Privacy Policy

Effective date: 1 January 2025 · Data controller: Core Flow Point

1. Who we are

Core Flow Point, 371 Iffley Road, Oxford, OX4 4DP, United Kingdom, is the data controller for personal data collected through coreflowpoint.click and session bookings. Contact: hello@coreflowpoint.click.

2. What data we collect

  • Enquiry and booking data: name, email, session preferences, and message content submitted via our contact form.
  • Technical data: IP address, browser type, and pages visited when analytics cookies are accepted.
  • Cookie preference: your accept or reject choice stored locally in your browser.

We do not collect private keys, seed phrases, or wallet credentials.

3. How we use your data

  • Respond to enquiries and manage session bookings
  • Send session preparation materials and follow-up summaries
  • Improve website content when analytics cookies are enabled
  • Comply with legal obligations

4. Lawful basis

We process enquiry data under contractual necessity and legitimate interests (responding to requests you initiate). Analytics data is processed on the basis of consent when you accept cookies.

5. Retention

Enquiry records are kept for up to three years after your last interaction unless a longer period is required for accounting or dispute resolution. Analytics data is retained according to our analytics provider's default periods, typically up to 26 months.

6. Sharing

We do not sell personal data. We may share data with email hosting and analytics providers under data processing agreements. Data may be disclosed if required by law.

7. International transfers

If any processor stores data outside the UK, we ensure appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

8. Your rights

Under UK GDPR you may request access, correction, erasure, restriction, portability, or object to processing. You may withdraw consent for analytics at any time via cookie settings. Contact us to exercise rights; you may also complain to the Information Commissioner's Office (ico.org.uk).

9. Security

We use proportionate technical and organisational measures to protect data. No transmission over the internet is completely secure.

10. Children

Our services are intended for adults. We do not knowingly collect data from children under 16.

11. Changes

We will post updates on this page with a revised effective date.

See also our Cookie Policy.