Privacy

What we collect, and what we do with it.

Not much. We collect what you send us so we can reply, what you buy so we can deliver it, and a count of how the site is used. We sell none of it, and the only cookies are Google’s — set only if you say yes.

Last updated 16 September 2026

Who we are

This site is run by Flowspire Ltd, trading as Flowspire Productions, a company registered in England and Wales with number 15568183. Our registered office is Childwickbury House, Childwickbury, St Albans, AL3 6JX.

We decide what happens to the personal information described here, which makes us its controller under UK data protection law. For anything on this page — a question, a request, or a complaint — email hello@flowspire.pro.

What we collect, and why

When you visit the site

What: The pages you view and the site that sent you.
Your browser, operating system, device type and country, worked out from your request.
A count of things you do here — sending a brief, tapping our phone number, opening the quote builder, clicking our email address, downloading the guide, signing up for the guide, opening a kit checkout, and which kit and completing a kit purchase, and which kit.
Your IP address, in the hosting logs.
If you arrived from one of our Google ads, the fact that you did, and whether you went on to send a brief or get in touch.
Only if you accept cookies: a cookie linking your visit to the ad you clicked, and — when you send a brief — your email address and phone number in a scrambled (hashed) form, which Google uses to match the enquiry to the ad without seeing the address itself.
Why: To see which pages are read, which lead to enquiries, and to keep the site running and secure. Vercel's analytics are cookieless and identify nobody. Google Ads measurement tells us which of our ads actually bring enquiries, so we stop paying for the ones that do not.
On what basis: Legitimate interests for the cookieless analytics and hosting logs. Your consent for Google's advertising cookies and for the scrambled email and phone number: until you accept in the banner, and if you decline, Google gets neither — it is told only that a visit or an enquiry happened, with no identifier attached.
Who handles it: Vercel, Google
How long: Vercel's analytics are aggregate. Request logs, including IP addresses, are kept by Vercel for a short period under its own retention. What Google Ads receives is kept under Google's own retention settings for advertising data.

When you send us a brief

What: What you type into the form: your name, your company, your email address, your phone number, if you give it, what the project is, where it would be filmed, when, what you need delivered, an indicative budget and who referred you, if anyone.
Any files you attach — up to 5, 4.0 MB in total.
Where you came from, if the address you arrived on said: the campaign tags in the link, a Google Ads click reference, the site that sent you, and the page you were on before.
Your IP address, held in memory for a few minutes to stop the form being flooded, and not stored.
Why: To read your brief, reply to it, and quote. The “where you came from” part tells us which of our marketing actually brings enquiries — it is read from the address in your browser, not from a cookie.
On what basis: Taking steps at your request before a contract, for the brief itself. Legitimate interests for where you came from — knowing what brings work in is how a small company decides where to spend.
Who handles it: Resend, Google
How long: If it does not become a project, for two years from our last contact with you. If it does, for six years after the project ends, because that is how long contract and tax records have to be kept.

When you use the quote builder

What: What you enter into the enquiry form at portal.flowspire.pro — much the same details as the brief form here.
Why: To give you a quote and reply to your enquiry. The brief page offers it as an alternative to the form, and it runs on Slatebook, our production software.
On what basis: Taking steps at your request before a contract.
Who handles it: Slatebook, Google
How long: As for a brief: two years if it does not become a project, six years after the project ends if it does.

When you sign up for the guide

What: Your email address.
Why: To send you the next edition of the guide when it is published, and nothing else.
On what basis: Your consent. You can take it back at any time — every email has an unsubscribe link, or just tell us.
Who handles it: Resend, Google
How long: Until you unsubscribe.

When you buy a kit

What: Your name, email address and billing address.
Your payment, which Stripe handles — we never see or store card details.
Which kit you bought, when, and what you paid.
Why: To take payment, send you the download, and keep the records a sale requires. Kits are sold only to customers with a billing address in the United Kingdom: an order from anywhere else is refunded automatically, and you are emailed to say so. The download link we send you contains an order reference and stops working 30 days after you buy.
On what basis: Performing our contract with you, for the sale and the download. Legal obligation, for keeping sales records — VAT law requires it.
Who handles it: Stripe, Resend, Google
How long: Six years from the sale, which is how long VAT records have to be kept.

