PRIVACY POLICY AND COOKIE POLICY
OmniFlowFLUX
Website: https://omniflowflux.com/
Effective Date: 18 October 2026
Last Updated: 18 October 2026
1. INTRODUCTION
OmniFlowFLUX (“we”, “us”, “our” or “the Company”) is committed to protecting your personal data and respecting your privacy.
This Privacy Policy and Cookie Policy explains how we collect, use, store, disclose and protect personal data when you visit our website, submit an enquiry, request a demonstration, register for our services or interact with our software and related business solutions.
This policy is intended to address the requirements of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and, where applicable, the national laws of European Union Member States implementing the ePrivacy Directive, including rules relating to cookies and electronic communications.
Where applicable, this policy also takes account of relevant UK data protection legislation for visitors and customers in the United Kingdom.
We are committed to processing personal data lawfully, fairly and transparently, collecting only the information necessary for specified purposes, and retaining it only for as long as required.
Please read this policy carefully to understand your privacy rights and how we handle your personal data.
2. WHO WE ARE
The organisation responsible for processing your personal data is:
Website: https://omniflowflux.com/
Registered Address: Armagh, Northern Ireland, UK
Privacy Email: info@omniflowflux.com
Telephone: +44 (0) 28 3760 5482
For the purposes of the GDPR, the organisation identified above acts as the data controller for personal data processed in connection with its website and business activities, except where another party determines the purposes and means of processing.
If GDPR Article 3(2) applies to our activities and we are not established in the European Union, we will comply with any applicable requirement to appoint an EU representative under Article 27, unless a relevant exemption applies.
Where a Data Protection Officer is legally required or has been appointed, their contact details will also be provided here.
3. SCOPE OF THIS POLICY
This policy applies to personal data collected through:
- Our website at https://omniflowflux.com/.
- Website contact and enquiry forms.
- Product demonstrations and consultation requests.
- Customer registration and account creation.
- Communications with prospective and existing customers.
- Marketing and business development activities.
- Our software, automation tools and related services, where applicable.
- Other online interactions with OmniFlowFLUX.
This policy does not replace any separate contractual data processing agreement, service agreement or product-specific privacy notice that may apply to particular services.
4. PERSONAL DATA WE COLLECT
The personal data we collect depends on how you interact with us.
4.1 Information You Provide
When you contact us, request information, register for a service or communicate with our team, we may collect:
- Full name.
- Business email address.
- Telephone number.
- Company or organisation name.
- Job title or professional role.
- Information submitted through contact forms.
- Enquiry details and communication history.
- Information provided when requesting a demonstration or consultation.
- Account registration details, where applicable.
Please do not submit sensitive personal data through our website unless it is specifically requested, necessary and supported by an appropriate legal basis.
4.2 Technical and Website Usage Data
When you visit our website, we may collect certain technical information, subject to applicable cookie and privacy requirements.
This may include:
- IP address.
- Browser type and version.
- Device type and operating system.
- Website pages visited.
- Date and time of access.
- Referring website or traffic source.
- Website interaction and navigation information.
- Technical logs, error reports and security information.
- Cookie identifiers and similar online identifiers, where applicable.
Some of this information may constitute personal data under the GDPR, particularly where it can identify or be linked to an identifiable individual.
4.3 Customer and Software Data
Where you use OmniFlowFLUX software or related business solutions, we may process information required to provide the relevant service.
Depending on the product and functionality, this may include:
- Account and user profile information.
- Login and access records.
- Business and operational information.
- Workflow, task and project records.
- Customer, employee or supplier records uploaded by authorised users.
- Inventory, transaction or operational data.
- Technical support records.
- System usage and diagnostic information.
The specific categories of information processed will depend on the services used and the configuration selected by the customer.
Where customers upload personal data relating to other individuals, customers are responsible for ensuring that they have an appropriate legal basis and authority to provide that information.
Where we process personal data solely on a customer’s documented instructions, we may act as a data processor rather than a data controller. In those circumstances, the relevant data processing agreement will govern our processing obligations.
5. PURPOSES AND LEGAL BASES FOR PROCESSING
We process personal data only where an applicable legal basis under Article 6 of the GDPR is available.
The purposes and corresponding legal bases may include the following.
