Privacy Policy

 1. Who We Are

This Privacy Policy explains how personal data is collected and processed by:

RJP Group Ltd (trading as Flow Smart Suite)
Registered in England and Wales
Company No: 5937783

Registered Office: 124 City Road, London, EC1V 2NX
Email: [email protected]

For the purposes of UK data protection law, we are the Data Controller in respect of personal data collected via this website.

Where we provide services to clients, we may also act as a Data Processor in accordance with our Master Services Agreement and Data Processing Addendum.

2. What Personal Data We Collect

We may collect and process:

Information You Provide

Name

Email address

Phone number

Company name

Information submitted through contact forms

Information provided during sales enquiries

Automatically Collected Information

IP address

Device type

Browser type

Pages visited

Date and time of access

This data may be collected through analytics technologies such as Google Analytics.

3. How We Use Personal Data

We use personal data to:

Respond to enquiries

Provide requested information

Deliver services to clients

Improve website performance

Monitor usage trends

Comply with legal obligations

Where we process personal data on behalf of clients, we do so strictly in accordance with our contractual obligations and instructions.

4. Marketing Communications

We may offer the option to subscribe to newsletters, marketing updates, educational content, or downloadable resources.

Where you choose to subscribe, we will process your contact details to send relevant communications about our services, industry insights, events, or resources.

We will only send marketing communications where:

·       You have provided your consent; or

·       We are permitted to do so under applicable electronic communications regulations.

You may unsubscribe from marketing communications at any time by:

·       Clicking the “unsubscribe” link in any email; or

·       Contacting us at [email protected]

We do not sell personal data to third parties.

4. Direct Marketing

We may send marketing communications relating to our services to business contacts and corporate subscribers.

Business contact details may be obtained from:

·       Information you provide directly

·       Publicly available sources

·       Reputable B2B data providers

Where permitted by applicable law, we rely on legitimate interests to contact corporate subscribers about services that may be relevant to their business activities.

Where consent is required under applicable electronic communications regulations, we will obtain such consent prior to sending marketing communications.

All marketing communications will:

·       Clearly identify Flow Smart Suite as the sender

·       Include a simple mechanism to opt out of future communications

We maintain suppression lists to ensure that individuals who opt out do not receive further marketing communications.

You may object to direct marketing at any time by contacting us at [email protected]  or by using the unsubscribe mechanism provided.

5. Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR:

Consent (e.g., analytics cookies where required)

Legitimate interests (e.g., responding to enquiries, improving services)

Contractual necessity (where entering into or performing a contract)

Legal obligation (where required by law)

6. Data Sharing

We may share personal data with:

Hosting providers

Telephony infrastructure providers

AI model providers

Analytics providers

Professional advisers

A current list of sub processors is available at: sub processors

We require third parties to process data securely and in accordance with applicable data protection law.

We may use third-party email marketing or CRM platforms to manage communications and subscriber lists. These providers process data on our behalf in accordance with applicable data protection law.

7. International Transfers

Some service providers may process data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, including:

UK International Data Transfer Agreements

Standard Contractual Clauses

Adequacy decisions

8. Data Retention

We retain personal data only for as long as necessary to:

Fulfil the purposes for which it was collected

Comply with legal or contractual obligations

Retention periods vary depending on the nature of the data and our legal requirements.

9. Your Rights

Under UK GDPR, you have the right to:

Access your personal data

Request correction of inaccurate data

Request erasure (where applicable)

Restrict processing

Object to processing

Data portability

Withdraw consent (where processing is based on consent)

You may exercise these rights by contacting us at: [email protected]

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.

11. Cookies

We use cookies and similar technologies on this website.

Further details are provided in our Cookie Policy at:
/legal/cookies

12. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on this page with an updated revision date.

Version 1.1

Registered address:
RJP Group LTD, 124 City Road, London, EC1V 2NX

Contact email:
[email protected]

Last updated 27th February 2026.