Privacy Policy

Last updated: 1 January 2026

1. Data Controller

ZovanteFlow is the data controller responsible for your personal information.

Trading name: ZovanteFlow
Service address: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Contact: will@zovanteflow.com
ICO Registration: Pending — registration in progress. We are obligated to register as a data controller under UK GDPR and are completing this as a priority.

2. Who We Are

ZovanteFlow ("we", "us", "our") is a UK-based digital agency providing Google Business Profile optimisation and local search visibility services. Our website is zovanteflow.com.

3. Information We Collect

We collect the following information to deliver and manage our services:

Business details: Business name, address, phone number, website
Contact details: Your name, email address, phone number
Payment information: Billing details are processed and stored securely by DodoPayments. We do not store full card numbers on our systems.
Google Business Profile data: Insights, review data, post performance, and listing information necessary to perform our services
Portal usage data: Login activity, report views, and communications through our client portal

4. How We Use Your Information

To provide, manage, and improve the services described in your agreement
To process payments and manage billing via DodoPayments
To send monthly performance reports, updates, and service notifications
To communicate with you regarding your account or service changes
To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Legal Basis for Processing

We process your data under the following legal bases (UK GDPR):

Contract performance: To deliver the services you have signed up for
Legitimate interests: To manage our business and communicate service-related information
Legal obligation: To comply with applicable law and regulations

6. Data Retention

We retain your data for as long as you are a client and for up to 7 years afterwards for legal and accounting purposes, unless you request earlier deletion and we are not legally required to retain it. Portal login data and session logs are deleted within 90 days of account closure.

7. Your Rights

Under UK GDPR, you have the following rights. To exercise any of them, email will@zovanteflow.com — we will respond within 30 days.

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Correct inaccurate or incomplete data
Right to erasure ("right to be forgotten"): Request deletion of your data, subject to legal retention obligations. Submit your request by email and we will confirm deletion within 30 days.
Right to data portability: Receive your data in a structured, machine-readable format (CSV or JSON on request)
Right to object or restrict: Object to or limit how we process your data
Right to complain: Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113

8. Cookies

Our website uses essential cookies to maintain your session when logged in to the client portal. We do not use advertising or tracking cookies.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our systems are hosted on secure UK-based infrastructure with encrypted connections (HTTPS/TLS).

10. Third-Party Services and Data Processing Agreements

We use the following third-party services to deliver our work. Where required under UK GDPR, we have data processing agreements (DPAs) in place with these providers:

DodoPayments — payment processing. Processes payment card data under PCI DSS compliance. DPA in place.
Brevo (Sendinblue) — transactional email delivery (welcome emails, monthly reports, service notifications). DPA in place; Brevo is GDPR-compliant and processes data in the EU.
Google LLC — Google Business Profile platform. Your GMB data is subject to Google's own privacy policy at policies.google.com/privacy. You grant us authorised access as part of our service agreement.

None of these providers receive your data for their own marketing purposes.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through the client portal. The latest version is always available at zovanteflow.com/privacy. Last updated: August 2026.