Legal
Privacy notice
Last updated: 18 October 2026
This notice explains how Insuratech Ltd collects and uses personal information when you visit suraflo.com, contact us, book a demo, or receive our emails.
It covers our website and marketing only. It does not cover information processed inside the Suraflo platform (suraflo.app). If you are a client of a firm that uses Suraflo, that firm is responsible for your information. Please see their privacy notice.
1. Who we are
Suraflo is a product of Insuratech Ltd, a company registered in England and Wales.
- Company number: 16102426
- Registered office: Silverstream House, 45 Fitzroy Street, London, England, W1T 6EB
- Privacy contact: [email protected]
- Data protection lead: Leon Gilroy, Director
For the purposes of this notice, Insuratech Ltd is the controller of your personal information.
2. What we collect
Information you give us
When you fill in a form on our website (for example, to book a demo, join a waiting list or contact us), we collect:
- your name
- work email address and phone number
- the name of your firm and your role
- anything you choose to tell us in your message
We do not ask for, and you should not send us, information about your clients through the website.
Information collected automatically
When you visit the site, the services that deliver it record standard technical information in their logs, such as your IP address, browser and device type, and the pages requested. We do not use analytics or tracking on this website.
Emails
If you receive emails from us, we may record whether they were opened and whether links were clicked, so we can understand what is useful.
3. How we use it, and our lawful basis
| What we do | Why | Lawful basis |
|---|---|---|
| Reply to your enquiry or demo request | To respond to you and arrange a demo | Legitimate interests (responding to people who contact us), or steps before entering a contract |
| Keep a record of our conversations with prospective customers | To manage our sales relationship with your firm | Legitimate interests |
| Send you product updates and news | To keep you informed about Suraflo | Your consent, or our legitimate interests where you are contacting us on behalf of a company. You can unsubscribe at any time |
| Understand how our website is used | To improve the site | Your consent (analytics cookies) |
| Keep the website secure and working | To prevent abuse and fix problems | Legitimate interests |
| Comply with the law | For example, keeping records or responding to regulators | Legal obligation |
Where we rely on legitimate interests, we have considered whether they are outweighed by your rights. You can object at any time (see section 7).
4. Who we share it with
We do not sell your personal information.
We use trusted service providers who process information on our behalf, under contract, and only on our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Microsoft 365 | Sending and receiving email | UK |
| Our own enquiry system, developed by Insuratech | Storing enquiries and demo requests | UK |
| Microsoft Bookings | Booking demos | UK |
We may also share information with professional advisers (such as lawyers and accountants), or where the law requires it.
5. International transfers
Some of our providers may process information outside the UK. Where they do, we make sure appropriate safeguards are in place, such as the UK's adequacy regulations (including the UK–US data bridge where the provider is certified), or the UK International Data Transfer Agreement or Addendum.
6. How long we keep it
- Enquiries and demo requests: up to 24 months after our last contact, unless your firm becomes a customer.
- Marketing preferences: until you unsubscribe. We keep a minimal record of the unsubscribe so we do not contact you again.
- Customer records: if your firm becomes a customer, our contract and platform privacy notice apply.
7. Your rights
You have the right to:
- access the personal information we hold about you
- correct information that is wrong or incomplete
- delete your information in some circumstances
- restrict or object to how we use it, including objecting to direct marketing at any time
- withdraw consent where we rely on it, without affecting anything we did before
- data portability in some circumstances
To use any of these rights, email [email protected]. We will respond within one month. There is normally no charge.
8. Cookies
This website does not set analytics, advertising or tracking cookies, so there is no cookie banner. The services that deliver and protect the site may set a strictly necessary security cookie, which does not need your consent.
If we add analytics in future, we will update this notice first and ask for your consent where the law requires it.
9. Security
We protect your information with appropriate technical and organisational measures, including encryption in transit (HTTPS) and access controls on the systems we use.
10. Children
Our website is for businesses and is not intended for anyone under 18.
11. Changes to this notice
We will update this notice when our practices change. The date at the top shows when it was last updated.
12. Complaints
If you have a concern, please contact us first at [email protected] and we will try to resolve it.
You also have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113