Privacy Policy

Last updated: 30 October 2026

1. Who we are

This website, massflowlabs.com (the "Site"), is operated by Mass Flow Labs Ltd, a company registered in England and Wales (company number 17510804). Our registered office is Office 31699 Unit F, Winston Business Park, Churchill Way, Sheffield, South Yorkshire S35 2PS, United Kingdom.

We are the data controller of the personal information described in this policy. We develop and sell software and apps for ecommerce, inventory, point of sale (POS) and ERP. This policy explains what personal information we collect when you visit the Site, buy from us or contact us, how we use it, and the rights you have under the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 ("PECR").

Contact for all privacy matters: support@massflowlabs.com, or write to us at the address above.

2. Information we collect

• Contact details: name, email address, telephone number, billing and delivery address.
• Order and payment information: what you bought, order value, and payment status. Card details are entered directly with our payment processors and are never stored on our own systems; we receive only limited information such as the card brand, the last four digits and a payment reference.
• Account information: login details and preferences if you create an account.
• Communications: messages you send us, such as support requests.
• Device and usage information: IP address, browser type, device identifiers, pages viewed and how you move around the Site, collected through cookies and similar technologies.
• Business information: if you buy on behalf of a company, your job title and the company's name, address and VAT number.

We collect this information from you directly, automatically from your device, and from our service providers (for example payment and fraud-screening results).

3. How we use your information and our lawful bases

Purpose	Lawful basis
To take and process orders, provide software and services, take payment, and deliver what you have bought	Performance of a contract with you
To provide customer support and respond to your enquiries	Performance of a contract, or our legitimate interests in running our business
To prevent fraud, keep the Site and our systems secure, and enforce our terms	Legitimate interests
To keep accounting, tax and other statutory records	Legal obligation
To improve the Site and our products through analytics	Legitimate interests, or consent where cookies or similar technologies require it
To send you marketing emails about our products	Consent, or where you are an existing customer, the "soft opt-in" under PECR for similar products and services (you can always opt out)

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Who we share your information with

We do not sell your personal information. We share it only with organisations that help us run the business, who act as our processors (or, in some cases, as independent controllers) and may only use it as permitted by their agreements with us and the law:

• Shopify (Shopify International Limited, Ireland, and Shopify Inc., Canada), which hosts the Site and our online store and processes orders. See the Shopify privacy policy.
• Stripe (Stripe Payments Europe Ltd and affiliates) and Shopify Payments (which is powered by Stripe), which process card and other payments, and carry out fraud and anti-money-laundering checks. See the Stripe privacy policy.
• Google Workspace (Google Ireland Limited / Google LLC), which provides our business email, documents and storage, including the mailbox that receives your support enquiries.
• Cloudflare (Cloudflare, Inc.), which provides our domain, DNS, content delivery and security services, and so handles IP addresses and request data when you visit the Site.
• Our professional advisers (such as accountants and lawyers), insurers, and the tax authorities, regulators or law enforcement where we are legally required to disclose information.
• A buyer or successor, if our business is sold or restructured, who would be bound to protect your information in line with this policy.

5. International transfers

Some of the providers above are based outside the UK, notably in the United States and Canada. Where we or they transfer personal information outside the UK, we rely on UK adequacy regulations (including the UK-US data bridge for certified US organisations), the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or another safeguard permitted by UK GDPR.

6. Cookies and similar technologies

The Site uses cookies and similar technologies. Strictly necessary cookies (for example to keep items in your basket, remember your session, process secure checkout and protect against fraud) do not need your consent. For any non-essential cookies, such as analytics or marketing cookies, we ask for your consent through the cookie banner before they are set, and you can change or withdraw your choice at any time. You can also block or delete cookies in your browser settings, but parts of the Site may then not work properly.

7. Marketing

We will only send you marketing emails if you have opted in or are an existing customer being sent information about similar products, and every message includes an unsubscribe link. You can also opt out at any time by emailing support@massflowlabs.com. We will still send you service messages, such as order confirmations and invoices.

8. How long we keep your information

We keep personal information only for as long as we need it for the purposes above. In general: order, invoice and payment records are kept for six years after the end of the financial year to meet tax and company law requirements; support correspondence is kept only for as long as needed to deal with your enquiry and any follow-up; and marketing preferences are kept until you unsubscribe. After that period we delete or anonymise the information.

9. Security

We use appropriate technical and organisational measures to protect personal information, including encryption in transit, access controls and two-factor authentication on our business accounts. No system is completely secure, so please do not send us sensitive information (such as full card numbers) by email.

10. Your rights

Under UK data protection law you have the right to:

• be informed about how we use your information (this policy);
• access a copy of the personal information we hold about you;
• have inaccurate information corrected;
• have your information erased, in certain circumstances;
• restrict our processing of your information, in certain circumstances;
• object to processing based on legitimate interests, and to direct marketing at any time;
• data portability, where we process your information by automated means under a contract or with your consent; and
• withdraw consent at any time, where we rely on it (this will not affect earlier processing).

To exercise any of these rights, email support@massflowlabs.com. We will respond within one month (extendable by up to two further months for complex requests) and will not normally charge a fee. We may need to verify your identity first.

11. Complaints

Please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

12. Children

The Site and our products are intended for businesses and adults. We do not knowingly collect personal information from children under 13 (or under 18 for purchases).

13. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the "Last updated" date above. If we make significant changes we will tell you in a suitable way, for example by email.

14. Contact us

Mass Flow Labs Ltd
Office 31699 Unit F, Winston Business Park, Churchill Way, Sheffield, South Yorkshire S35 2PS, United Kingdom
Email: support@massflowlabs.com