Legal

Privacy Policy

Last updated: 09 April 2026

This Privacy Policy explains how Rezora Ltd ("Rezora", "we", "us", "our") collects, uses, stores, and shares your personal data when you use our website, FloChat platform, or custom automation services. We are committed to handling your data lawfully and transparently, in compliance with the UK GDPR, the EU GDPR, and applicable data protection legislation.

1. Who We Are

Rezora Ltd is the data controller for personal data collected through our website and services. Contact: hello@rezora.tech.

2. Data We Collect

Data you provide

  • Name, email address, company name when contacting us or registering
  • Payment information (processed directly by Stripe — we do not store card details)
  • Content you upload or configure within our platform
  • Communications with our team

Data collected automatically

  • IP address, browser type, device information
  • Pages visited, time spent, referral source (via analytics)
  • Cookies and similar tracking technologies (see our Cookie Policy)

Data from third parties

  • Social login information (if you authenticate via Meta or Google)
  • Messaging platform data processed on your behalf (as a data processor)

3. How We Use Your Data

  • Service provision — to operate, maintain, and support your account
  • Billing — to process subscription payments via Stripe
  • Communication — to respond to enquiries and send service-related updates
  • Security — to detect and prevent fraud and abuse
  • Improvement — to analyse usage patterns and improve our products
  • Legal compliance — to meet our regulatory obligations

4. Legal Bases for Processing

  • Contract — processing necessary to provide the services you've signed up for
  • Legitimate interests — analytics, security, product improvement
  • Consent — marketing communications (where opted in)
  • Legal obligation — compliance with applicable laws

5. Sharing Your Data

We do not sell your personal data. We share data only with:

  • Stripe — payment processing
  • Meta Platforms — required for Instagram/Facebook integrations
  • Google — Calendar/Calendly integrations
  • Infrastructure providers — cloud hosting (data may be processed in the UK or EEA)
  • Legal authorities — where required by law

6. Data Retention

We retain your data for as long as your account is active plus 12 months, or as required by law. Inactive accounts are deleted after 24 months of inactivity. Upon cancellation, data is deleted within 30 days. You may request earlier deletion — see Section 8.

7. International Transfers

Some of our third-party providers are based outside the UK/EEA. We ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses) for any international data transfers.

8. Your Rights

Under UK/EU GDPR you have the right to:

  • Access — request a copy of your personal data
  • Rectification — correct inaccurate data
  • Erasure — request deletion ("right to be forgotten")
  • Restriction — restrict how we process your data
  • Portability — receive your data in a machine-readable format
  • Object — object to processing based on legitimate interests
  • Withdraw consent — at any time, where processing is consent-based

To exercise any right, email hello@rezora.tech or use our Data Deletion Request form. We will respond within 30 days.

9. Cookies

We use cookies and similar technologies. See our Cookie Policy for full details and how to manage your preferences.

10. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. No system is 100% secure — please use strong passwords and report any security concerns to hello@rezora.tech.

11. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect data from children. If you believe we have inadvertently done so, please contact us immediately.

12. Changes to this Policy

We may update this Policy periodically. We'll notify you of significant changes by email or in-app notice. The "Last updated" date at the top indicates when this Policy was last revised.

13. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or your local supervisory authority.

14. Contact

For any privacy enquiries: hello@rezora.tech