Privacy policy

Draft prepared under UK law, pending review by a solicitor before final publication.

1. Data controller

The controller of your personal data is Calviera Medical Holding LTD (“WeFlow”), a company registered in England and Wales under number 15714954.

• Address: 167–169 Great Portland Street, London
• Privacy contact email: weflowai@gmail.com
• Phone: +44 7856 317690

We process your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect

• Questionnaire answers: what your business does, what you need, team size, how clients find you, average spend per client and type of website.
• Contact details you give us: name, WhatsApp, email, Instagram or current website, and whether you are the decision-maker.
• Details of the campaign that brought you here (UTM parameters) and the page you came from.
• If you message us on WhatsApp or by email, the content of those conversations.
• Technical browsing data (IP address, browser, pages viewed) logged by our hosting provider and, only if you accept analytics cookies, by Google Analytics.

We don’t ask for sensitive data. Please don’t include it in free-text fields.

3. Why we use it and our lawful basis

• To assess whether we can help, reply to your request and book the call: steps taken at your request before entering into a contract.
• To provide our services if we reach an agreement: performance of a contract.
• To send you ideas and examples on WhatsApp when you ask us to: your consent, which you can withdraw at any time.
• To measure how the website and our campaigns perform: your consent (analytics cookies).
• To keep the website secure and prevent spam: our legitimate interests.
• To meet accounting and tax obligations: legal obligation.

We use your answers to sort requests internally. This does not produce legal effects or similarly significant effects on you: you can always message us and speak to a person.

4. Who we share your data with

We don’t sell your data. We only share it with providers who help us deliver our service and who act on our instructions:

• Netlify, Inc. (website hosting and form submissions).
• Cal.com, Inc. (call booking).
• Meta Platforms (WhatsApp), when you message us on WhatsApp.
• Google (Gmail for email and, only with your consent, Google Tag Manager and Google Analytics).

We may also disclose it to authorities where required by law.

5. International transfers

Some of these providers process data outside the UK, mainly in the United States. In those cases we rely on UK adequacy regulations (such as the UK Extension to the EU-US Data Privacy Framework) or on contractual clauses approved by the UK regulator (the IDTA or the Addendum).

6. How long we keep it

• Requests that don’t become clients: up to 24 months from the last contact.
• Clients: for the duration of the relationship and then for the period required by tax and company law (usually 6 years).
• Analytics data: according to our Google Analytics settings (up to 14 months).

7. Your rights

You can exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw your consent, at any time by emailing weflowai@gmail.com. We will reply within one month.

If you’re not satisfied, you can complain to the UK Information Commissioner’s Office (ICO): ico.org.uk, telephone 0303 123 1113.

8. Security

We apply reasonable technical and organisational measures to protect your data, such as encrypted connections (HTTPS) and restricted access to information.

9. Children

Our services are aimed at businesses. We don’t knowingly collect data from anyone under 18.

10. Changes to this policy

We may update this policy. We’ll publish the current version on this page with its last updated date.