Privacy Policy

Flint Digital Limited is a company registered in England & Wales (company number 17083000). We operate under the trading name "Flint Digital" and are the data controller for the personal data described in this policy. This policy covers all products and services provided by Flint Digital, including: • Flint — The Hospitality App • Flint Property Management • Puzzle Pot • Retail Mogul • SetSync • MoneyWise UK • Encounter — The Church App • Websites built and hosted by Flint Digital • The flintdigital.co.uk website Contact: [email protected]

Depending on the product or service you use, we may collect: • Name and contact details (email address, phone number) • Account credentials (email and password) • Business or organisation information • Booking and reservation data • Game progress and app usage data (Puzzle Pot) • Device information and IP address • Website analytics (pages visited, browser type, referring URL) • Information you provide via contact forms or support requests • Payment and transaction records where applicable

We use personal data to: • Provide, maintain, and improve our products and services • Create and manage your account • Process bookings, reservations, and transactions • Respond to enquiries and support requests • Send important service updates and notifications • Analyse usage to improve performance and user experience • Comply with legal obligations • Protect against fraud and abuse We do not sell your personal data to third parties.

We process personal data on the following legal bases: • Contract — to deliver the services you have signed up for • Legitimate interests — to improve our products, ensure security, and communicate with you • Consent — where you have given explicit consent (e.g. marketing emails) • Legal obligation — where we are required to retain data by law

We may share data with: • Hosting and infrastructure providers (to run our apps and websites) • Payment processors (to handle transactions securely) • Analytics providers (to understand usage patterns) • Professional advisors (legal, accounting) where required All third-party providers are bound by data processing agreements and are only given access to the data they need to perform their services. We do not share data with third parties for their own marketing purposes.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. • Account data is retained while your account is active and for a reasonable period after closure • Transaction records may be retained for up to 7 years for legal and accounting purposes • Analytics data is aggregated and anonymised where possible • You can request deletion of your data at any time (see section 9)

We take appropriate technical and organisational measures to protect your personal data, including: • Encryption of data in transit and at rest • Secure authentication and access controls • Regular review of security practices • Limited access to personal data on a need-to-know basis No system is completely secure. If you become aware of any security issue, please contact us immediately at [email protected].

Our websites and apps may use cookies and similar technologies to: • Remember your preferences and settings • Understand how you use our products • Improve performance and user experience You can control cookie settings through your browser. Disabling cookies may affect the functionality of some features.

Under UK data protection law (UK GDPR), you have the right to: • Access the personal data we hold about you • Correct inaccurate or incomplete data • Request deletion of your data • Restrict or object to certain processing • Request data portability • Withdraw consent at any time (where processing is based on consent) To exercise any of these rights, please email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.