Apply to work with usApply

Last updated 7 October 2026

Privacy policy

This policy explains what personal data we collect through www.social-flow.co.uk, why, who handles it for us and what your rights are. It is written to be read, not skimmed past.

Who we are

Social Flow Digital Ltd (“Social Flow”, “we”) is the data controller. We are a company registered in England and Wales, company number 16537741. Our registered office is Office 4, 111 Park Road, London NW8 7JL.

Questions about your data, or a request to use any of your rights, go to [email protected] or 07495 932747.

What we collect, form by form

  • The application (Apply): your name, mobile number, email, business name and, if you give it, your website, plus your answers to the questions about your business: your trade, where you’re based and the area you cover, rough monthly turnover, what a typical job is worth, what you could put into growth each month, whether you’ve worked with an agency before and what you want from the next 12 months. Your contact details are saved as soon as you complete that first step, so we can pick the application up with you if you don’t finish it.
  • The Lead Maths Calculator: the numbers you type are worked out in your browser and stay there. If you ask for the full breakdown, we collect your name, email, mobile number and trade, along with the numbers you entered, so the breakdown is about your business.
  • The Paradigm breakdown: your first name, email and trade.
  • The area waitlist: your contact details, your trade and the area you asked about.
  • The “See how the system works” video: your first name, email and, if you choose to give it, your mobile number, so we can follow up about the video.
  • The live text demo (Try it): your first name, UK mobile number and the job you picked, used to send you one demo text that you asked for. It isn’t added to any marketing list.
  • The Trade Brand Score: your answers are scored in your browser. If you ask for your score by email, we collect your first name and email, along with your answers, stage and score.
  • The visibility scan: your first name, email, business name, trade and town, and the Google Maps listing you pick, so we can run the scan and send you the results.
  • Your ad, made for you: nothing. Your business name, trade, town and any photo you add stay in your browser; the photo is never uploaded.
  • The area checker: if you type a postcode, it is sent to postcodes.io (a free public postcode lookup) to find your area. We don’t store it.
  • Emails, calls and messages: whatever you send us, and our replies.
  • How you found us: campaign tags in the link you arrived on (such as utm_source or a Facebook click ID), the page you landed on and the page you were on when you sent a form.
  • Usage data: pages viewed, clicks and scrolling, only if you accept analytics cookies. See the cookie policy.

We don’t ask for, and don’t want, any sensitive personal data. Our forms carry an unticked box, “Send me the occasional email with results and tips.” Leaving it unticked never affects your application or your breakdown.

Why we use it, and our lawful basis

  • To reply to you. Reviewing your application, sending the breakdown or video you asked for and getting in touch about it by phone, text, WhatsApp or email. Lawful basis: our legitimate interest in answering an enquiry you made, and steps taken at your request before entering a contract.
  • To send marketing emails. Results and tips, only if you ticked the box. Lawful basis: your consent. Every email has an unsubscribe link, and you can also reply “unsubscribe” at any time.
  • To see how the site is used. Google Analytics and Microsoft Clarity. Lawful basis: your consent, given through the cookie banner.
  • To measure our own advertising. The Meta pixel in your browser. Lawful basis: your consent, given through the cookie banner. When you send a form, our CRM also tells Meta that an enquiry was made, with your email and phone number hashed first, so we can see which of our own ads work. Lawful basis: our legitimate interest in measuring our advertising. You can object to this at any time by emailing us.
  • To work with you as a client. Delivering what we agreed and keeping business records. Lawful basis: contract, and our legal obligations.

Who processes it for us

We use a small number of suppliers to run the business. Each one only handles your data on our instructions.

  • GoHighLevel (LeadConnector): our CRM. It stores applications and enquiries, and sends our texts, emails and WhatsApp messages.
  • Google Workspace: our email, calendar and documents.
  • Resend: sends emails from this website, such as a notice to us that you applied.
  • Vercel: hosts this website, and counts page views with Vercel Web Analytics. That count uses no cookies and doesn’t identify you.
  • Google Analytics: website statistics, only with your consent.
  • Microsoft Clarity: anonymised recordings of how pages are used, such as clicks and scrolling, only with your consent. What you type into a form is masked.
  • Meta (Facebook and Instagram): measuring our own ads, only with your consent.

Some of these suppliers store data outside the UK, mainly in the United States. Where they do, the transfer is covered by the UK’s data bridge with the US or by standard contractual clauses with the UK addendum. We never sell your data, and we never pass it to anyone for their own marketing.

How long we keep it

  • Applications and enquiries that don’t become work: up to 24 months after we last spoke, then deleted.
  • Breakdown, calculator and video requests: until you unsubscribe or ask us to delete them, and no longer than 24 months after we last heard from you.
  • Client records: for as long as we work together, then for the six years the law requires us to keep business records.
  • Analytics data: up to 14 months in Google Analytics and up to 13 months in Microsoft Clarity.

Your rights

Under UK GDPR you can ask us to:

  • give you a copy of the data we hold about you;
  • correct anything that’s wrong;
  • delete your data;
  • stop or limit how we use it, including for marketing;
  • send your data to you or to someone else in a portable format.

Where we rely on your consent, you can withdraw it at any time: unsubscribe from emails, or change your cookie choice on the cookie policy page. Email [email protected] to use any of these rights. It’s free, and we’ll respond within one month.

How to complain

If something isn’t right, please tell us first and we’ll put it right. You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

If we change how we use personal data we’ll update this page and the date at the top.