Privacy policy

1. Who is responsible?

Flow+ is the data controller for your information. Our contact details are at the bottom of this page. For privacy questions you can reach our privacy contact.

2. What data do we collect?

We only collect what we need to handle your request or deliver our service:

• Demo form: name, email address, phone number (optional), laundromat name, your situation and your message.
• Contact form: the same fields as above.
• Technical logs: your IP address and browser info are temporarily stored by our hosting provider for security and debugging. No tracking cookies, no Google Analytics.
• Owner portal (my.wassalonkassa.be): email address, password hash, name, language preference, and transaction data of your laundromat units.

3. Why do we use your data?

• Replying to your question or demo request (legitimate interest).
• Performing a contract if you become a customer.
• Complying with accounting and tax obligations (legal obligation).
• Securing our systems (legitimate interest).

4. Legal basis

For demo and contact forms we rely on your consent when sending (you explicitly tick that you agree to processing) and on legitimate interest to follow up. For customer data we rely on contract performance and on statutory retention obligations.

5. How long do we keep your data?

• Demo and contact requests that don't lead to a customer relationship: up to 24 months after last contact.
• Customer data and operational data: for the duration of the contract plus the statutory retention period (10 years for tax, 5 years for commercial documents).
• Hosting provider security logs: up to 30 days.

6. With whom do we share your data?

We never sell your data. We do work with a number of trusted sub-processors under strict data processing agreements and GDPR compliance. These fall into the following categories of recipients:

• Hosting and security provider — hosting of this website + protection against attacks. Data stays in EU datacenters where technically possible.
• Database and authentication service — for the owner portal.
• CRM software — for following up your demo or contact request.
• Payment processor — receives your customer transactions, not the personal data of website visitors.
• Email service — sending transactional emails (confirmations, password reset).
• Office software — business email and file storage for our internal operations.

Sub-processors outside the EU operate under the European Commission's Standard Contractual Clauses.

7. What rights do you have?

Under the GDPR you have the right to:

• Request access to your data.
• Have incorrect data rectified.
• Have your data erased (right to be forgotten).
• Restrict the processing.
• Object to processing based on legitimate interest.
• Transfer your data to another processor.
• Withdraw your consent at any time.

Send us an email to exercise any of these rights. We respond within 30 days. Not satisfied? You can file a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).

8. Cookies

This website uses only technically necessary cookies from our hosting provider for security and performance. No tracking cookies, no Google Analytics, no advertising pixels. That's why we don't show a cookie banner.

9. Security

We take appropriate technical and organisational measures to protect your data: HTTPS everywhere, encryption at rest in the database, multi-factor authentication for owners, limited employee access, and regular security audits.

10. Changes to this policy

We may adapt this privacy policy if the law or our services change. The last-updated date is at the top. We notify our customers by email of material changes.

11. Contact

Questions about this policy or your data? Email us or call us. We're happy to help.