5.1 Responding to Enquiries
We process contact details and enquiry information to respond to requests, arrange consultations, provide demonstrations and discuss potential services.
Legal basis: Taking steps at your request before entering into a contract, or our legitimate interests in responding to business enquiries, depending on the circumstances.
5.2 Providing Products and Services
We process account information, customer details and relevant operational data to provide requested services, administer accounts, deliver contracted functionality and provide customer support.
Legal basis: Performance of a contract or taking steps at your request before entering into a contract.
5.3 Website Operation and Security
We may process technical information to maintain website availability, diagnose errors, prevent abuse, detect security incidents and protect our systems.
Legal basis: Our legitimate interests in operating and securing our website and services, subject to the rights and freedoms of affected individuals, or compliance with a legal obligation where applicable.
5.4 Website Analytics
Where implemented, we may use analytics technologies to understand website performance and visitor behaviour.
Legal basis: Consent where required for the relevant tracking technology under applicable cookie and privacy laws. Any separate processing of personal data must also have an appropriate GDPR legal basis.
5.5 Marketing Communications
We may use contact information to send relevant product news, service updates and business communications where legally permitted.
Legal basis: Consent where required, or legitimate interests where permitted by applicable law and subject to the individual’s right to object.
Electronic direct marketing must also comply with the applicable national laws implementing the ePrivacy Directive.
5.6 Legal and Regulatory Compliance
We may process or retain information where necessary to comply with applicable laws, respond to lawful requests or establish, exercise or defend legal claims.
Legal basis: Compliance with a legal obligation or our legitimate interests in establishing, exercising or defending legal claims, as applicable.
We will not use consent as a substitute for another appropriate legal basis where consent is not necessary or suitable.
Where processing is based on legitimate interests, those interests will be assessed against the rights and freedoms of the affected individuals.
6. COOKIES AND SIMILAR TECHNOLOGIES
6.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website.
Other technologies, including tracking pixels, scripts, tags, browser storage and similar identifiers, may also be used to store or access information on your device.
Depending on their purpose, these technologies may support website functionality, remember preferences, analyse website traffic or measure advertising performance.
6.2 Categories of Cookies
Our website may use the following categories, depending on the technologies actually implemented.
A. Strictly Necessary Cookies
These cookies are essential for functions such as security, session management and core website operation.
Where permitted by applicable law, strictly necessary cookies may be used without consent when they are genuinely required to provide a service explicitly requested by the user or to transmit a communication over an electronic communications network.
B. Functional Cookies
These cookies remember preferences and support additional website features, such as language settings or saved preferences.
Where consent is required, these cookies will only be activated after the user has provided valid consent.
C. Analytics and Performance Cookies
These cookies help us understand website traffic, visitor interactions, page performance and technical issues.
If implemented, analytics services may collect information about visits, navigation, traffic sources and user interactions.
Analytics cookies or similar technologies that require consent will remain inactive until consent is obtained.
D. Advertising and Marketing Cookies
These technologies may be used to measure advertising performance, attribute conversions, understand campaign effectiveness or support personalised advertising.
If we use advertising platforms such as Google Ads or Meta advertising services, their associated tracking technologies will be subject to applicable consent requirements.
E. Third-Party Cookies
Third-party integrations, such as embedded media, scheduling tools or external services, may use cookies or similar technologies.
Their use depends on the service, the way it is integrated and the applicable privacy requirements.
The presence of a category in this policy does not mean that every cookie or service mentioned is currently active on our website.
6.3 Cookie Consent
Where required under applicable EU or Member State law, we will obtain your consent before storing information on, or accessing information from, your device through non-essential cookies and similar technologies.
Our cookie consent mechanism should provide a clear choice between accepting and rejecting non-essential cookies, together with an option to customise preferences where available.
Consent must be freely given, specific, informed and unambiguous. Pre-ticked boxes, continued browsing alone or inactivity will not be treated as valid consent where the law requires an affirmative action.
Rejecting non-essential cookies should be as accessible as accepting them.
Strictly necessary cookies will remain available where permitted by law.
