Legal

Privacy Policy

Last updated: June 2026

Who we are

FixFlow is a job management platform built for UK tradespeople. It is operated by Anna Dowling, trading as FixFlow ("FixFlow", "we", "us", "our").

If you have any questions about this policy or how we handle your data, contact us at: hello@thefixflowapp.com

What this policy covers

This policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

It covers:

  • Tradespeople who sign up and use FixFlow ("traders")
  • End customers whose details are entered into FixFlow by traders
  • Visitors to thefixflowapp.com

What data we collect

If you sign up as a trader

  • Name and email address
  • Business name and contact details
  • Job, enquiry, estimate, invoice and customer records you create
  • Stripe Connect account ID (used to process payouts — we never see your bank account or card details)
  • Usage data (how you interact with the platform)
  • Device and browser information

If you are a customer of a trader using FixFlow

  • Name, address, postcode and contact details entered by your trader
  • Job details, notes and messages related to your job
  • Review content if you submit a review

If you visit our website

  • IP address and browser information via standard server logs
  • Cookie data (see Cookie section below)

Why we collect it and our legal basis

Purpose
Legal basis
Creating and managing your account
Contract
Processing payments and payouts via Stripe
Contract
Sending invoices, receipts and job communications
Contract
Improving and maintaining the platform
Legitimate interests
Sending product updates and news
Legitimate interests / Consent
Complying with legal obligations
Legal obligation
We do not sell your data. We do not use your data for advertising.

How we store your data

Your data is stored securely using Supabase, hosted in the European Union. All data is encrypted in transit (TLS) and at rest.

Payment processing is handled entirely by Stripe. FixFlow never stores card numbers, bank account details or other sensitive payment credentials.

How long we keep your data

Data type
Retention period
Account data
Until you delete your account, plus 30 days
Invoice and financial records
7 years (UK legal requirement)
Usage logs
12 months
Deleted account data
Permanently deleted within 30 days of request

Who we share your data with

We only share data with third-party services that are essential to running FixFlow:

  • Supabase — database and authentication (EU-hosted)
  • Stripe — payment processing and payouts
  • Vercel — website and application hosting
  • Resend — transactional email delivery

All third-party providers are contractually required to handle data securely and in compliance with applicable law. We do not share your data with any other third parties, advertisers or data brokers.

Cookies

We use a small number of cookies to keep FixFlow working:

Cookie
Purpose
Type
Session cookie
Keeps you logged in
Essential
Auth token
Secure authentication
Essential

We do not use advertising cookies or third-party tracking cookies.

Your rights under UK GDPR

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data ("right to be forgotten")
  • Restriction — ask us to limit how we use your data
  • Portability — receive your data in a portable format
  • Objection — object to us processing your data on the basis of legitimate interests

To exercise any of these rights, email us at hello@thefixflowapp.com. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Data entered by traders about their customers

Traders using FixFlow act as the data controller for any personal data they enter about their own customers. FixFlow acts as a data processor in this context.

Traders are responsible for ensuring they have a lawful basis to store their customers' information in FixFlow, and for responding to any data requests from their customers.

Children

FixFlow is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. We will notify active users of any material changes by email. The date at the top of this page shows when it was last updated.

Contact

For any privacy-related questions or requests:

Email: hello@thefixflowapp.com
Trading as: FixFlow