Privacy Policy
Your privacy matters. This Privacy Policy explains how Digitsflow LTD ("we", "our", "us") collects, uses and protects personal data when you use Postcodewise—whether you browse reports, authenticate for APIs, or collaborate inside organisation workspaces.
Last Updated: May 2026
1. Who We Are
Digitsflow LTD is the data controller for personal information processed in connection with Postcodewise. We are a private limited company registered in England & Wales (Company No. 16330711) with our registered office at 3rd Floor, 86‑90 Paul Street, London, EC2A 4NE, United Kingdom.
2. What Data We Collect
- Account & workspace data: name, email address, identifiers for login, organisation or workspace memberships, invitations and feature flags aligned to personal vs business account features.
- Operational content you send us: optional profile fields you choose (for example telephone if offered), postcode intelligence you request, uploads you deliberately submit inside a workspace API or UI, voluntary survey payloads you configure plus structured answers (often including UK postcodes selected by respondents) and timestamps or IP logs needed for moderation and misuse prevention.
- Technical & telemetry data: IP addresses, coarse device or browser fingerprints, referrer paths, webhook or API request diagnostics and security logs.
- Payment and agreement data: invoice details, quotation references or billing contact details you provide for paid API or workspace agreements. If online card checkout is introduced later, the checkout screen will name the payment processor before purchase.
- Support & feedback: free-text messages, complaint threads and attachments emailed or submitted via our contact workflows.
3. How We Use Your Data & Legal Basis
We process your personal data only where we have a lawful basis under UK GDPR:
- Contract: to onboard you, authenticate access, fulfil API or workspace entitlements where agreed, provision workspace artefacts (such as branded survey links), and honour written project agreements.
- Legitimate Interests: to improve and secure Postcodewise, prevent fraud, and analyse aggregated usage.
- Legal Obligation: to meet accounting, tax, and regulatory requirements.
- Consent: to send you marketing emails (you can withdraw at any time).
4. Third‑Party Processing & Sharing
We disclose data only to trusted processors who help us operate Postcodewise:
Amazon Web Services (AWS)
Cloud hosting within the UK/EU.
DigitalOcean
Cloud hosting within the UK/EU.
Hetzner
Cloud hosting within the EU.
Google Analytics 4
Web performance analytics (IP anonymisation applied where configured).
Cloudflare
Security and content-delivery network
Microsoft Clarity
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
We may also share data where required by law or to protect our legal rights. We do not sell or rent your personal data.
5. International Transfers
Where we transfer personal data outside the UK or European Economic Area, we rely on appropriate safeguards such as:
- UK adequacy regulations;
- International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses;
- Binding corporate rules of our processors.
6. Your Data‑Protection Rights
Under UK GDPR you have rights to:
- Access – obtain a copy of your data.
- Rectification – correct inaccurate or incomplete data.
- Erasure – request deletion ("right to be forgotten").
- Restriction – limit processing.
- Portability – receive data in a machine‑readable format.
- Object – object to processing based on legitimate interests or direct marketing.
- Withdraw Consent – at any time where processing is based on consent.
To exercise any of these rights, email privacy@digitsflow.co.uk. We will respond within one month.
If you believe we have not handled your data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk.
7. Data Retention & Security
We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy and meet legal obligations (typically up to 6 years for financial records). Technical and organisational measures—including encryption in transit and at rest, access controls and regular penetration testing—are in place to safeguard your information.
8. Cookies
Postcodewise uses cookies to operate and improve the platform. Full details are provided in our Cookie Policy, where you can manage preferences where tooling offers controls.
9. Contact Us
Questions or requests? Contact our Privacy Team:
Digitsflow LTD – Postcodewise Product
3rd Floor, 86‑90 Paul Street, London EC2A 4NE, United Kingdom
© 2026 Digitsflow LTD.
