check-flex.co.uk

Privacy Policy

Check-Flex Limited  ·  Last updated: June 2026

1. Who we are

Check-Flex Limited ("Check-Flex", "we", "us", or "our") is registered in England and Wales. Our registered address is 71–75 Shelton Street, London, WC2H 9JQ, England.

Check-Flex Limited is the data controller for personal data collected through check-flex.co.uk. We are regulated under UK GDPR and the Data Protection Act 2018. Our supervisory authority is the Information Commissioner's Office (ICO), ico.org.uk.

Check-Flex Limited is part of the Measurit Technologies group. Measurit Technologies Ltd, Gorey, Co. Wexford, Ireland, is a related entity that operates check-flex.eu and has its own separate privacy policy.

For privacy enquiries, contact us at:

[email protected]

2. What personal data we collect

2.1 Contact form

When you submit an enquiry through our contact form, we collect:

  • Your name
  • Your email address
  • Your message or enquiry
  • The date and time of submission

We do not collect telephone numbers, company names, or postal addresses through the contact form unless you choose to include them in your message.

2.2 Newsletter subscription

If you subscribe to our newsletter, we collect:

  • Your email address
  • Confirmation of your double opt-in
  • The date and time of subscription

Our newsletter service is operated by Brevo (Sendinblue SAS), an EU-based email marketing platform acting as a data processor on our behalf. Your data is processed within the EU. You can review Brevo's privacy policy at brevo.com/legal/privacypolicy.

2.3 Analytics data

We use two analytics tools to understand how visitors use our website. These tools are only activated once you have given your consent via our cookie consent notice. If you do not consent, no analytics data is collected.

The following tools are configured and will activate upon consent:

Google Analytics 4 (GA4)

  • IP anonymisation is enabled — your full IP address is never stored
  • Data collected includes pages visited, time on site, browser type, device type, and approximate geographic location (country or region level only)
  • Data may be transferred to Google servers in the United States under Google's Data Privacy Framework certification and UK adequacy arrangements

Matomo Analytics

  • Self-hosted on EU infrastructure — no data is transferred outside the EU/EEA
  • IP anonymisation is enabled
  • Data collected includes pages visited, referral sources, browser type, and device type
  • Matomo data is not shared with any third party

2.4 Cookie consent

We use Klaro to manage cookie consent. Your preferences are stored locally in your browser. No consent data is transmitted to external servers.

3. Legal basis for processing

Legitimate interests (Article 6(1)(f) UK GDPR) — responding to contact form enquiries from business customers and prospects. We have assessed that our legitimate interest in responding to business enquiries is not overridden by your rights and freedoms, given the B2B nature of this website.

Consent (Article 6(1)(a) UK GDPR) — newsletter subscriptions and non-essential analytics cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Legitimate interests (Article 6(1)(f) UK GDPR) — anonymised analytics data used to improve website performance and content.

4. How we use your personal data

  • To respond to enquiries submitted via the contact form
  • To send our newsletter to subscribers who have confirmed opt-in
  • To analyse website usage and improve site performance and content
  • To comply with legal obligations

We do not use your personal data for automated decision-making or profiling. We do not sell your personal data to any third party.

5. Use of AI tools

We use Claude, an AI assistant developed by Anthropic, as an internal productivity tool. Claude is used by our staff to assist with tasks such as drafting correspondence, preparing documents, and analysing information.

Claude is used strictly for internal purposes and is not deployed as a customer-facing tool on this website. Visitors to check-flex.co.uk do not interact with Claude directly.

Where personal data from enquiries is incidentally referenced in internal use of Claude (for example, when drafting a reply to an enquiry), we treat Anthropic as a data processor. Anthropic processes data in accordance with its privacy and data processing policies, available at anthropic.com/privacy. We do not deliberately input personal data into AI tools beyond what is necessary for the task at hand.

6. How long we keep your data

Contact form enquiries: Retained for 12 months from the date of submission, then deleted. Where an enquiry leads to an ongoing commercial relationship, relevant records may be retained for 7 years in accordance with accounting and legal obligations.

Newsletter subscribers: Retained for as long as you remain subscribed. Upon unsubscribing, your email address is removed from our active list within 30 days. Suppression records may be retained to prevent re-subscription without consent.

Analytics data: Retained for 14 months in GA4 (platform minimum). Matomo analytics data is retained for 12 months.

7. Who we share your data with

We share personal data only with the following processors, and only to the extent necessary:

  • Brevo (Sendinblue SAS) — newsletter delivery, EU-based
  • Google LLC — Google Analytics 4, anonymised data only, US-based with Data Privacy Framework certification and UK adequacy arrangements
  • Anthropic PBC — internal AI tooling, personal data referenced only incidentally in internal workflows

We do not share your personal data with advertisers, data brokers, or other commercial partners.

8. International data transfers

Our website and primary data storage are hosted on EU infrastructure. Data is not routinely transferred outside the EU/EEA.

Google Analytics 4 transfers anonymised analytics data to Google servers in the United States. This is covered by Google's UK adequacy arrangements and EU-US Data Privacy Framework certification.

Anthropic PBC is a US-based company. Where personal data is incidentally processed through Claude, this constitutes a transfer to the United States. We rely on Anthropic's Standard Contractual Clauses and data processing agreements for this transfer. We minimise any such transfer by avoiding unnecessary input of personal data into AI tools.

9. Your rights

Under UK GDPR you have the following rights:

  • Right of access — to request a copy of the data we hold about you
  • Right to rectification — to request correction of inaccurate data
  • Right to erasure — to request deletion of your data in certain circumstances
  • Right to restriction — to request we limit how we use your data
  • Right to data portability — to receive your data in a machine-readable format
  • Right to object — to object to processing based on legitimate interests
  • Right to withdraw consent — where processing is consent-based, to withdraw at any time

To exercise any of these rights, contact [email protected]. We will respond within one calendar month. You also have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.

10. Cookies

Essential cookies — required for the website to function, including your Klaro cookie consent preferences. These cannot be disabled.

Analytics cookies — set by Google Analytics 4 and Matomo to collect anonymised usage data. These are only placed with your consent.

You can manage cookie preferences at any time using the consent tool on our website, or through your browser settings.

11. Security

We apply appropriate technical and organisational measures to protect personal data, including HTTPS encryption and restricted access controls. In the event of a data breach likely to result in risk to your rights, we will notify the ICO within 72 hours as required by UK GDPR.

12. Children's data

This website is directed at business professionals and is not intended for use by persons under 18. We do not knowingly collect data from children. If you believe we have done so inadvertently, contact [email protected] and we will delete it promptly.

13. Changes to this policy

We may update this policy periodically. The date at the top of this page indicates the most recent revision. Material changes will be notified where reasonably practicable.

14. Contact

Email: [email protected]

Check-Flex Limited

71–75 Shelton Street, London, WC2H 9JQ, England