Privacy Policy

Data controller: Bespoke Workflows

Contact email: bespokeworkflows@gmail.com

If you contact us, book a call, or request services, we process your personal data to respond and provide our services.

We may collect the following information when you use our Contact form or Book a Call page:

• Identity & contact details: name, email address
• Business details (if provided): business name/type, service area, website/Instagram link, current booking process, needs (e.g. booking, payments), and any notes you submit
• Booking details: selected appointment date/time and meeting information (including a Google Meet link)
• Communications: messages you send us and our replies

We do not intentionally collect special category data (e.g. health data). Please do not include sensitive personal information in forms.

We use your data to:

• Respond to enquiries and communicate with you
• Schedule and manage discovery calls you request
• Prepare for a call by reviewing the details you provide
• Improve our internal processes and record-keeping (e.g. tracking enquiries)

Under UK GDPR we rely on the following lawful bases:

• Legitimate interests: to respond to your enquiry, manage leads, and run our business effectively
• Consent: where you actively request contact and submit a form, and where you tick a consent checkbox (if shown)

You can withdraw consent at any time by emailing us, but we may still retain limited information where we have a legitimate interest or legal obligation.

We use trusted service providers to operate this website and our communications. This may include:

• Base44 (website hosting, database and automations)
• Google (Gmail and Google Calendar/Google Meet) to send and receive emails and schedule calls
• Stripe (only if/when you choose to pay for services, deposits, or subscriptions)

These providers act as processors (or independent controllers in some contexts) and may process data on our behalf in order to deliver the service.

Some providers may process data outside the UK (for example in the EU/US). Where this happens, we rely on appropriate safeguards such as adequacy regulations or standard contractual clauses, where applicable.

We keep enquiry and booking data only as long as necessary:

• Unconverted enquiries: typically up to 12 months
• Active client projects: for the duration of the project and a reasonable period afterwards for support, accounting, and record-keeping

We may retain some information longer where required for legal, tax, or dispute resolution purposes.

We take reasonable steps to protect your data from unauthorised access, loss, misuse, or alteration. No online system can be guaranteed 100% secure.

You may have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion (where applicable)
• Object to processing or request restriction
• Request data portability (where applicable)

To exercise your rights, contact us at bespokeworkflows@gmail.com.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO). We'd appreciate the chance to address your concerns first.

At present, we do not intentionally use non-essential cookies for advertising or analytics. If this changes, we will update this policy and (where required) implement cookie consent controls.

We may update this policy from time to time. The "Last updated" date at the top shows when changes were made.