Privacy Policy · Accountancy Services

Privacy &
Data Protection

This privacy policy applies specifically to data collected through the FlowNexa lead qualification system on the Accountancy Services vertical. It sets out how your personal data is collected, processed, stored, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Last Updated: July 2026 Vertical: Accountancy Services UK GDPR Compliant AWS EU-West-2 (London) ICO Compliant
01 · Data Controller
Who Is Responsible for Your Data

The data controller for personal data collected through this FlowNexa lead qualification form is:

Justin Beze
Trading as FlowNexa
Leicester, United Kingdom
Email: hello@flownexa.io
Phone: +447931677999
Website: www.flownexa.io

FlowNexa is a technology service that provides AI-powered lead capture and qualification infrastructure for professional services firms. It does not itself provide Accountancy Services services. All professional advice and services are provided by the qualified accountant or tax professional to whom your enquiry is routed.

This policy applies solely to data collected through the Accountancy Services lead qualification form. If you have accessed FlowNexa through a different professional services vertical, a separate privacy policy applies to that vertical.

02 · Data We Collect
What Personal Data We Collect

When you complete the FlowNexa qualification form on the Accountancy Services vertical, we collect the following categories of personal data:

Identity and Contact Data:

  • Full name
  • Phone number
  • Email address
  • Postcode or general location

Professional and Situational Data:

  • financial and tax information, including self-employment income, expense records, HMRC correspondence history, UTR numbers, filing status, and tax year details

Consent and Compliance Data:

  • GDPR consent flag (Yes/No) with timestamp
  • Submission timestamp in ISO 8601 format
  • Lead score and classification (Hot/Warm/Cold)
  • Vertical identifier for internal routing
What we do not collect: We do not collect payment information, government identification numbers, precise location data, biometric data, or any data from minors. We do not use cookies or tracking pixels on our lead capture pages.
03 · Lawful Basis
Legal Basis for Processing

We process your personal data under the following lawful basis as defined by UK GDPR:

Lawful Basis: Article 6(1)(a) — explicit consent, and Article 6(1)(f) — legitimate interests in connecting you with appropriate tax professional services

By ticking the consent checkbox on the lead qualification form, you provide explicit consent for your data to be collected, processed, and shared with the relevant qualified accountant or tax professional for the sole purpose of reviewing your enquiry and contacting you.

You have the right to withdraw your consent at any time by contacting us at hello@flownexa.io. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

Enhanced Data Notice: Financial data including income ranges and HMRC penalty information is treated with enhanced security controls within our AWS infrastructure
04 · How We Use Your Data
Purpose of Processing

Your personal data is collected and processed for the following specific purposes only:

  • Qualifying your enquiry using our AI scoring engine to classify it as Hot, Warm, or Cold based on urgency, case type, and relevant professional criteria
  • Routing your structured enquiry to the relevant qualified accountant or tax professional in your local area
  • Storing your lead record in AWS DynamoDB for the qualified accountant or tax professional's reference and follow-up
  • Syncing your enquiry to the qualified accountant or tax professional's private Google Sheet dashboard
  • Dispatching a transactional SES email alert to the qualified accountant or tax professional containing your structured enquiry summary

We do not use your data for marketing purposes, profiling, automated decision-making with legal effects, or any purpose other than those stated above.

We do not sell your data. Your personal data is never sold, rented, or shared with advertising networks, data brokers, or any third party other than the qualified accountant or tax professional to whom your specific enquiry is routed.
05 · Data Storage & Security
Where and How Your Data Is Stored

Your personal data is stored and processed on the following infrastructure, all located within the United Kingdom or European Economic Area:

  • AWS DynamoDB — EU-West-2 (London) region. Encrypted at rest using AWS-managed encryption keys. Access restricted to the FlowNexa Lambda execution role via IAM policies.
  • AWS Lambda — EU-West-2 (London) region. Serverless execution environment — data is not persisted within the Lambda function beyond the execution context.
  • AWS SES — EU-West-2 (London) region. Transactional email dispatch only — email content is not stored by FlowNexa beyond dispatch confirmation.
  • AWS Amplify — EU-West-2 (London) region. CDN delivery of the lead capture page. No personal data is stored at the Amplify layer.
  • Google Sheets — Accessed via Google Apps Script API. The qualified accountant or tax professional's private Google Sheet is controlled by the professional and subject to Google's privacy policy and your data sharing consent.

