Privacy Policy

This policy explains what personal data we collect when you use flexys.com or get in touch with us, how we use it, and the rights you have over it.

Who we are

Flexys Solutions Ltd is the data controller for the personal data described in this policy.

Registered office: Future Space, Filton Road, Stoke Gifford, Bristol, BS34 8RB Company number: 10536443

If you have any questions about this policy or how we handle your data, email us at data@flexys.com.

This policy is effective from 10 July 2026. It replaces our previous policy dated 27 February 2019.

What data we collect

When you browse our website, we collect your IP address, the pages you visit, when you visit them, and information about your device and browser. Some of this is collected through cookies and similar technologies, which are explained below.

When you fill in a form, for example to sign up for news, download a resource, register for an event, or book a demo, we ask for your name, job title, company, and contact details including your email address.

When you register for one of our webinars or events, you may do so on a third-party platform (Contrast for webinars, Luma for events). The registration details you provide there, typically your name, email address, job title, and company, along with whether you attended, are passed to us and stored in HubSpot, our customer relationship management system. We use them as described in this policy. These platforms also process your data under their own privacy policies, which are linked on their registration pages.

When you contact us directly, we keep a record of the correspondence.

We do not collect personal data about the customers of our clients through this website, and our website is not intended for use by consumers in arrears.

How we use your data and why we're allowed to

UK data protection law requires us to have a lawful basis for everything we do with your personal data. Here is what we do and the basis we rely on:

What we do Lawful basis
Send you information about our software, industry news, events, and other content you've asked for Consent. You can withdraw it at any time using the unsubscribe link in any email, or by emailing marketing@flexys.com
Use IP addresses and visit data to identify businesses that may be interested in our software Legitimate interests. As a business-to-business company, we have a legitimate interest in identifying organisations that may benefit from our software. You can object to this at any time (see Your rights below)
Analyse how our website is used so we can improve it Consent, for analytics cookies. Anonymous, aggregated statistics where no consent is given
Respond to your enquiries and manage demo bookings Legitimate interests, or steps taken at your request before entering into a contract
Keep our website and systems secure Legitimate interests

We will never sell your personal data.

Cookies and tracking

We use cookies and similar technologies on flexys.com. These fall into two groups:

Essential cookies keep the website working. These don't need your consent.

Analytics and marketing cookies help us understand how the site is used and support our marketing. These include:

  • ‍Google Analytics, to analyse how visitors use our website
  • ‍Google Tag Manager, to manage the tags that run on our site
  • Google Ads, to measure our advertising and show relevant ads
  • HubSpot, to connect website activity with our marketing and customer relationship management
  • LinkedIn Insight Tag, to measure the performance of our LinkedIn advertising and identify businesses visiting our site

We only set analytics and marketing cookies with your consent. You can choose which types to allow using the cookie banner when you first visit, and change your choice at any time using the Cookie settings link in the footer of every page.

Who we share your data with

We use the following third-party services to run our website and marketing:

  • Google (Google Analytics and Google Tag Manager), Google LLC, USA  
  • HubSpot, HubSpot Inc., USA  
  • LinkedIn, LinkedIn Corporation, USA
  • Contrast (webinar hosting and registration), AirfairCTWW SAS, France
  • Luma (event registration and management), Luma Labs Inc., USA

These providers process data on our behalf under contracts that meet UK GDPR requirements. We may also share personal data where the law requires it, for example with regulators or law enforcement

International transfers

Some of the providers above process data in the United States, including Google, HubSpot, LinkedIn, and Luma. Where personal data leaves the UK, we make sure it's protected by appropriate safeguards. These include the UK Extension to the EU-US Data Privacy Framework, where the provider is certified, or the UK International Data Transfer Agreement or Addendum. Contrast is based in France and stores data within the EU, which the UK recognises as providing adequate protection.

How long we keep your data

We keep personal data only as long as we need it:

  • Marketing data (name, job title, contact details): until you unsubscribe or ask us to delete it, or after 36 months of inactivity.  
  • Website analytics data: 14 months, after which Google Analytics deletes visitor-level data automatically. Aggregated statistics, which don't identify anyone, may be kept longer.
  • Other correspondence and records: as long as we need them for the purpose we collected them, and no longer.

We will not sell, distribute or lease your personal information to third parties.

Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you  
  • Correct data that's wrong or incomplete  
  • Delete your data in certain circumstances  
  • Restrict how we use your data in certain circumstances  
  • Object to processing based on our legitimate interests, including the business identification described above  
  • Port your data, meaning receive it in a usable format or have it sent to another organisation, where processing is based on consent  
  • Withdraw consent at any time, without affecting anything done before you withdrew it

To exercise any of these rights, email data@flexys.com. We don't charge a fee and we'll respond within one month.

Complaints

If you're unhappy with how we've handled your data, please contact us first at data@flexys.com and we'll do our best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Security

We protect the data we collect with appropriate physical, electronic, and organisational measures designed to prevent unauthorised access or disclosure. Flexys Solutions Ltd is certified to ISO/IEC 27001:2022 (certificate IS 719933) for the provision of its SaaS debt management software.

Changes to this policy

We may update this policy from time to time. We'll post any changes on this page and update the effective date at the top. If a change significantly affects how we use your data, we'll take reasonable steps to bring it to your attention.