Privacy Policy

Last updated: 4 June 2026

This Privacy Policy explains how Paisley on the web, a company incorporated in the United Kingdom with registered number 891394 and registered office at Unit 167603, PO Box 7169, Poole, BH15 9EL (we, us, or our), collects, uses, stores, shares, and otherwise processes personal data in connection with https://clydeflow.com and any related webpages, services, communications, and interactions (collectively, the Site).

We are the controller of personal data processed under this Privacy Policy, unless we state otherwise.

1. Important Information

This Privacy Policy applies to personal data we collect from:

• visitors to the Site;
• prospective customers, customers, and their personnel;
• individuals who contact us, request information, or subscribe to updates;
• individuals who interact with us on social media or through marketing communications; and
• any other individuals whose personal data we process in the course of operating the Site and our business.

This Site is not intended for children, and we do not knowingly collect personal data from children.

2. The Personal Data We Collect

We may collect, use, store, and transfer different categories of personal data, including:

2.1 Identity Data

Name, title, username or similar identifier, job title, employer, and other identifying information.

2.2 Contact Data

Billing address, correspondence address, email address, telephone number, and other contact details.

2.3 Technical Data

Internet protocol (IP) address, browser type and version, device identifiers, time zone setting, browser plug-in types and versions, operating system, platform, and other technology on the devices you use to access the Site.

2.4 Usage Data

Information about how you use the Site, products, and services, including page views, navigation paths, referral sources, access times, and interactions with content.

2.5 Marketing and Communications Data

Your preferences in receiving marketing from us and our third parties, your communication preferences, and records of correspondence.

2.6 Transaction and Service Data

Details about services you enquire about or purchase, contract information, payment-related information, invoicing details, and records relating to service delivery and customer support.

2.7 User Submitted Data

Any personal data included in forms, messages, uploads, support requests, survey responses, feedback, or other content you submit through the Site.

We may also collect, use, and share aggregated or anonymised data that does not identify you. If we combine aggregated data with personal data so that you can be identified, we will treat it as personal data.

3. How We Collect Personal Data

We collect personal data:

• directly from you when you fill in forms, contact us, sign up for updates, request a demo, create an account, purchase services, or otherwise interact with us;
• automatically through cookies, server logs, pixels, analytics tools, and similar technologies when you use the Site;
• from third parties, such as analytics providers, advertising networks, payment processors, CRM providers, identity verification providers, social media platforms, publicly available sources, and business partners; and
• from your employer or colleagues where they provide your details in connection with a business relationship.

4. How We Use Personal Data and Our Lawful Bases

We will process your personal data only where we have a lawful basis to do so under applicable data protection law. Depending on the circumstances, we rely on one or more of the following lawful bases:

• performance of a contract or taking steps at your request before entering into a contract;
• compliance with a legal obligation;
• our legitimate interests, provided those interests are not overridden by your interests or fundamental rights and freedoms; and
• your consent, where consent is required by law.

We may use your personal data for the following purposes:

If we rely on consent, you may withdraw it at any time, but this will not affect the lawfulness of processing carried out before withdrawal.

5. Marketing

We may send you marketing communications about our products, services, updates, or events where you have requested them, consented where required, or where we are otherwise permitted by law to do so.

You can opt out of marketing communications at any time by using the unsubscribe link in an email or by contacting us at privacy@clydeflow.com.

Opting out of marketing will not affect service-related communications necessary for an existing relationship or transaction.

6. Cookies and Similar Technologies

We may use cookies, pixels, tags, scripts, local storage, and similar technologies to operate the Site, remember preferences, analyse traffic, improve performance, and support marketing activities.

Where required by law, we will request your consent before placing non-essential cookies or similar technologies on your device. You can manage your preferences through our cookie banner or browser settings.

We do not currently publish a separate cookie notice; this Privacy Policy describes how we use cookies and similar technologies.

7. Disclosures of Personal Data

We may share personal data with the following categories of recipients where reasonably necessary:

• our affiliates and group companies;
• hosting providers, cloud service providers, website developers, analytics providers, CRM providers, communication platforms, payment processors, customer support providers, and other IT or operational service providers;
• professional advisers, including lawyers, accountants, insurers, auditors, and consultants;
• regulators, law enforcement agencies, courts, tribunals, government authorities, and other third parties where disclosure is required by law or necessary to protect our rights;
• prospective buyers, sellers, investors, or acquirers in connection with a merger, acquisition, financing, reorganisation, or sale of assets; and
• any other person with your consent or at your direction.

We require processors acting on our behalf to process personal data only on our instructions, to keep it secure, and to use it only for authorised purposes.

8. International Transfers

We may transfer personal data to countries outside the United Kingdom or the European Economic Area where our service providers or business partners operate.

Where we transfer personal data internationally, we will take appropriate safeguards as required by applicable law, which may include:

• adequacy regulations or adequacy decisions;
• the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the European Commission’s Standard Contractual Clauses; or
• other valid transfer mechanisms recognised by law.

You may contact us for more information about the safeguards we use.

9. Data Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

10. Data Retention

We will retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, reporting, and enforcement requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, whether we can achieve those purposes through other means, and applicable legal requirements.

As a general guide:

• enquiry data is retained for as long as needed to handle your enquiry and for a reasonable period afterwards;
• customer and contract records are retained for the duration of the relationship and for a reasonable period afterwards to meet legal, tax, and accounting requirements;
• marketing suppression records may be retained for as long as necessary to maintain opt-out preferences; and
• technical logs and analytics data are retained in line with operational and security needs.

11. Your Legal Rights

Depending on your location and the applicable law, you may have rights to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request erasure of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests or direct marketing;
• request transfer of your personal data to you or a third party;
• withdraw consent where processing is based on consent; and
• complain to a supervisory authority.

In the UK, the supervisory authority is the Information Commissioner’s Office (ICO), which can be contacted through www.ico.org.uk.

We may need to request specific information from you to confirm your identity before responding to a request. We may also refuse or limit a request where permitted by law.

12. Third-Party Websites

The Site may include links to third-party websites, plug-ins, or applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control third-party websites and are not responsible for their privacy statements or practices.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and, where appropriate, notified to you by other means. Please check back periodically to stay informed.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise your rights, please contact:

15. Representative and Data Protection Officer

If required under applicable law, our UK representative, EU representative, or Data Protection Officer can be contacted at:

We have not appointed a Data Protection Officer or an external representative. For any data protection queries, please use the contact details in section 14 above.