Privacy policy.

  1. Home
  2. Privacy policy

Privacy

Last updated: 12 November 2026

What we collect

AI Client Flow is a trading name of Found First Marketing Ltd ("AI Client Flow", "we", "us"). We find where AI can save businesses time, then build it in and look after it. This policy explains what personal data we collect when you use our website or work with us, why, and what your rights are.

Found First Marketing Ltd, trading as AI Client Flow, a company registered in England and Wales.

Company number: 17570791

Registered office: Bartle House, 9 Oxford Court, Manchester, M2 3WQ

Email: [email protected]

Details you give us. When you book an AI audit, fill in a form, message us or become a client: your name, email address, phone number, business name, website, and anything you type into a message.

Booking details. When you pick a slot in our calendar we record the time you chose and the contact details you enter, so we can call you at that time.

Payment details. If you become a client, you pay through Stripe, our payment provider. We never see or store your full card number. We receive confirmation of the payment, the amount and the last four digits of the card.

Usage data. Basic technical details your browser sends when you visit, such as the device and browser you use. We don't currently run analytics or advertising tracking on this site (see Cookies).

Why we use it

  • To reply to you and do what you asked for: a call at the time you booked, your AI audit, a plan and price.
  • To set up and run the service you've bought, including billing.
  • To send you emails about our services where you've opted in or are a client. Every marketing email has an unsubscribe link.
  • To meet our legal obligations, such as keeping records of sales.

The legal bases we rely on are: performing a contract with you, our legitimate interests (running and improving the business, marketing to existing clients), your consent (where you opt in), and legal obligation (tax and accounting records).

If you're a client

When we set up AI tools for your business, they may handle your customers' and staff's details on your behalf: names, numbers, messages, calls, bookings, quotes, invoices and the documents you give us. Phone calls answered by an AI receptionist may be recorded and transcribed so the AI can take the details down and you can read them back.

For that data you are the controller and we act as your processor. We only use it to run the service for you, we only give the AI what it needs for the job, we keep it secure, and we don't use it for anything else. Where AI talks to your customers, they're told it's an AI assistant. The details are set out in the proposal we send you before you start.

Who we share it with

We use trusted services to run the business, and they process data on our behalf:

  • GoHighLevel (LeadConnector) for our website, forms, calendar, phone numbers, calls, texts, email, CRM and AI features.
  • AI model providers: OpenAI (ChatGPT) and Anthropic (Claude), directly or through GoHighLevel's own AI features, to read and write text for the AI we set up.
  • Stripe for payments.
  • Meta (Facebook, Instagram and WhatsApp) and Google, when you message us or your customers message you on those platforms.

We don't sell your data. We only share it where needed to deliver a service, where the law requires it, or with your permission.

Some of these providers store data outside the UK. Where that happens, transfers are covered by the provider's standard contractual safeguards.

Cookies

Right now this site only uses cookies it needs to work, plus any the booking calendar needs to take your booking. No analytics or advertising cookies. If we add any, we'll ask you first and update our cookie policy.

How long we keep it

  • Enquiries and audit bookings: up to 2 years from last contact.
  • Client and purchase records: 6 years, to meet UK tax and accounting rules.
  • Marketing lists: until you unsubscribe. We then keep a record of the unsubscribe so we don't email you again.
  • Your customers' data (clients): for as long as you're a client, then returned or deleted as agreed in your proposal.

Your rights

Under UK data protection law you can ask us to: tell you what data we hold about you, correct it, delete it, stop using it for marketing, restrict how we use it, or give you a copy in a portable format. You can also object to processing based on our legitimate interests.

To use any of these rights, email [email protected]. We'll respond within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Children

Our services and site are for businesses and adults. We don't knowingly collect data from anyone under 18.

Changes

We'll update this page if our practices change. The date at the top tells you when it was last revised.

Not legal advice. Plain-English draft adapted from the Found First Marketing privacy policy (UK GDPR, Data Protection Act 2018, PECR). Worth a solicitor's once-over before launch.