Privacy Policy

Last updated: November 2024

1. Introduction

Flux-blossom ("we", "our", "us") is committed to protecting the privacy of individuals who use our card protection services. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect the following categories of personal information:

• Identity Data: Name, title, date of birth
• Contact Data: Email address, postal address
• Transaction Data: Details about payments, purchases, and card activity (tokenised)
• Technical Data: IP address, browser type, device information
• Usage Data: Information about how you use our website and services

3. How We Collect Your Information

We obtain personal information through:

• Direct interactions when you complete forms on our website
• Automated technologies including cookies and similar tracking methods
• Third-party sources such as payment processors (with appropriate safeguards)

4. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Contract: Processing necessary to perform our service agreement with you
• Legitimate Interests: Where processing is necessary for our legitimate business interests
• Consent: Where you have given clear consent for specific processing activities
• Legal Obligation: Where we must comply with legal requirements

5. How We Use Your Information

We use your personal information to:

• Provide and manage our card monitoring services
• Send alerts and notifications about suspicious activity
• Respond to your enquiries and provide customer support
• Improve our services and develop new features
• Comply with legal and regulatory obligations
• Prevent fraud and protect against security threats

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Transaction monitoring data is typically retained for 24 months following the end of your subscription, unless longer retention is required by law or for legitimate business purposes.

7. Data Sharing

We may share your information with:

• Service providers who assist in delivering our services (under strict data processing agreements)
• Professional advisers including lawyers and auditors
• Regulatory authorities when required by law
• Law enforcement agencies in connection with fraud prevention

We do not sell your personal data to third parties for marketing purposes.

8. Your Rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data in certain circumstances
• Object to processing based on legitimate interests
• Request restriction of processing
• Data portability
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us at [email protected]

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

10. International Transfers

Your personal data is primarily processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

11. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email or through a notice on our website.

12. Contact Us

For questions about this Privacy Policy or our data practices, please contact:

Data Protection Officer
Flux-blossom
47 Commerce Street
Birmingham, B2 4DP
[email protected]

13. Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.