Privacy Policy
Effective Date: August 17, 2026
This privacy policy for Flexiteek International Ltd (“We”, “Us” or “Our”) tells you how we may collect, use and share your information when you visit our website https://www.flexiteek.com.
We appreciate your decision to use our website https://www.flexiteek.com and to trust us with your valuable personal information. In this document, we seek to explain in the clearest terms possible our privacy practices. We strongly encourage you to read this document (and any other related documents) carefully before using the website. If there are any terms or conditions in this document that you do not agree with, please do not use the website, or in case you are already using it, please discontinue the use immediately. By using our website, you acknowledge that you have read and understood this Privacy Policy.
We will never sell, rent, or trade your personal information to third parties for their own marketing purposes.
What information do we collect about you?
When we collect information, we do so to ensure that you get to experience our service seamlessly. For that, we collect the following information.
The personal information that we collect about you are the following:
- Your name
- Company or business name
- Postal address
- Email address
- Telephone or mobile number
- Information contained in enquiries or other correspondence with us
- Photographs or other information you choose to upload through our website
- Information about your use of our website, including IP address, browser type, device information and approximate geographical location
- Website browsing and interaction information collected through cookies and similar technologies
- Information relating to your marketing preferences and subscriptions
How do we collect such information?
We may use any of the following three ways to get information about you.
- The information that you give us
- The information that we automatically collect from you
- Information that we collect from third parties
Before going into the reasons why we collect the information that we do, we want you to understand what the above three terms mean.
a. The information that you give us
When you contact us, submit an enquiry, subscribe to marketing communications or otherwise interact with us , you may provide personal information like your name or email address. This is the information that you give us. This may not be limited to what we have mentioned and can change according to the nature of the service/product that we provide.
b. The information that we automatically collect from you
When you access our service from a device, we may automatically collect information from your device, such as through the use of cookies. You will know more about the automatic collection of personal information in the next section.
Cookies and similar technologies
Cookies are small packets of information that are placed on your device, so that we can retrieve the information about you, “such as your preferences, website settings and information about how you use our website
For more information about cookies and similar technologies, please see our Cookie Policy:
https://www.flexiteek.com/en-gb/cookies-policy/
Why do we collect information about you?
We collect information about you for a variety of reasons. It helps us, among other things, to serve you better. The following are the ways in which we use the information that we collect about you.
- To examine the usage trends
- To respond to enquiries, provide quotations, deliver customer support and manage customer relationships
- To send marketing and promotional communications
- To comply with legal and regulatory obligations
How long do we retain your information?
Information submitted through website enquiry forms will normally be retained for up to 90 days on the website before being transferred to our CRM systems or deleted. Certain information may be retained for longer where required for customer service, warranty, contractual, accounting, tax or legal purposes.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
Do we share your information?
We may share your information with third parties in the following ways:
- Sharing with your consent: When you give consent, we may share your information with third parties for the purposes that are mentioned in the consent notification.
- Legal Obligations: We may disclose information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).
- For business transfers: We may share your personal information in connection with, or during the course of negotiations regarding merger, sale of business assets, financing or acquisition of all or a part of our business by another entity.
- International Data Transfers – Some of our third-party service providers may process personal information outside of the United Kingdom. Where personal information is transferred internationally, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws, including the use of approved contractual clauses or other recognised transfer mechanisms.
Sharing of information
We do not sell your personal information.
We may share personal information with trusted service providers who process data on our behalf and under our instructions, including website hosting providers, analytics providers, CRM providers, and email service providers. Such sharing is only carried out where necessary to provide our services, operate our website, communicate with users, or comply with legal obligations.
The categories of personal information that are shared with third parties are as follows:
Contact information, including email addresses Information submitted through website forms Internet and network activity information, including IP address Device and browser information Geographical/location information Website browsing and interaction information, including analytics and behavioural data Session activity and session recording data Information contained in emails sent through the website
The categories of third parties to whom the information is disclosed are as follows:
- Google LLC, website analytics provider
- Microsoft Corporation / Microsoft Clarity, to understand how visitors use and interact with our website. Microsoft Clarity may collect behavioural metrics, heatmaps and session replay data to help us analyse website usage and improve website functionality and user experience.
- SendGrid Inc., email delivery provider
- Mailchimp, email delivery provider
- Fellowship Productions Ltd., website development and digital marketing provider
- Sharpstack Hosting Ltd. (T/A ProStack Hosting), website hosting provider.