6.4 Withdrawing or Changing Cookie Consent
You may withdraw or change your cookie consent at any time through the cookie settings mechanism available on our website.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
When consent is withdrawn, relevant non-essential technologies should cease operating and future processing based on that consent should stop. Where technically necessary, existing cookies or stored information should be deleted or disabled as appropriate.
You may also manage cookies through your browser settings. However, browser settings may not provide complete control over all tracking technologies.
6.5 Cookie Inventory
The specific cookies used on our website may change as our website, hosting environment and integrations develop.
A current cookie inventory should identify, where applicable:
- Cookie or technology name.
- Provider.
- Purpose.
- Cookie category.
- Duration or expiry period.
- Whether the cookie is first-party or third-party.
- Whether consent is required.
The actual cookie inventory should be verified using a scan of the live website and its consent-management configuration before publication.
7. SHARING PERSONAL DATA
We do not sell personal data to third parties.
We may share personal data with service providers and other recipients where necessary for the purposes described in this policy.
These may include:
- Website hosting and infrastructure providers.
- Cloud storage and software providers.
- Customer relationship management and communication platforms.
- Website analytics providers.
- Advertising and marketing platforms.
- Payment providers, where applicable.
- Technical support and cybersecurity providers.
- Professional advisers, including legal and accounting advisers.
- Competent authorities where disclosure is required by law.
We aim to ensure that third parties receiving personal data are subject to appropriate confidentiality, security and data protection obligations.
Where a third party processes personal data on our behalf, we will put in place the contractual arrangements required by Article 28 of the GDPR where applicable.
Where a third party acts as an independent controller, its own privacy responsibilities and notices may also apply.
8. INTERNATIONAL DATA TRANSFERS
Our business or service providers may operate in countries outside the European Economic Area (EEA).
Where personal data protected by the GDPR is transferred to a country outside the EEA, we will ensure that the transfer complies with Chapter V of the GDPR.
Depending on the circumstances, this may involve:
- A European Commission adequacy decision.
- Standard Contractual Clauses approved by the European Commission.
- Appropriate supplementary measures where required.
- Another lawful transfer mechanism available under the GDPR.
Where required, we will provide information about the applicable transfer safeguards and how a copy may be obtained.
The fact that a service provider is located outside the EEA does not, by itself, establish that a transfer is lawful.
9. DATA RETENTION
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Retention periods depend on the type of information and the purpose of processing.
Examples include:
- Enquiry information: retained for the period necessary to respond to the enquiry and manage the resulting business relationship.
- Customer and account information: retained for the duration of the service relationship and any additional period required for legal, contractual or dispute-resolution purposes.
- Marketing preferences: retained for as long as needed to manage subscriptions and maintain records of consent or objections.
- Security logs: retained for a period appropriate to security monitoring, investigations and legal requirements.
- Cookie consent records: retained for the period necessary to demonstrate and manage valid consent.
Actual retention periods should be determined and documented according to the data involved, applicable legal requirements and business needs.
When personal data is no longer required, we will take reasonable steps to delete, destroy or anonymise it securely.
10. DATA SECURITY
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Depending on the services involved, measures may include:
- Access controls and permissions.
- Authentication and account security.
- Secure communications.
- System monitoring and logging.
- Security updates and vulnerability management.
- Backups and recovery procedures.
- Confidentiality obligations for relevant personnel and service providers.
No method of electronic transmission or storage can be guaranteed to be completely secure.
In the event of a personal data breach, we will assess the incident and take appropriate action in accordance with applicable GDPR requirements, including notifying the relevant supervisory authority and affected individuals where legally required.
11. YOUR RIGHTS UNDER THE GDPR
Subject to the conditions and limitations set out in the GDPR, you may have the following rights regarding your personal data.
11.1 Right of Access
You may request confirmation of whether we process your personal data and, where applicable, obtain access to that data and information about how it is processed.
11.2 Right to Rectification
You may request correction of inaccurate personal data or completion of incomplete personal data.
11.3 Right to Erasure
You may request deletion of your personal data where the conditions in Article 17 of the GDPR are satisfied.
This right is not absolute and may be limited where continued processing is legally required or permitted.
11.4 Right to Restrict Processing
You may request restriction of processing in circumstances specified by Article 18 of the GDPR.