All data in transit is encrypted using TLS 1.3. All API endpoints are served over HTTPS with valid SSL certificates. CORS is configured to allow requests only from authorised FlowNexa domains.

Data Retention: Lead records are retained for 24 months from submission date to allow for annual tax cycle follow-up, after which they are permanently deleted from all systems
06 · Data Sharing
Who We Share Your Data With

Your personal data is shared only with the following parties, solely for the purpose of fulfilling your enquiry:

  • The qualified accountant or tax professional — Your structured enquiry, lead score, and contact details are shared with the relevant qualified accountant or tax professional in your local area via email alert and Google Sheets access. This professional is the intended recipient of your enquiry.
  • Amazon Web Services (AWS) — As our infrastructure provider, AWS processes data on our behalf as a data processor. AWS is bound by their Data Processing Agreement and GDPR-compliant terms. All processing occurs in the EU-West-2 (London) region.
  • Google (Sheets/Apps Script) — As a data processor for the sheet sync function. The relevant Google Workspace terms and data processing agreements apply.

We do not share your data with any other third parties, affiliates, marketing companies, or data brokers.

07 · Your Rights
Your UK GDPR Rights

Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the following rights regarding your personal data:

Right of Access
Request a copy of all personal data we hold about you — we will respond within 30 days.
Right to Rectification
Request correction of any inaccurate personal data we hold about you.
Right to Erasure
Request deletion of your personal data from all FlowNexa systems. We will process this within 72 hours.
Right to Withdraw Consent
Withdraw your consent at any time. This does not affect the lawfulness of prior processing.
Right to Restrict Processing
Request that we restrict processing of your data while a complaint or correction is pending.
Right to Data Portability
Request your personal data in a structured, machine-readable format (JSON or CSV).
Right to Object
Object to processing carried out on the basis of legitimate interests.
Right to Complain
Lodge a complaint with the ICO at ico.org.uk if you believe your rights have been violated.

To exercise any of the above rights, contact us at hello@flownexa.io with the subject line "Data Subject Request." We will acknowledge your request within 72 hours and fulfil it within 30 days.

08 · Automated Decision-Making
Lead Scoring and Automated Processing

FlowNexa uses an automated scoring algorithm to classify your enquiry as Hot, Warm, or Cold based on your form responses. This classification determines the priority with which the qualified accountant or tax professional is alerted to your enquiry.

This automated classification does not produce legal effects or significantly affect you — it is a routing and prioritisation tool only. The qualified accountant or tax professional makes all professional judgements independently after reviewing your full enquiry details.

Your right to human review: You have the right to request that your enquiry be reviewed by a human rather than being subject to automated scoring classification. To exercise this right, contact hello@flownexa.io.
09 · Cookies and Tracking
Cookies Policy

The FlowNexa Accountancy Services lead qualification page does not use cookies, tracking pixels, session storage, or any client-side tracking technology beyond the form submission itself.

No analytics, advertising, or retargeting cookies are placed on your device when you visit or use the FlowNexa qualification form.

10 · Contact and Complaints
How to Contact Us

For any queries relating to this privacy policy, your personal data, or to exercise your data subject rights:

Justin Beze — Data Controller
FlowNexa · Leicester, United Kingdom
📧 hello@flownexa.io
📞 +447931677999
🌐 www.flownexa.io

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
📞 0303 123 1113
🌐 ico.org.uk
11 · Policy Updates
Changes to This Policy

This privacy policy was last updated in July 2026. We may update this policy from time to time to reflect changes in our data processing practices, legal requirements, or operational changes. The current version is always available at flownexa.io/privacy-accountants.html.

Material changes to this policy will be communicated via email to any party whose data we hold, prior to those changes taking effect.