- Workbooks CRM, customer relationship management provider. Information submitted through website enquiry forms may be securely transferred to and stored within our Workbooks CRM system for the management of enquiries, customer relationships and related business activities.
Further information about how our third-party service providers process personal information can be found in their respective privacy notices:
Privacy policies of key third-party providers:
Google: https://policies.google.com/privacy
Microsoft: https://privacy.microsoft.com/
Mailchimp: https://mailchimp.com/legal/privacy/
SendGrid: https://www.twilio.com/legal/privacy
Distributors
We may share your contact details and other relevant enquiry information with a Flexiteek distributor where that distributor is better placed to assist you.
Our distributors are independent businesses and may be located outside the UK or European Economic Area. We require appropriate contractual arrangements with our distributors concerning the handling and protection of personal data.
Where a distributor processes your information independently, it may also have its own privacy responsibilities and policies
Disclosure of personal information
We do not disclose personal information except for the following purposes:
- To perform services or deliver goods.
- To prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted personal information.
- To resist malicious, deceptive, fraudulent, or illegal actions directed at the business and to prosecute those responsible for those actions.
- To ensure safety of natural persons.
- For short-term, transient use, including, but not limited to, non-personalised advertising shown as part of a consumer’s current interaction with the business.
- To perform services on behalf of the business
- To verify or maintain the quality or safety of a product, service, or device and to improve or upgrade them.
- Payment information may be processed by our third-party payment providers when purchases are made through our website. We do not store complete payment card details on our systems.
Review and change information
The user has the right to review and change their information by:
Users may contact us to request access to, correction of, or updates to their personal information. Requests can be made by contacting our Data Protection Officer at [email protected]. We will review and action valid requests in accordance with applicable data protection legislation.
GDPR Disclosures
Automatic processing of data
We may use automated technologies such as analytics tools and cookies to understand website usage and improve the user experience. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
Legal basis for the collection
The General Data Protection Regulation requires us to identify and set out the legal basis, or in other words, the legal justification, for processing your personal information. The following are the legal bases on which we process your personal data.
Consent: We may process your personal information for the purposes described in this Privacy Policy with your consent.
Contract: We may process your personal information where necessary to enter into or perform a contract with you, including responding to enquiries, providing quotations, providing customer support, handling warranty claims, supplying products and services, and managing customer relationships.
Legal obligations: We may disclose information where we are legally required to do so to comply with applicable laws, governmental requests, judicial proceedings, court orders, or legal processes, such as responding to a court order or a subpoena (including requests from public authorities to meet national security or law enforcement requirements).
Legitimate interests: We may process your personal data where it is reasonably necessary to achieve our legitimate business interests.
Our legitimate interests include operating, maintaining and securing our website and systems, responding to enquiries and requests, managing customer and distributor relationships, improving our website, products and services, analysing website usage and performance, preventing fraud and misuse, and ensuring the security and integrity of our systems. We balance these interests against individuals’ privacy rights and only process personal information where necessary and proportionate.
Your rights
In accordance with Articles 12 to 23 of the General Data Protection Regulation, the data subject, that is you, has the following rights.
- Right to object to the processing of personal data in certain circumstances. See here for details.
- Right to request access to the data we have collected about you and to receive a copy of it in an accessible format.
- Right to restrict the processing of your personal data for a limited period, under certain circumstances. See here for details.
- Right to rectification: The right to have inaccurate personal information corrected and incomplete personal information completed.
- Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
- Right to erasure of your personal information, also known as the right to be forgotten.
- Right to data portability: The right to receive personal information you have provided to us in a structured, commonly used and machine-readable format and, where technically feasible, to have that information transferred to another organisation.
To exercise any of the rights mentioned above, you may use the contact details provided in this Privacy Policy.
Consequences of non-consent
Some features of our website require the collection and processing of personal information. Where processing is based on consent, you may withdraw that consent at any time. However, doing so may limit our ability to provide certain services or website functionality.
Privacy of children
Our website and services are not directed at children, and we do not knowingly collect personal information from children.
If you are a parent or legal guardian and believe that your child has provided us with information without your consent, please contact us. Upon verification that we have collected such information without parental consent, we will remove the information from our database.
Website and Database Server
The website is hosted within a secure UK data centre that employs physical and electronic security controls including CCTV, controlled access, monitoring systems and 24-hour security measures.