11.5 Right to Data Portability
Where the conditions in Article 20 are satisfied, you may request personal data you have provided to us in a structured, commonly used and machine-readable format and, where technically feasible and legally applicable, request its transfer to another controller.
11.6 Right to Object
You may object to processing based on our legitimate interests on grounds relating to your particular situation, subject to the conditions in Article 21 of the GDPR.
You have an unconditional right to object to processing of your personal data for direct marketing purposes.
11.7 Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
11.8 Rights Relating to Automated Decision-Making
Where applicable, you have rights under Article 22 of the GDPR concerning decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you, subject to the exceptions and safeguards provided by law.
11.9 Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority, particularly in the EU Member State where you live, work or where an alleged infringement occurred.
You may also seek a judicial remedy where provided by applicable law.
12. HOW TO EXERCISE YOUR RIGHTS
To exercise your rights, contact us at:
Privacy Email:info@omniflowflux.com
Please describe your request and provide sufficient information for us to understand and verify it.
We may request additional information where reasonably necessary to verify your identity and protect personal data from unauthorised disclosure.
We will respond without undue delay and, in principle, within one month of receiving your request, in accordance with Article 12 of the GDPR.
Where a request is complex or multiple requests have been received, the response period may be extended by up to two further months where legally permitted. If an extension is necessary, we will inform you within the initial one-month period and explain the reasons.
Requests are generally handled free of charge. Fees or refusal may apply only in circumstances permitted by the GDPR, such as manifestly unfounded or excessive requests.
13. MARKETING COMMUNICATIONS
We may send information about our products, software, services and business updates where permitted by applicable law.
Where consent is required for electronic direct marketing, we will obtain it before sending the relevant communications.
Where we rely on another lawful basis permitted by applicable law, we will respect applicable electronic marketing rules and your right to object.
You may unsubscribe from marketing emails by using the unsubscribe link provided or contacting us directly.
Once you opt out, we will stop sending the relevant marketing communications, except where another lawful basis applies to a different type of communication.
Essential service notifications, contractual communications and security alerts may still be sent where necessary.
14. CHILDREN’S PRIVACY
Our website and services are primarily intended for business users and professional organisations.
We do not knowingly collect children’s personal data in circumstances where doing so would be unlawful.
Where a service is directed to children or where consent is relied upon for an online service offered directly to a child, we will comply with the applicable requirements of Article 8 of the GDPR and relevant national law.
If you believe that a child has provided personal data unlawfully, please contact us so that we can assess the matter and take appropriate action.
15. THIRD-PARTY WEBSITES AND SERVICES
Our website may contain links to third-party websites, platforms or services.
Those third parties may collect personal data under their own privacy policies and terms.
We do not control the privacy practices of external websites and encourage you to review their privacy notices before providing personal information.
Where third-party services are integrated into our website, their technologies will be handled in accordance with applicable data protection and cookie requirements.
16. AUTOMATED PROCESSING AND ARTIFICIAL INTELLIGENCE
Where OmniFlowFLUX uses automation, artificial intelligence or software integrations to support its services, relevant information may be processed to perform requested functions, generate outputs, assist workflows or improve service delivery.
The specific information processed will depend on the product and features used.
We will identify the applicable legal basis for such processing and provide additional information where required by law.
We will not subject individuals to decisions based solely on automated processing that produce legal or similarly significant effects unless the requirements and safeguards of the GDPR are satisfied.
Where third-party AI or automation providers process personal data, their involvement will be subject to the relevant contractual and data protection arrangements.
17. CHANGES TO THIS POLICY
We may update this Privacy Policy and Cookie Policy from time to time to reflect changes in our services, technology, processing activities or legal obligations.
The latest version will be published on this page with an updated “Last Updated” date.
Where required by law, we will provide additional notice of material changes or obtain renewed consent where necessary.
We encourage you to review this policy periodically.
18. CONTACT INFORMATION
For questions, complaints or requests concerning this Privacy Policy, personal data or cookies, please contact:
OmniFlowFLUX
Website: https://omniflowflux.com/
Registered Address: Armagh, Northern Ireland, UK
Privacy Email: info@omniflowflux.com
Telephone: +44 (0) 28 3760 5482
We will handle privacy enquiries in accordance with the applicable data protection legislation.
End of Privacy Policy and Cookie Policy.