Privacy Policy

Last updated: August 27, 2025

flowfactory (“we”, “us”, or “our”) respects your privacy. This Policy explains how we collect, use, and safeguard information when you visit https://flowfactory.co.za or otherwise interact with our services. If you disagree with any part of this Policy, please do not use our site.

Information We Collect

We collect information you provide directly to us, such as:

• Identifiers (name, email address, phone number)
• Account credentials (username, password)
• Billing details (card information, billing address)
• User-generated content (support queries, project data)
• Usage data (pages visited, features used, interaction logs)

How We Use Your Information

Examples include to:

• Provide, maintain, and improve our services
• Process payments and send invoices or receipts
• Respond to enquiries and offer support
• Detect and prevent fraud or misuse
• Comply with legal obligations

Data Security

We use industry-standard encryption in transit and at rest, maintain least-privilege access controls, and regularly review our security posture. No online service is 100 % secure, so we cannot guarantee absolute security.

Data Retention

We keep personal information only as long as necessary to fulfil the purposes above or as required by law.

Sharing Your Information

• Service providers who perform services on our behalf (e.g., cloud hosting, payment processing)
• Business transfers (e.g., merger or acquisition)
• Legal requirements (e.g., subpoenas or court orders)
• Your consent for any other disclosure

Cookies & Similar Technologies

We use cookies to maintain sessions, analyse traffic, and personalise content. You can disable cookies in your browser, but parts of the site may not work correctly.

Analytics

We use privacy-respecting analytics tools (e.g., Plausible) to understand how visitors use our site. IP addresses are truncated or anonymised where possible.

Your Privacy Rights

Depending on your jurisdiction you may have rights to access, correct, delete, or restrict personal data we hold about you, and to object to or withdraw consent for certain processing.

POPIA Notice (South African Residents)

As a South African-based business we process personal information in accordance with the Protection of Personal Information Act, 2013 (“POPIA”). You have the right to: (i) request access to personal information we hold, (ii) request correction or deletion, and (iii) lodge a complaint with the Information Regulator (South Africa) if you believe we are non-compliant.

GDPR (EEA Residents)

If you are in the EEA you have additional rights under the GDPR, including the right to data portability and the right to lodge a complaint with your local supervisory authority.

Children’s Privacy

Our services are not directed to children under 16 and we do not knowingly collect data from them.

International Data Transfers

We may transfer information to countries outside your own. Where we do so, we rely on suitable safeguards such as standard contractual clauses or equivalent measures.

Changes to This Policy

We may update this Policy. Changes become effective when posted at this URL.

Contact Us

Questions? Email erich@flowfactory.co.za or mail: