Privacy notice

Who we are

Driven for Cash Flow is a Fractional Finance Director practice founded by Nikki Butlin. We are the data controller for the personal information described in this notice, which means we decide how and why it is used.

For anything in this notice, including any of the requests described below, email nikki@drivenforcashflow.co.uk.

What we collect, and why

We only collect what you type into one of the three forms on this site, plus a small amount of technical information that any website receives.

The contact form

What we collect

Your name, business name, email address, phone number if you give one, and whatever you write in the message.

Why

To read your enquiry and reply to it.

Lawful basis

Legitimate interests. You have asked us to get in touch, and answering you is the obvious expectation on both sides.

The brochure download

What we collect

Your name, business name if you give one, and email address.

Why

To send you the brochure, and to email you occasionally about cash flow and the practice.

Lawful basis

Consent. You tick a box that says so, and we record the exact wording you agreed to.

The app waitlist

What we collect

Your name, email address, business name if you give one, and which accounting software you use if you tell us.

Why

To let you know when early access to the Driven for Cash Flow app opens, and to understand what the software needs to work with.

Lawful basis

Consent, recorded the same way.

Technical information

When you submit a form we briefly hold your IP address to limit how often the same source can submit, which is how we keep automated spam off the site. It is held in memory only and is not written to a database or attached to your enquiry. Our hosting provider also keeps short-term server logs, as every web host does.

Analytics are covered in the cookie notice, and nothing is loaded until you agree to it.

Recording your consent

Where we rely on consent, we store what you agreed to and not only that you agreed: the exact wording shown next to the tick box, the date, and which page you were on. That is deliberate. Under UK GDPR and PECR, being able to evidence what someone agreed to matters as much as the fact that they did.

Consent is never pre-ticked, never bundled with anything else, and the permission to reply to an enquiry is asked separately from permission to send marketing email.

Who else sees it

We do not sell your information, and we do not share it for anyone else’s marketing. It reaches these providers because they run part of the service, and each acts only on our instructions.

Zoho CRM

Where enquiries and list signups are stored. Our account uses Zoho's European data centre, so records are held in the EU.

Resend

Sends the brochure email and forwards an enquiry to us if the CRM is unavailable, so nothing is lost.

Cloudflare Turnstile

Checks that a submission comes from a person rather than a script. It sees your IP address and basic browser signals.

Vercel

Hosts the site and keeps short-term server logs.

Google Analytics

Only if you accept analytics cookies. See the cookie notice.

Some of these providers are based outside the UK. Where information is transferred abroad it is protected by the safeguards UK data protection law requires, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

We may also disclose information if the law requires it, or to establish or defend a legal claim.

How long we keep it

Enquiries

Kept 24 months from our last contact with you, unless you become a client.

Client records

Kept 7 years after the engagement ends, because tax and accounting rules require it.

Marketing lists

Kept until you unsubscribe, or after 24 months of no engagement.

Consent records

Kept for as long as we hold the record it relates to, plus 12 months, so we can show what you agreed to.

Your rights

You can ask us to:

• give you a copy of the information we hold about you
• correct anything that is wrong
• delete it
• stop or limit how we use it
• send it to you, or to someone else, in a portable format

You can also object to us using your information on the basis of legitimate interests, and you can withdraw consent at any time. That is as easy as giving it: use the unsubscribe link in any marketing email, or email nikki@drivenforcashflow.co.uk. Withdrawing consent does not affect anything we did before you withdrew it.

There is no charge for any of this, and we will respond within one month.

Complaints

If you think we have handled your information badly, please tell us first at nikki@drivenforcashflow.co.uk so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes to this notice

If we change how we handle personal information, we will update this page and the date at the top of it.