Need help?

This Privacy Policy explains what personal information INBOUND FLOW collects through inboundflow.store, why we use it, who receives it and the rights you have under UK data protection law.

INBOUND FLOW, 206 Beaver Lane, Ashford, Kent TN23 5PF, United Kingdom, is the controller of the personal information described in this policy. You can contact us at info@inboundflow.store or on +44 7751 509251.

• Controller: INBOUND FLOW
• Email for all privacy matters
• We follow the UK GDPR and the Data Protection Act 2018

We collect information you choose to submit, such as your name, email, phone number, delivery address, account details, order contents and messages to customer care.

• Checkout and delivery information
• Account and sign-in details
• Returns, warranty requests and other correspondence

Our servers may log technical information such as IP address, browser type and requested pages for security and reliability. Your browser stores your sign-in session and shopping bag so they work between pages. We do not currently use analytics or advertising trackers.

• Security and fraud signals
• Bag and session continuity
• No advertising or cross-site tracking

Our checkout uses pay on delivery and does not request or store card numbers or security codes. We keep the order amount and payment status needed to fulfil and support the order.

• Order confirmation and reconciliation
• Fraud prevention and dispute handling
• Any future provider will be named before payment details are requested

We use personal information to perform our contract with you (taking, delivering and supporting orders), to meet legal obligations (accounting and tax records), for our legitimate interests (running a secure, reliable store and preventing fraud) and, where you opt in, to send marketing emails.

• Contract: processing and delivering your order
• Legal obligation: financial and tax records
• Consent: newsletters, which you can withdraw at any time

We share only what is needed with service providers that help us run the store: website hosting and database (Cloudflare), account sign-in (Supabase), transactional email (Resend) and delivery carriers. We may also disclose information when required by law. We do not sell personal information.

• Providers may use data only to provide their service to us
• Carriers receive only what is needed to deliver your parcel
• We never sell your data

Some of our providers may process information outside the United Kingdom. Where they do, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.

• Safeguards are required by UK law
• Contact us for details of the safeguards used
• Your rights apply wherever data is processed

We use only essential browser storage for sign-in, your shopping bag and security. Because it is strictly necessary, no consent banner is shown. If we add analytics or advertising tools we will ask for your consent first. See our Cookie policy for details.

• Review the separate Cookie policy
• Browser controls can block or clear storage
• Blocking essential storage may stop the bag or sign-in working

We keep order and accounting records for up to six years to meet tax and legal requirements, account details while your account is open, and newsletter details until you unsubscribe. We use proportionate safeguards such as HTTPS, access controls and limited provider access, but no system can promise absolute security.

• Retention varies by record type
• Data no longer needed is deleted or anonymised
• Report suspected security issues promptly

Under UK data protection law you have the right to access your personal information, to have it corrected or erased, to restrict or object to its use, to receive a portable copy and to withdraw consent at any time. We respond within one month and do not charge a fee for a standard request. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

• We may verify your identity before completing a request
• Withdrawing consent does not affect earlier lawful use
• You can complain to the ICO at any time

The store is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has provided information, please contact us and we will delete it.

• Contact us if a child submitted information
• We delete such information promptly
• Parents and guardians can make requests on a child’s behalf

Send a privacy request to info@inboundflow.store with the subject “Privacy request,” or write to INBOUND FLOW, 206 Beaver Lane, Ashford, Kent TN23 5PF, United Kingdom. We will confirm receipt and respond within the period required by law. Material updates will be reflected by a new effective date and, where required, an additional notice.

• State the right you want to exercise
• Do not email passwords or complete card details
• Marketing emails include their own unsubscribe control

Include the product name, your order reference when available, and a clear description of what you need. Photos are useful for delivery-condition, care and warranty questions.