Privacy.
What we collect, who else sees it, and how to get it back or have it deleted. Every recipient is named.
Who we are
Flux Consultancy Ltd, a company registered in England and Wales, runs this site. We are the data controller for everything described here, wherever in the world you are reading it.
For anything in this notice, including a request to see or delete your data, email hello@flux-consultancy.com.
What we collect
What you type into the contact form. Your name, email address, the service you are after, your budget range, your timeline, and whatever you write in the message.
How the site was used. Pages viewed, which buttons were pressed, and an approximate location worked out from your IP address. This is collected only if you allow additional cookies.
We do not ask for anything sensitive. The service, budget and timeline you picked are the only form answers that reach analytics. Your name, email address and message never do.
Why, and on what basis
We use what you send to reply to you about working together. The lawful basis is legitimate interests: you asked us to get in touch, and replying is what you expected when you pressed the button.
We use analytics to understand which pages do their job. The lawful basis there is your consent, which is why none of it runs until you answer the cookie banner, and why you can change that answer at any time on the cookies page.
Who else sees it
Your enquiry goes into our CRM, GoHighLevel, where our team works it. Nobody outside Flux reads it.
If you allowed additional cookies, measurement data is shared with Google (Analytics and Tag Manager), Meta and Snap. They receive events such as “someone viewed this page” or “someone submitted the form”, not what you typed into it. Each sets its own cookies, named individually on the cookies page.
The site is hosted by Vercel and its content is stored in Convex, both of which keep short-lived operational logs as part of running it.
We do not sell your data to anyone.
Where it goes, and for how long
Several of the companies above are based in the United States, so your data is transferred there. Those transfers rely on the UK extension to the EU–US Data Privacy Framework or on standard contractual clauses, depending on the provider.
We keep enquiries for three years from our last contact with you, so we can pick up a conversation that went quiet. After that they are deleted. Analytics data expires on the schedule set by each provider, which for Google Analytics is fourteen months.
Your rights
Under UK data protection law you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, ask for it in a portable format, and object to us processing it on the basis of legitimate interests.
Most of our clients are in the United States. Several states, California among them, give residents comparable rights to know, delete and opt out. Ask for any of them the same way and we will treat the request the same way.
Email hello@flux-consultancy.com and we will answer within one month. There is no charge.
If you are not happy with how we handled it, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you came to us first, but it is your right either way.
Changes
When this notice changes we update the date below. If the change affects what we do with data we already hold, we will tell you directly rather than relying on you to re-read this page.
Last updated 12 October 2026