Privacy Policy

Last updated 7 November 2026

1. What this covers

This policy explains what personal data Uniflow 360 processes, why, and what rights people have. It covers the sign-up process and the service itself. For employee data inside a workspace, your employer is the data controller and we process that data on their behalf.

2. What we collect

• Sign-up: company name, country, and the administrator's name, work email and mobile number.
• Inside a workspace: the employee records your company enters or imports — typically name, employee number, department, role, mobile number, garment sizes, and uniform transactions (entitlements, bookings, handovers, returns).
• Technical: server logs with IP addresses, kept briefly for security and troubleshooting. We do not run advertising trackers on the service.

3. Why we process it

To provide the service: signing people in, booking appointments, recording handovers, sending the service's own emails and notifications, billing, and support. We do not sell personal data, and we do not use your workspace's data for anything other than running the service for you.

4. Where it lives and who helps us

• Each company's data is stored in its own database on servers hosted with Amazon Web Services in Mumbai, India, with encrypted daily backups in a second AWS region (Singapore).
• Service emails are delivered through Amazon SES. Sign-in is handled with Google Firebase Authentication. Our sites are served through Cloudflare.
• Card payments, when enabled, are processed by Stripe; card numbers never touch our servers.

5. How long we keep it

Workspace data is kept while the company's account exists. A paused account keeps its data. After a workspace is closed, its data is deleted within 90 days; backups age out within 60 days after that. Pending sign-ups that are never confirmed expire after 48 hours.

6. Your rights

You can ask us what data we hold about you, have it corrected or deleted, or object to its processing, by writing to info@uniflow360.com. If your data was entered by your employer, we may need to route the request through them, since the data is theirs to control.

7. Changes

Material changes to this policy are announced by email to workspace administrators before they take effect.