This Privacy Notice for Flip Rated Ltd ("we", "us", or "our") describes how and why we might access, collect, store, use, and/or share your personal information when you use our services, including when you visit https://www.fliprated.co.uk or engage with us in other related ways, including marketing or events.
Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our services. If you have questions or concerns, contact us at legal@fliprated.co.uk.
Summary of key points
This summary provides key points from our Privacy Notice. You can find more detail in the full sections below.
- Personal information: we process information depending on how you interact with us, the choices you make, and the products and features you use.
- Sensitive information: we do not process sensitive personal information.
- Third-party information: we do not collect personal information from third parties.
- Processing purposes: we process information to provide, improve, and administer our services, communicate with you, protect against security and fraud risks, and comply with law.
- Your rights: depending on where you are located, you may have rights to access, correct, delete, restrict, object to, or port your personal information.
01What information do we collect?
Personal information you disclose to us
In short: we collect personal information that you voluntarily provide to us.
We collect personal information when you register on the services, express an interest in obtaining information about us or our products and services, participate in activities on the services, or otherwise contact us.
The personal information we collect depends on the context of your interactions with us, the choices you make, and the products and features you use. It may include:
- Email addresses.
- Usernames.
- Passwords.
- Contact or authentication data.
We do not process sensitive information. If you choose to make purchases, payment data necessary to process your payment is handled and stored by Lemon Squeezy and Stripe. Their privacy notices are available at https://www.lemonsqueezy.com/privacy and https://stripe.com/gb/privacy.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
Information automatically collected
In short: some information, such as your internet protocol address, browser, and device characteristics, is collected automatically when you visit our services.
We automatically collect certain information when you visit, use, or navigate the services. This information does not reveal your specific identity, but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our services, and other technical information. This information is primarily needed to maintain the security and operation of our services, and for internal analytics and reporting.
The information we collect includes:
- Log and usage data. This may include IP address, device information, browser type, settings, dates and times of use, pages and files viewed, searches, feature usage, device event information, system activity, error reports, and hardware settings.
- Device data. This may include your IP address, device and application identification numbers, location, browser type, hardware model, internet service provider or mobile carrier, operating system, and system configuration information.
- Location data. This may include precise or imprecise information about your device location, depending on the device and settings you use. You can opt out by refusing access or disabling location settings, but this may affect some services.
02How do we process your information?
In short: we process your information to provide, improve, and administer our services, communicate with you, prevent security and fraud issues, and comply with law. We may also process information with your consent.
We process your personal information for a variety of reasons, depending on how you interact with our services, including:
- To facilitate account creation and authentication and otherwise manage user accounts.
- To deliver and facilitate delivery of services to you.
- To respond to user enquiries and offer support.
- To send administrative information, including product, service, terms, and policy updates.
- To fulfil and manage orders, payments, returns, and exchanges.
- To request feedback and contact you about your use of services.
- To send marketing and promotional communications where this is in accordance with your marketing preferences.
- To protect our services, including fraud monitoring and prevention.
- To identify usage trends and understand how our services are used so we can improve them.
- To save or protect an individual's vital interests, such as to prevent harm.
03What legal bases do we rely on to process your information?
In short: we only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law.
The General Data Protection Regulation and UK GDPR require us to explain the valid legal bases we rely on. We may rely on:
- Consent. We may process information if you have given permission for a specific purpose. You can withdraw consent at any time.
- Performance of a contract. We may process personal information where necessary to fulfil contractual obligations to you.
- Legitimate interests. We may process information where reasonably necessary to achieve legitimate business interests, provided those interests do not outweigh your rights and freedoms. This can include sending users information about offers, analysing service usage, diagnosing problems, preventing fraud, and improving user experience.
- Legal obligations. We may process information where necessary to comply with legal obligations, cooperate with law enforcement or regulators, exercise or defend legal rights, or disclose information as evidence in litigation.
- Vital interests. We may process information where necessary to protect your vital interests or the vital interests of another person.
06Is your information transferred internationally?
In short: we may transfer, store, and process information in countries other than your own.
