Privacy Policy

Last updated: September 2026

Deployflow Ltd (“we”, “our”, “us”) is committed to protecting your privacy and handling your personal data in a transparent and secure way. This Privacy Policy explains what personal information we collect, how we use it, and what rights you have.

1. Who We Are

Deployflow Ltd is the data controller for the personal information collected through this website.

  • Address: Venture House, 2 Arlington Square, Downshire Way, Bracknell, RG12 1WA, Berkshire, United Kingdom
  • Email: [email protected]

Our appointed Data Protection Officer (DPO) is Anna Radosh and she can be contacted on: [email protected].

2. What Information We Collect

We collect and process personal data that is relevant to our interactions with you and the operation of our website and services. We may collect and process the following categories of personal data when you use our website or services:

  • Contact details (name, email, phone number): such as your name, email address and telephone number.
  • Company and job role information: such as your company, job title or role.
  • Enquiry details when you contact us, including information you provide when you contact us or communicate with us.
  • Marketing and subscription details if you sign up for newsletters, including your communication preferences and information provided when you subscribe to receive updates from us.
  • Technical data and usage information, such as IP address, browser type, device information and information about how you interact with our website and cookies.

3. How We Use Your Information

We use your information to:

  • Provide and improve our services
  • Respond to enquiries and support requests
  • Send updates or marketing communications (if you have opted in)
  • Maintain business records and comply with legal obligations
  • Monitor website performance and improve user experience

4. Legal Grounds for Processing

We rely on the following legal bases under UK GDPR to process your personal data:

  • Consent: Where you have given us clear consent for us to process your personal data for a specific purpose, such as for newsletters or non-essential cookies. You may withdraw your consent at any time.
  • Contract: Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract.
  • Legal Obligation: Where the processing is necessary for us to comply with a legal or regulatory obligation, such as tax or accounting requirements.
  • Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate business interests or those of a third party, provided that those interests are not overridden by your rights and interests. Our legitimate interests include:
    • Managing our business relationships.
    • Responding to our business enquiries.
    • Improving the user experience of our website and services.
    • Conducting marketing and analytics to understand our audience and business performance.
    • Protecting our business from fraud and ensuring the security of our IT systems.

5. Sharing Your Data

We do not sell your personal data. We may share it with the following types of third parties where necessary for the purposes described in this Privacy Policy including:

  • IT Hosting and Cloud Services: To store our website data and run our applications.
  • Analytics Services: To help us understand how people use our website.
  • Email Platforms: To manage our newsletters and communications.
  • Professional Advisers: Such as legal or tax consultants, when necessary.
  • Regulators or Authorities: When required by law.

Where these providers act outside the UK, we ensure appropriate safeguards are in place (see Section 7).

6. Retention of Data

We only keep personal data as long as necessary for the purposes described above:

  • Contact enquiries: up to 12 months
  • Newsletter subscriptions: until you unsubscribe
  • Client/contractual data: we retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to meet applicable legal, regulatory, tax, accounting or reporting requirements. The applicable retention period will depend on the nature of the information and purpose for which it is processed.

After this period, your data will be securely deleted or anonymised.

7. International Data Transfers

Some of our service providers may be located outside the UK. Where we transfer personal data outside the UK, we take steps to ensure that an appropriate level of protection is provided in accordance with applicable data protection law. Depending on the destination and circumstances of the transfer, we may rely on:

  • UK adequacy regulations: For transfers to countries deemed to have adequate data protection laws.
  • Appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses (SCCs) as applicable.

8. Cookies & Tracking

We use cookies and similar technologies to make our website work. For information about the cookies we use, their purposes and how you can manage your preferences, please see our Cookie Policy.

9. Your Rights

Under UK GDPR, you may have the right, depending on circumstances, to:

  • Access the personal data we hold about you and obtain a copy of it.
  • Correct personal data that is inaccurate or incomplete.
  • Request erasure of your personal data where there is no lawful reason for us to continue processing it.
  • Request restriction of the processing of your personal data in certain circumstances.
  • Object to processing of your personal data where we rely on legitimate interests and, at any time, where your personal data is processed for direct marketing purposes.
  • Withdraw your consent at any time where we rely on consent as the lawful basis for processing. This will not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the time required by applicable data protection law.

In certain circumstances, we may need additional information to verify your identity or clarify your request.

If you have concerns about how we use your personal data, you have the right to make a complaint to the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint, the UK supervisory authority for data protection. We would, however, appreciate the opportunity to address your concerns first, so please contact us in the first instance.

10. Automated Decision-Making

We do not carry out automated decision-making that produces legal or significant effects on you. If this changes, we will update this policy.

11. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised or unlawful access, use, disclosure, alteration or loss. We regularly review our security measures and restrict access to personal data to those who need it for legitimate business purposes.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business, our processing activities or applicable legal requirements. The latest version will be published on this website, and the “Last Updated” date will be revised accordingly.

If we intend to use your personal data for a new purpose, we will update this Privacy Policy and, where required, bring the change to your attention before we begin the new processing.