Privacy notice
How Nexabyte handles personal data submitted through flowarc.uk.
Last updated: 18 May 2026.
Who we are
Nexabyte Ltd is the data controller for flowarc.uk. We're a UK company building Flow Arc, a payment-recovery product for small businesses.
What the contact form collects
When you fill in the contact form, we collect the fields you provide: your name, email address, optionally your company name and phone number, and your message. We also record a one-way hash of your IP address and your browser user-agent string for abuse detection.
Why we collect it
We use your submission to reply to your enquiry and to keep a record of the conversation. The lawful basis is legitimate interest (Article 6(1)(f) UK GDPR): we cannot meaningfully respond to an enquiry without keeping the message.
How long we keep it
Open and in-progress enquiries are kept until they're resolved. Closed enquiries are automatically deleted twelve months after closure.
Who can see it
Only Nexabyte staff with a legitimate need to handle your enquiry. We don't share submissions with any third party for marketing, analytics, or any other purpose.
Where it's stored
Submissions are stored in Supabase (PostgreSQL) hosted in the UK, and dispatched via Resend for the founder notification and your confirmation email.
Your rights
You have the right to access, correct, or request deletion of your submission, and to lodge a complaint with the Information Commissioner's Office (ico.org.uk). To exercise any of these rights, reply to the confirmation email or use the contact form and quote your reference.
Cookies and analytics
flowarc.uk does not currently set tracking cookies and does not run third-party analytics on the public site.