Privacy notice

Who we are

RT FLOW provides WhatsApp automation services to businesses. Contact: [CONTACT EMAIL]. Registered details: [TO BE COMPLETED].

Template prepared for RT FLOW. Have it reviewed by a qualified legal adviser before you rely on it, and confirm any tax treatment with an accountant.

Two different roles

When you message a business that uses RT FLOW, that business is the data controller and we act as its processor under a written Data Processing Agreement. Please contact the business to exercise your rights; we will help them respond.

For our own clients, website visitors and enquiries, RT FLOW is the controller.

What we process

For business clients: name, email, phone, business details and the information you provide in the service request form.

For end clients of our business clients: name, WhatsApp number, message content, appointment details and marketing consent status.

We do not store card details. Deposits are paid through the business's own payment provider.

Lawful bases

Performance of a contract for service messages and account management; consent for marketing and win-back messages, which can be withdrawn at any time by replying STOP; legitimate interests for securing and improving our service.

Sub-processors

Meta Platforms (WhatsApp Business Platform), our hosting and database provider, our AI model provider and our email provider. A current list is available on request. Where data is transferred outside the UK, appropriate safeguards such as the UK IDTA apply.

Retention

Conversation logs: 90 days by default. Account and order records: for the life of the contract plus 6 years for accounting purposes, subject to confirmation by our accountant.

Your rights

Access, rectification, erasure, restriction, objection and portability, and the right to complain to the UK Information Commissioner's Office (ico.org.uk).

Security

Encryption in transit, access controls limited to named people, and breach notification to affected controllers without undue delay.