Privacy Policy

This policy explains what personal data Flourish Foundry collects when you use this website, why we collect it, how we use it, and the rights you have over it. It is written in plain English rather than legalese.

Who we are

Flourish Foundry is a business advisory practice operated by Dave Christie, based at 6 Harris Close, Leighton, Nantwich CW1 4TQ, United Kingdom. For the purposes of UK data protection law, Flourish Foundry is the data controller for the personal data described below.

You can reach us at dave@flourishfoundry.co.uk.

What data we collect, and why

We collect the following personal data:

• Booking a call. When you book a call through the scheduling tool on this site, you provide your name, email address, phone number, and any notes you add to the booking. This information is used to hold the call and to follow up afterwards.
• Messages you send us. When you email us or reply to our emails, we keep a record of the correspondence so we can reply properly.
• Analytics. We use a privacy-friendly analytics tool to understand how people use the site in aggregate — pages visited, approximate location (country/region level), and device type. This data is not tied to your identity. See our Cookies Policy for details.

Our lawful basis

Under UK GDPR we rely on the following lawful bases:

• Contract — to deliver services you have booked or requested (e.g. the call you scheduled, the resource you asked for).
• Legitimate interests — to respond to messages you send us, keep our records, and run basic analytics on how the site is used.
• Consent — to send you marketing emails beyond what you specifically requested. You can withdraw consent at any time by clicking the unsubscribe link in any email or emailing us.

Who we share your data with

We don't sell your data. We use a small number of trusted service providers to run the site and our business. Each of them processes personal data on our behalf under a data-processing agreement:

• GoHighLevel (HighLevel Inc., United States) — our CRM and booking system. Holds your booking, contact details, and records of our correspondence.
• Resend (Resend, Inc., United States) — delivers transactional and marketing email.
• Vercel (Vercel Inc., United States) — hosts the website and provides privacy-friendly analytics.
• Sanity (Sanity AS, Norway) — the content management system behind the site. Does not handle contact or booking data.
• Google Analytics (Google LLC, United States) — only where enabled. Used for anonymised usage statistics.

We may also disclose personal data where we are legally required to do so.

International transfers

Some of the processors above are based in the United States. Where that applies, transfers are covered by the UK Addendum to the EU Standard Contractual Clauses, or by equivalent safeguards including adequacy decisions where available.

How long we keep it

We keep your data for as long as we need it for the purposes above, or as long as we're legally required to (for example, tax records must be kept for six years). Marketing records are kept until you unsubscribe or ask us to delete them.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you
• ask us to correct inaccurate data
• ask us to delete your data (where we no longer have a lawful reason to keep it)
• restrict how we process your data, or object to processing
• receive your data in a portable format
• withdraw consent where we rely on it

To exercise any of these rights, email dave@flourishfoundry.co.uk. We will respond within one month.

Complaints

If you're unhappy with how we've handled your data, please email us first so we have a chance to put it right. If you're still not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk/concerns.

Changes to this policy

If we make material changes, we'll update the "last updated" date at the top of this page and, where appropriate, notify you by email.