Privacy Policy · Personal Injury Solicitors

Privacy &
Data Protection

This privacy policy applies specifically to data collected through the FlowNexa lead qualification system on the Personal Injury Solicitors vertical. It sets out how your personal data is collected, processed, stored, and your rights under UK GDPR and the Data Protection Act 2018.

Last Updated: July 2026 Vertical: Personal Injury Solicitors UK GDPR Art.6 + Art.9 AWS EU-West-2 (London) ICO Compliant
01 · Data Controller
Who Is Responsible for Your Data
Justin Beze — Data Controller
Trading as FlowNexa · Leicester, United Kingdom
📧 hello@flownexa.io · 📞 +447931677999 · 🌐 www.flownexa.io

FlowNexa provides AI-powered lead capture and qualification infrastructure for professional services firms. It does not itself provide qualified personal injury solicitor services. All professional advice and services are provided by the qualified personal injury solicitor to whom your enquiry is routed. This policy applies solely to the Personal Injury Solicitors vertical.

02 · Data We Collect
What Personal Data We Collect

Identity and Contact Data:

  • Full name
  • Phone number
  • Email address
  • Postcode or general location

Enquiry-Specific Data:

  • Accident type, date, and location
  • Injury type and description
  • Medical treatment received and ongoing symptoms
  • Whether the accident was reported and evidence available
  • Current legal representation status
  • Liability assessment (who was responsible)

Consent and Compliance Data:

  • GDPR consent flag (Yes/No) with submission timestamp
  • Lead score and classification (Hot/Warm/Cold)
  • Vertical identifier for internal routing
What we do not collect: We do not collect payment card information, government identification numbers, precise location data, or data from minors. No cookies or tracking pixels are used on our lead capture pages.
03 · Lawful Basis
Legal Basis for Processing
Lawful Basis: Article 6(1)(a) — explicit consent for standard personal data. Article 9(2)(a) — explicit consent for injury and health-related data including medical treatment history and ongoing symptoms, which constitutes Special Category Data under GDPR Article 9.

By ticking the consent checkbox on the qualification form, you provide explicit consent for your data to be collected, processed, and shared with the relevant qualified personal injury solicitor solely for the purpose of reviewing your enquiry and contacting you. You may withdraw consent at any time by contacting hello@flownexa.io.

Special Category Health Data Notice: Injury descriptions and medical treatment data are Special Category Data under GDPR Article 9. This data is processed only on the basis of your explicit consent, encrypted at rest in AWS DynamoDB in EU-West-2 London, and shared only with the specific solicitor to whom your enquiry is routed. It is never used for insurance assessment, profiling, or shared with any insurer or third party.
04 · Purpose of Processing
How We Use Your Data
  • Qualifying your enquiry using our AI scoring engine (Hot/Warm/Cold) based on enquiry-specific criteria
  • Routing your structured enquiry to the relevant qualified personal injury solicitor in your local area
  • Storing your record in AWS DynamoDB (EU-West-2) for the qualified personal injury solicitor's reference
  • Syncing your enquiry to the qualified personal injury solicitor's private Google Sheet dashboard
  • Dispatching a transactional SES email alert to the qualified personal injury solicitor containing your structured enquiry summary
We do not sell your data. Your personal data is never sold, rented, or shared with advertising networks, data brokers, or any third party other than the qualified personal injury solicitor to whom your specific enquiry is routed.
05 · Data Storage & Security
Where and How Your Data Is Stored
  • AWS DynamoDB — EU-West-2 (London). Encrypted at rest, IAM-restricted access.
  • AWS Lambda — EU-West-2 (London). Serverless — data not persisted beyond execution.
  • AWS SES — EU-West-2 (London). Transactional dispatch only — not stored by FlowNexa.
  • AWS Amplify — EU-West-2 (London). CDN delivery — no personal data stored at this layer.
  • Google Sheets — Accessed via Google Apps Script API. Controlled by the qualified personal injury solicitor under Google's privacy policy.

All data in transit is encrypted with TLS 1.3. All endpoints served over HTTPS.

Data Retention: Case enquiry records retained for 36 months given the 3-year limitation period for personal injury claims — retained to support any follow-up relating to your claim window. Deleted permanently thereafter or immediately on request.
06 · Data Sharing
Who We Share Your Data With
  • The qualified personal injury solicitor — Your structured enquiry, lead score, and contact details shared via SES alert and Google Sheets. This professional is the intended recipient of your enquiry.
  • Amazon Web Services (AWS) — Infrastructure provider, processing data in EU-West-2 (London) as a data processor.
  • Google — Data processor for the Google Sheets sync function under Google Workspace terms.

No data is shared with any other third parties, affiliates, marketing companies, or data brokers.

07 · Your Rights
Your UK GDPR Rights
Right of Access
Request a copy of all personal data we hold — response within 30 days.
Right to Rectification
Request correction of any inaccurate personal data we hold.
Right to Erasure
Request deletion from all FlowNexa systems within 72 hours.
Right to Withdraw Consent
Withdraw at any time. Does not affect lawfulness of prior processing.
Right to Restrict Processing
Request restriction while a complaint or correction is pending.
Right to Data Portability
Receive your data in a structured, machine-readable format (JSON or CSV).
Right to Object
Object to processing carried out on the basis of legitimate interests.
Right to Complain
Lodge a complaint with the ICO at ico.org.uk if you believe your rights have been violated.

To exercise any right: hello@flownexa.io — subject line "Data Subject Request". We acknowledge within 72 hours and fulfil within 30 days.

08 · Automated Decision-Making
Lead Scoring and Automated Processing

FlowNexa uses an automated scoring algorithm to classify your enquiry as Hot, Warm, or Cold based on your responses. This determines the priority with which the qualified personal injury solicitor is alerted — it does not produce legal effects or significantly affect you. All professional judgements are made independently by the qualified personal injury solicitor.

Right to human review: You may request that your enquiry be reviewed by a human rather than subject to automated scoring. Contact hello@flownexa.io.
09 · Cookies
Cookies Policy

The FlowNexa Personal Injury Solicitors lead qualification page does not use cookies, tracking pixels, session storage, or any client-side tracking technology. No analytics, advertising, or retargeting cookies are placed on your device.

10 · Contact & Complaints
How to Contact Us
Justin Beze — Data Controller
FlowNexa · Leicester, United Kingdom
📧 hello@flownexa.io · 📞 +447931677999
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow SK9 5AF · 📞 0303 123 1113 · 🌐 ico.org.uk
11 · Policy Updates
Changes to This Policy

Last updated July 2026. Material changes will be communicated via email before taking effect. Current version always at flownexa.io/privacy-personalinjury.html.