Privacy and Data Protection – General Terms

We collect personal data solely for legitimate business purposes, including:

Service delivery and client engagement

Payment processing and account management

Supplier onboarding and operational coordination

Marketing communications (with consent)

Legal compliance and risk mitigation

Data is collected via our website, enquiry forms, phone calls, verbal engagement, email correspondence and where applicable secure third-party platforms.

2. Lawful Basis for Processing

All data is processed under one or more lawful basis as defined by UK GDPR:

Consent (where explicitly given)

Contractual necessity

Legal obligation

Legitimate interest (e.g. service improvement, fraud prevention)

We do not rely on automated decision-making without appropriate safeguards.

3. Data Sharing & Third Parties

We may share data with trusted third-party service providers strictly for operational purposes (e.g. payment gateways, logistics, IT infrastructure). 

All third parties are contractually bound to uphold data protection standards equivalent to our own and within UK statutory regulations on application.

We do not sell or disclose personal data to unauthorised entities.

4. International Transfers

Where data is transferred outside the UK, we ensure to have undertaken all due-diligence within our capacity to safeguard data protection per the safety protocols promised to us as a business operator, and whilst data is in our control, including standard contractual clauses or adequacy decisions as required by UK GDPR.

We use market validated platforms and operators to process data for the exclusive purpose of conducting our day-to-day business operations. 

5. Data Security

We implement robust technical and organisational processing measures to protect data against unauthorised access, loss, or misuse when in control of the data. This includes encrypted communications, secure servers, access controls, and regular audits.

6. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyse traffic. Users may manage cookie preferences via browser settings. 

7. Data Retention

Personal data is retained only for as long as necessary to fulfil its purpose, comply with legal obligations, or resolve disputes. Retention periods vary by data type and processing context.

8. Your Rights

Under UK GDPR, individuals have the right to:

Access their personal data

Request rectification or erasure

Restrict or object to processing

Withdraw consent (where applicable)

Lodge a complaint with the Information Commissioner’s Office (ICO)

Requests may be submitted via our general contact form or via hello@flairy.co.uk 

9. Liability & Limitations

SacramCo Ltd/FLAIRY® shall not be held liable for Data breaches or misuse resulting from third-party platforms or any other action or internal protocols under their direct control or due to any other circumstance outside our direct control including service disruptions caused by 'force majeure' or regulatory changes.

We assure our clients and website visitors that we take all reasonable steps to ensure compliance and data integrity, but cannot guarantee absolute security in all circumstances particularly those outside our immediate direct control.

10. Updates & Amendments

We reserve the right to update these terms at any time. The version in effect at the time of engagement shall apply. Users are encouraged to review this page periodically.