What we collect and where it comes from. When we believe a company may benefit from our services, we may collect the name, job role and business contact details (business email address and business phone number) of a director or senior manager at that company. This information comes from publicly available sources: the company's own website, professional profiles the person has published on LinkedIn, and public filings at Companies House. We may also look up a business email address in a business contact database such as Apollo.

Why we use it, and our lawful basis. We use these details to send a small number of short, individually written emails introducing our services, and occasionally to follow up by telephone. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): as a business, we have a legitimate interest in telling other businesses about services relevant to them. Before any contact we carry out a balancing test: we contact people only in their professional capacity about their company's business systems; we use only business contact details from public professional sources; we write to a named, relevant decision-maker rather than at volume; every email says where we found the person's details and offers a one-reply opt-out; and we stop at a small, fixed number of messages if there is no reply. We consider this a minimal intrusion that the person would reasonably expect in a professional context, and that our interest is not overridden by theirs.

How long we keep it. If there is no ongoing conversation, personal details are deleted or anonymised 180 days after our last contact. We keep a suppression list — the minimal record needed to make sure we do not contact someone who has asked us not to — indefinitely, because deleting it would defeat its purpose.

Your rights. You can object to this processing, or ask for your details to be erased or corrected, at any time: reply to any email from us, or write to info@inflowconsult.com. We act on objections immediately and without question — one reply is enough. You will not hear from us again.

No automated decision-making. We do not make automated decisions about you and we do not use your details for profiling with legal or similarly significant effects. Emails are individually reviewed by a person before they are sent.

Complaints. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.