A practical, plain-English privacy approach
Last updated: 10 June 2026
What this notice covers
This notice covers the LatchFlow website, preview workspace, direct enquiries, and information exchanged while evaluating or delivering a managed AI operations engagement.
Information we may receive
- Contact details and organisation information you send by email.
- Workflow, software-stack, and operational information shared during an audit or pilot.
- Technical request data needed to operate and secure the website.
- Service records required to manage an agreed engagement and support requests.
The booking interface submits audit requests to the site's lead-capture endpoint when a webhook or email provider is configured. If delivery is unavailable, it clearly says nothing was sent and offers a copyable request summary. Prospect contact details and notes are not retained in browser local storage.
Why information is used
Information is used to respond to enquiries, assess service fit, prepare and deliver agreed work, maintain security, meet legal obligations, and improve the reliability of the service. We do not sell personal information.
Client data and AI services
Production engagements require a written scope covering controller and processor roles, approved subprocessors, retention, access controls, incident handling, and deletion or return of client data. Live personal data is not placed into a workflow until those boundaries are agreed.
Retention and rights
Information is kept only for as long as needed for the stated purpose, contractual records, security, or legal requirements. UK data-protection rights may include access, correction, deletion, restriction, objection, and portability, depending on the circumstances.
Cookies and local storage
The site does not use advertising cookies. Vercel Web Analytics records anonymised, aggregate page-view information without cookies, and Vercel Speed Insights records anonymous device, route, and web-performance measurements. These tools are not used to reconstruct browsing sessions or identify individual visitors. Essential browser storage may be used for interface state, but the booking interface does not keep a local copy of submitted contact details or notes.
Contact
A verified privacy contact is not configured yet. Do not submit sensitive rights-request material through the preview booking flow.