CCTV
Flexiteek International Ltd operates CCTV cameras at entrances and car parks at its production site in the UK.
CCTV is used primarily for security, crime prevention, the protection of our buildings, equipment and personnel, and the investigation of incidents.
CCTV footage may contain images of employees, visitors, customers, contractors and other individuals who enter areas covered by the cameras.
Access to CCTV footage is restricted to authorised Flexiteek team members and is not routinely shared with third parties.
CCTV footage is normally retained for up to 30 days, unless it is required for the investigation of an incident, legal claim, or legal obligation.
Data Breaches
Where required by applicable data protection law, we will notify the relevant supervisory authority and affected individuals of a personal data breach within the applicable legal timeframes.
Links to other websites or apps
On our website, we may provide links to external websites, apps, or services. These are not operated by us and therefore are not governed by our Privacy Policy or practices. We strongly recommend that you review the privacy policies of such websites or services before engaging with them to ensure that you do not provide personal information that you do not wish to share.
California Consumer Protection Act (CCPA)
We do not sell personal information.
We may share personal information with service providers and contractors for business purposes, including website analytics, website hosting, customer relationship management, email delivery, marketing support, and compliance with legal obligations.
• To provide you with our products and services
• To improve our products and services
• For marketing and advertising purposes
• To conduct research
• To comply with applicable laws and regulations
• To protect our rights and interests
Your rights
The California Consumer Protection Act grants consumers the following rights:
- The right to know what personal information a business has collected about them, including:
- the categories of personal information collected;
- the categories of sources from which the personal information is collected;
- the business or commercial purposes for collecting, selling, or sharing personal information;
- the categories of third parties to whom the business discloses personal information; and
- the specific pieces of personal information the business has collected about the consumer.
- The right to delete personal information that the business has collected from the consumer, subject to certain exceptions.
- The right to correct inaccurate personal information that a business maintains about the consumer.
- The right to opt out of the sale or sharing of personal information, if the business sells or shares such information.
- The right to limit the use or disclosure of sensitive personal information if the business uses or discloses it for purposes other than those permitted under the CCPA or its regulations.
- The right to non-discrimination, meaning consumers will not receive discriminatory treatment for exercising their CCPA rights, including protection against retaliation for employees, applicants, or independent contractors who exercise such rights.
Exercising your rights
Under the California Consumer Privacy Act (CCPA), you have the right to request access to, correction of, or deletion of the personal information we have collected about you. You may also have the right to know specific details about how we collect, use, disclose, and sell or share your personal information.
To exercise these rights, you may submit a verifiable consumer request by:
Users can submit requests to access, correct or delete their personal information by contacting our Data Protection Officer at [email protected] . Requests will be reviewed and processed in accordance with applicable data protection legislation. We may request sufficient information to verify the user’s identity before processing the request.
When you make a request, we will take steps to verify your identity before fulfilling it, which may include asking you to provide certain identifying information. You may also authorise an agent to make a request on your behalf, provided that we receive proof of your authorisation.
We will respond to your request within 45 days, as permitted by law, and will inform you if additional time is required. There is no charge for processing your verifiable consumer request unless it is excessive or repetitive.
Security of your personal information
We take reasonable measures to ensure that the information we collect from you is stored securely and protected to the best extent possible. However, no method of internet transmission or digital storage is completely secure, and we cannot guarantee absolute security. While we use commercially reasonable and appropriate security measures to protect your information, we cannot promise that it will be 100% secure.
Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes in the law or our privacy practices. We recommend that you review this privacy policy periodically to ensure it remains in line with your expectations.
The privacy policy will be effective from the date it is posted on this page.
Contact us
For any questions or concerns regarding your privacy, or to exercise any of your rights, you may contact us using the following details:
DPO: Data Protection Officer by email [email protected]
Address:
Flexiteek International Ltd
Woodrolfe Road
Tollesbury
CM9 8RY
Email address: [email protected]
Link to our contact page: https://www.flexiteek.com/contact/
Right to Lodge a Complaint
If you are unhappy with how we process your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection supervisory authority.
Website: https://ico.org.uk
Telephone: 0303 123 1113
Data Controller
The data controller of this website is: Flexiteek International Ltd, a UK Private limited Company with company number: 1215369
Whose registered office is: Woodrolfe Road, Tollesbury, Essex, CM9 8RY, United Kingdom.