1. Controller

AediFlow ("we", "us", "our") is the controller of the personal data collected through this website and the AediFlow platform. For any privacy-related questions, you can reach us at sales@aediflow.com.

2. What Data We Collect

We may collect the following categories of personal data:

• Contact information — name, email address, phone number, and any details you provide when filling out our contact form or registering for an account.
• Account data — login credentials, user preferences, and role information necessary to provide our services.
• Usage data — information about how you interact with our website and platform, including pages visited, features used, browser type, device information, and IP address.
• Communication data — the content of messages you send to us via the contact form or email.

3. Purpose and Legal Basis

We process your personal data for the following purposes:

• To provide our services — managing your account, enabling platform features, and delivering the functionality you request. (Legal basis: performance of a contract.)
• To respond to inquiries — handling your contact form submissions and support requests. (Legal basis: legitimate interest.)
• To improve our platform — analysing usage patterns to enhance performance, usability, and security. (Legal basis: legitimate interest.)
• To comply with legal obligations — where required by applicable law or regulation. (Legal basis: legal obligation.)

4. Data Sharing

We do not sell your personal data. We may share your data with:

• Service providers — trusted third parties that help us operate the platform (e.g., hosting, email delivery, analytics). These parties are contractually bound to protect your data.
• Legal authorities — when required by law, regulation, or valid legal process.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described above, or as required by applicable law. Contact form data is retained for a maximum of 12 months after your inquiry has been resolved. Account data is retained for the duration of your account and deleted within 30 days of account closure, unless legal retention obligations apply.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, and regular security assessments.

7. Your Rights

Under applicable data protection law (including the GDPR), you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Restriction — ask us to restrict processing of your data in certain circumstances.
• Portability — receive your data in a structured, commonly used format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at sales@aediflow.com. We will respond within 30 days.

8. Cookies

This website may use essential cookies required for the site to function properly. We do not use tracking or advertising cookies. If this changes in the future, we will update this statement and request your consent.

9. Changes to This Statement

We may update this privacy statement from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this statement periodically.

10. Contact & Complaints

If you have questions about this privacy statement or wish to file a complaint, please contact us at sales@aediflow.com. You also have the right to lodge a complaint with your local data protection authority.

Last updated: March 2026