Privacy Policy

ComplyFlow is operated by Northbridge Technology Solutions Ltd, registered in England and Wales (Company No. 17369432).

Registered address: 21 Burlington Place, Leeds LS11 7DQ.

Data protection contact: hello@northbridge-tech.co.uk

For account holders (your company):

• Name, work email, company name, and industry
• Login credentials (stored as a secure password hash)
• Counterparty names, emails, and contact details you add
• Compliance documents uploaded via the portal
• Usage data such as document status and audit timestamps

For counterparties (suppliers/contractors uploading documents):

• Name, email, and documents they upload via their portal link
• We do not require counterparties to create an account

• Provide document collection, tracking, and reminder services
• Extract expiry dates and certificate details from uploaded files
• Send document request and reminder emails on your behalf
• Improve the product and provide customer support
• Meet legal and regulatory obligations

• Contract: to deliver the service you signed up for
• Legitimate interests: to operate, secure, and improve ComplyFlow
• Consent: where required for optional communications

Data is hosted in the UK/EU where possible. We use trusted sub-processors for hosting, email delivery, and document storage (e.g. cloud infrastructure and email providers). Documents are stored encrypted in object storage.

We do not sell your personal data.

We retain account and document data while your subscription is active. You may request deletion by contacting us. Some data may be retained where required by law or for legitimate business purposes (e.g. invoicing records).

Under UK GDPR you have the right to access, rectify, erase, restrict, or

object to processing, and to data portability. Contact us at the email above.

You may also complain to the ICO (ico.org.uk) if you believe your data has been mishandled.