Privacy Policy, Invoice Financing

1. Who we are

Data controller: [NEW LTD, TBC], trading as Invoice Financing, a trading style of Funding Flow. Contact: privacy@invoicefinancing.co.uk.

2. Data we collect

Account & identity data (name, email, phone, company details)
Fact-find data submitted for an invoice finance review (turnover, debtor book, facility history)
Documents you upload (management accounts, bank statements, aged debtor reports)
Technical data (IP address, truncated for logs, browser type, device, pages visited)
Conversation data with Flo, our AI assistant, when you choose to use it

3. Lawful bases

Consent, for analytics and marketing cookies, marketing emails and AI assistant chat.
Legitimate interest, for operating the platform, fraud prevention and providing introductions to lenders.
Contract, when you submit a fact find and we process it to match you to a lender.
Legal obligation, to comply with AML and tax record-keeping requirements.

4. Data processors

Supabase (London, EU region), database, authentication and file storage.
Resend, transactional email delivery.
Anthropic, large language model that powers Flo (used only when you interact with the chat).

All processors are bound by data processing agreements and only handle data on our instructions.

5. Retention

Fact-find data and supporting documents are retained for 7 years from the end of our relationship with you, in line with standard commercial record-keeping practice. After this period the data is deleted or fully anonymised. Marketing data is retained until you withdraw consent.

6. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you
Rectify inaccurate data
Erase data (subject to legal retention obligations)
Restrict or object to processing
Data portability
Withdraw consent at any time
Complain to the ICO (ico.org.uk)

To exercise any of these rights email privacy@invoicefinancing.co.uk. We respond within 30 days.

7. Security

Data is encrypted in transit (TLS 1.3) and at rest. Access is restricted by row-level security and role-based controls. We log every access to your data.

8. Cookies

See our cookies page for a full list and to change your preferences.

9. Changes

We will notify you of material changes via email and on this page. Continued use of the platform after changes constitutes acceptance.