
 – Contact us via phone, email, or letter
 – Enter into a service agreement or request a quotation
 – Apply for a job or work with us as a contractor
 – Subscribe to any marketing communications (with consent)

4. Why We Use Your Data
We process personal data to:
 – Provide you with drainage services as per our contractual obligations
 – Respond to your enquiries and provide customer support
 – Administer and manage accounts, invoices, and payments
 – Comply with legal and regulatory obligations
 – Improve and develop our website and services
 – Maintain a record of communications and interactions for quality assurance

5. Lawful Basis for Processing
Under the UK GDPR, we process your personal data on the following lawful bases:
 – Contract: where processing is necessary for the performance of a contract
 – Legal Obligation: to comply with applicable law
 – Legitimate Interests: including responding to enquiries and managing operations
 – Consent: for specific purposes, such as sending marketing emails (which you may withdraw at any time)

6. Data Sharing
We do not sell, rent or trade your personal data. We may share your data with trusted third parties where necessary, such as:
 – IT support and hosting providers
 – Accountants and auditors
 – Regulatory bodies, courts, or law enforcement if required
 These third parties are contractually obliged to ensure confidentiality and lawful handling of your data.

7. Data Retention
We retain personal data only as long as necessary to meet contractual, legal, or operational requirements. Typically, this ranges between 6–7 years in line with HMRC standards and public sector frameworks. Once the retention period expires, your data is securely deleted or anonymised.

8. Your Rights
You have the right to:
 – Access the personal data we hold about you
 – Request corrections to inaccurate or incomplete data
 – Request deletion of your data where legally applicable
 – Restrict or object to certain types of data processing
 – Request data portability (where technically feasible)
 – Withdraw consent at any time (for processing based on consent)

9. Data Security
We use appropriate technical and organisational measures to secure your data, including secure cloud systems, encryption, and restricted staff access. All employees and contractors handling personal data are trained in GDPR compliance and confidentiality protocols.

10. Contact and Complaints
To exercise your rights or raise a concern, please contact us via email at: [Insert Email Here]. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

11. Policy Updates
We may update this Privacy Policy as necessary to reflect changes in data protection legislation or business operations. Please check our website for the most up-to-date version.