When you email or call us

What: Whatever you send or tell us, and your email address or phone number.
Why: To reply.
On what basis: Legitimate interests — answering the people who contact us — or steps towards a contract, if it is about work.
Who handles it: Google
How long: Two years from our last contact, or six years after a project ends if it becomes one.

Films

Film and case study pages embed players from Vimeo and YouTube, both set to their privacy-enhanced modes — Vimeo with “do not track” on, YouTube from its no-cookie domain. When a page with a film on it loads, your browser connects to Vimeo or Google, which receive your IP address and device information as any website you load would. YouTube may store information on your device once you press play. What happens then is covered by their notices, not this one.

Cookies and your device

This site uses Google’s advertising tag to measure which of our ads lead to enquiries. It sets cookies only if you accept them in the banner. Until you do — and if you decline — no cookie is set and Google receives no identifier from us, only that a visit happened. You can change your mind by clearing this site’s data in your browser, which brings the question back. Nothing else on the site sets a cookie.

The site does keep two small notes in your browser’s own storage, which never leave your device:

fs-consent-v1 — Your answer to the cookie question, so we do not ask again. Only written if the question is shown.
fs-tracked: — A note that a kit purchase has already been counted, so reopening your thanks page does not count it twice.

Who handles it for us

These companies process personal information on our behalf, only to do the job described, under contracts that say so. We do not sell personal information to anyone, or share it for anyone else’s marketing.

Vercel — Hosts this website, keeps its request logs, and runs its cookieless analytics. Their notice
Resend — Sends the emails this site sends — your brief to us, your kit to you — and holds the guide mailing list. Their notice
Google — Hosts our email (Google Workspace), so anything that reaches our inbox is stored there. Also provides the YouTube player on some film pages, and measurement for our Google Ads. Their notice
Stripe — Takes payment for kits. Card details go to Stripe and never reach us. Their notice
Vimeo — Provides the video player on most film and case study pages. Their notice
Slatebook — Runs our quote builder at portal.flowspire.pro, which the brief page offers to anyone who wants a number before they write a brief. Their notice

Vercel, Resend, Google, Stripe and Vimeo are international companies, and some of what they handle for us is processed outside the UK, including in the United States. Where it is, they rely on safeguards recognised under UK data protection law — the UK’s data bridge with the United States for companies certified to it, or the international data transfer addendum to standard contractual clauses for those that are not. Each provider’s data processing terms set out which.

Your rights

Email hello@flowspire.pro and say which you want. It costs nothing, and we will answer within one month.

See it. Ask for a copy of what we hold about you.
Correct it. Ask us to fix anything that is wrong.
Delete it. Ask us to delete it, where we are not required to keep it.
Restrict it. Ask us to stop using it while something is sorted out.
Object. Object to anything we do on the basis of legitimate interests.
Take it with you. Ask for what you gave us in a format you can use elsewhere.
Withdraw consent. Take back consent you gave — for the guide list, by unsubscribing.

If you are unhappy with how we have handled your information, please tell us first — but you can always complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or 0303 123 1113.

A few more things

What you have to give us. Nothing, to read the site. To reply to a brief we need a way to reach you, and the form marks the fields it needs. To sell you a kit we need payment and a billing address.

Automated decisions. We make no decisions about you by automated means, with one exception you should know about: a kit order with a billing address outside the United Kingdom is refunded automatically, because that is the only place we sell them. If you think that has happened in error, email us.

Children. This site and what it sells are for businesses and adults. We do not knowingly collect information from anyone under 16.

Changes. If what we collect changes, this page changes first, and the date at the top moves.

Flowspire Ltd · Registered in England and Wales · Company number 15568183 · Childwickbury House, Childwickbury, St Albans, AL3 6JX · flowspire.pro