Our servers are located in the United Kingdom and United States. Regardless of your location, your information may be transferred to, stored by, and processed by us and our third-party providers in the United Kingdom, United States, and other countries.
If you are resident in the EEA, United Kingdom, or Switzerland, these countries may not have data protection laws as comprehensive as those in your country. We will take necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law.
We have implemented measures to protect personal information, including European Commission Standard Contractual Clauses for transfers between our group companies and between us and third-party providers. Our Standard Contractual Clauses can be provided on request.
07How long do we keep your information?
In short: we keep information for as long as necessary to fulfil the purposes in this Privacy Notice unless otherwise required by law.
We will only keep personal information for as long as necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law, such as tax, accounting, or legal requirements. No purpose in this notice will require us keeping personal information for longer than the period in which users have an account with us.
When we have no ongoing legitimate business need to process personal information, we will delete or anonymise it. If deletion is not possible, for example because information is stored in backup archives, we will securely store it and isolate it from further processing until deletion is possible.
08How do we keep your information safe?
In short: we aim to protect your personal information through organisational and technical security measures.
We have implemented appropriate and reasonable technical and organisational security measures designed to protect personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that unauthorised third parties will not be able to defeat those safeguards.
Although we will do our best to protect personal information, transmission of personal information to and from our services is at your own risk. You should access the services within a secure environment.
09Do we collect information from minors?
In short: we do not knowingly collect data from or market to children under 18 years of age.
By using the services, you represent that you are at least 18 or that you are the parent or guardian of a minor and consent to that minor's use of the services. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to delete that data. If you become aware of data we may have collected from children under 18, contact us at legal@fliprated.co.uk.
10What are your privacy rights?
In short: in some regions, including the EEA, United Kingdom, and Switzerland, you have rights that give you greater access to and control over your personal information.
Depending on applicable law, these rights may include the right to request access and obtain a copy of personal information, request correction or deletion, restrict processing, request data portability, object to processing, and not be subject to automated decision-making. You can make such requests using the contact details below.
If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to complain to your Member State data protection authority or the UK Information Commissioner's Office at ico.org.uk. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent
If we are relying on your consent to process personal information, you have the right to withdraw consent at any time. This will not affect the lawfulness of processing before withdrawal, nor processing carried out in reliance on lawful processing grounds other than consent.
Opting out of marketing communications
You can unsubscribe from marketing and promotional communications at any time by clicking the unsubscribe link in emails we send, updating your preferences, or contacting us. We may still send service-related messages that are necessary for administration, support, or other non-marketing purposes.
Account information
If you would like to review, change, or terminate your account, you can log in to your account settings and update your account, or contact us using the contact information provided. Upon a request to terminate your account, we will deactivate or delete your account and information from active databases, subject to limited retention for fraud prevention, troubleshooting, investigations, legal terms, or legal requirements.
Cookies and similar technologies
Most browsers accept cookies by default. You can usually set your browser to remove or reject cookies, though this may affect certain features or services.
11Controls for Do-Not-Track features
Most web browsers and some mobile operating systems include a Do-Not-Track feature or setting you can activate to signal that you do not want your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing Do-Not-Track signals has been finalised, so we do not currently respond to Do-Not-Track browser signals or similar mechanisms. If a standard is adopted that we must follow in the future, we will inform you in a revised version of this notice.
12Do we make updates to this notice?
In short: yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated revised date at the top. If we make material changes, we may notify you by prominently posting a notice or by directly sending a notification. We encourage you to review this Privacy Notice frequently.
13How can you contact us about this notice?
If you have questions or comments about this notice, email us at legal@fliprated.co.uk or contact us by post at:
Flip Rated Ltd
71-75 Shelton Street
London, England WC2H 9JQ
United Kingdom
14How can you review, update, or delete the data we collect from you?
Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correction of inaccuracies, or deletion of personal information. You may also have the right to withdraw consent to processing.
To request to review, update, or delete your personal information, visit https://www.fliprated.co.uk/contact or use the Termly data request form at app.termly.io/dsar.
This Privacy Policy was created using Termly's Privacy Policy Generator.