Liteflow

1. Who We Are

LiteFlow is a school-photography platform operated by S & I Photography Ltd (trading as LiteFlow), a company registered in England and Wales (the "Provider", "we", "us" or "our"). We are committed to protecting your privacy and handling personal data in an open, transparent and lawful manner.

This Privacy Policy explains how S & I Photography Ltd acts as a data controller for the personal data we collect about our direct customers (studios and photographers using LiteFlow) and visitors to liteflow.co.uk.

For data about end-customers (parents, schools, and other individuals whose data flows through the platform), LiteFlow acts as a data processor on behalf of the studio that uploaded the data — that studio is the data controller for that data and operates its own privacy notice on its shop subdomain. The Terms & Conditions describe this controller/processor split in full.

For any privacy-related questions, please contact us at hello@liteflow.co.uk.

2. Information We Collect

As a data controller, we collect information you provide directly to us, including:

Name and email address when you join our waitlist
Business name, contact details and tenant subdomain when you sign up
Payment information when you make purchases or pay platform fees
Communications you send to us (support email, contact form)
Usage data when you use the Service (logs, analytics events)

3. How We Use Your Information

We use the information we collect as a controller to:

Provide, maintain and improve the Service
Process payments and send related transactional messages
Send you technical notices, updates and support messages
Respond to your comments, questions and requests
Communicate with you about products, services and events, where lawful

4. Legal Basis for Processing

We process your personal data under the following UK-GDPR lawful bases:

Contract: processing necessary to perform the contract we have with you
Legitimate interests: processing necessary for our legitimate business interests (e.g. service security, product improvement), provided your rights and interests do not override those interests
Consent: where you have given consent (e.g. marketing emails); you may withdraw consent at any time
Legal obligation: processing necessary for compliance with a legal obligation (e.g. tax records)

5. Data Storage and Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These include encryption in transit, encryption at rest, role-based access controls, audit logging and regular security review.

Your data is hosted on infrastructure provided by our sub-processors (currently within the European Economic Area or the United Kingdom). Where we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place (such as the UK International Data Transfer Addendum or standard contractual clauses).

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When we no longer need your data we will securely delete or anonymise it. Standard retention periods are available on request and are summarised in our Terms (90 days post-termination for tenant content, longer where required by law for billing and tax records).

7. Your Rights

Under the UK GDPR you have the following rights, exercisable against the data controller:

Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing (including direct marketing)
Rights related to automated decision-making and profiling

Where LiteFlow is the controller of your data, you can exercise these rights directly with us at hello@liteflow.co.uk.

Where LiteFlow is acting as a processor for a tenant studio (for example, where you are a parent who bought photographs through a studio's shop), you should direct your rights requests to that studio in the first instance. We will assist the studio in responding to your request as required by the UK GDPR.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use cookies and similar technologies to track activity on our website and to hold limited information needed to operate the Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. Without certain essential cookies, parts of the Service may not function correctly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy, please contact S & I Photography Ltd (trading as LiteFlow) at hello@liteflow.co.uk.

This is a starter Privacy Policy document. Before LiteFlow opens to public signup, this content will be reviewed by a legal professional to ensure full UK-GDPR compliance.