Privacy Policy

Last updated: 1 January 2026

1. Who We Are

ZovanteFlow ("we", "us", "our") is a UK-based digital agency providing Google Business Profile optimisation and AI-powered lead generation services. Our website is zovanteflow.com. For privacy enquiries, contact: will@zovanteflow.com.

2. Information We Collect

We collect the following information to deliver and manage our services:

Business details: Business name, address, phone number, website
Contact details: Your name, email address, phone number
Payment information: Billing details are processed and stored securely by DodoPayments. We do not store full card numbers on our systems.
Google Business Profile data: Insights, review data, post performance, and listing information necessary to perform our services
Portal usage data: Login activity, report views, and communications through our client portal

3. How We Use Your Information

To provide, manage, and improve the services described in your agreement
To process payments and manage billing via DodoPayments
To send monthly performance reports, updates, and service notifications
To communicate with you regarding your account or service changes
To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

We process your data under the following legal bases (UK GDPR):

Contract performance: To deliver the services you have signed up for
Legitimate interests: To manage our business and communicate service-related information
Legal obligation: To comply with applicable law and regulations

5. Data Retention

We retain your data for as long as you are a client and for up to 7 years afterwards for legal and accounting purposes, unless you request earlier deletion and we are not legally required to retain it.

6. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your data ("right to be forgotten"), subject to legal retention requirements
Object to or restrict how we process your data
Receive your data in a portable format
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email will@zovanteflow.com. We will respond within 30 days.

7. Cookies

Our website uses essential cookies to maintain your session when logged in to the client portal. We do not use advertising or tracking cookies.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our systems are hosted on secure UK-based infrastructure.

9. Third-Party Services

We use the following third-party services in the delivery of our work:

DodoPayments — payment processing
Google LLC — Google Business Profile platform (subject to Google's own privacy policy)
Brevo (Sendinblue) — transactional email delivery

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through the client portal. The latest version is always available at zovanteflow.com/privacy.