Privacy, plainly.

Who is responsible

Flow Forward Ng Limited, Lagos, Nigeria is responsible for personal information collected through this website. For privacy questions or requests, email info@theflowforward.com with “Privacy request” in the subject.

Information you choose to share

The Discovery Call form asks for your name, company, role, email and message. Company size and location are optional. We use this information to respond, arrange a conversation and discuss work you have asked about. Please avoid including passwords, financial account details or other sensitive personal information.

Why we process it

We use enquiry details to take steps at your request before a potential contract. Protecting the form from abuse and keeping the service reliable supports our legitimate interests in operating a secure website. Optional website analytics run only with your consent. An enquiry does not subscribe you to marketing.

Cookies, local storage and your choices

The website does not use advertising cookies, marketing pixels or cross-site tracking. We store your privacy choice in your browser’s local storage for up to 180 days, and remember a motion preference when you choose one. These preferences are specific to your browser; clearing browser storage resets them. If storage is unavailable, your privacy choice applies to the current page only.

Optional analytics are off until you allow them. They count page views and selected product-link clicks by day and page without visitor IDs, referrers or raw IP addresses in our analytics tables. Use Privacy settings in the footer to reject analytics or change your choice at any time. Withdrawal stops future optional analytics; it cannot identify and remove an individual contribution from existing aggregate totals. Do Not Track and Global Privacy Control override an analytics opt-in. The form works regardless of your analytics choice. Successfully saved enquiries are counted as service activity.

Where your information goes

Vercel hosts the website and processes form requests. Supabase stores enquiries in our Ireland-region project. Resend sends an email notification containing your enquiry to our authorised Flow Forward inboxes, hosted by Zoho Mail. These providers process information to deliver the service. Hosting and email providers may also process technical connection and security logs, including IP addresses, under their own service practices. We do not sell your personal information.

These services may process information outside Nigeria. Contact us for information about processing locations and the transfer safeguards applicable to your enquiry.

Security and spam prevention

The website uses HTTPS. The enquiry database is not publicly readable; access is restricted to authorised administration and server-side credentials. The form uses expiring tokens, input validation and a daily submission limit. For rate limiting, the server derives a daily hash from the connecting IP address. This is used for abuse prevention, not advertising. Tokens expire after one hour and rate-limit entries after 24 hours; expired entries are cleared when the token service next runs. No online service can guarantee absolute security.

Retention

Our enquiry retention policy is up to 12 months after the last conversation, unless ongoing work or a legal obligation requires longer retention. This policy covers enquiry records and notification emails; deletion must be handled across the database and mailboxes. Provider backups and operational logs may follow separate retention schedules. Contact us if you want your enquiry deleted sooner.

Your rights

Subject to applicable law, you may request access to or a copy of your personal information, correction, deletion, restriction of processing or portability, and object to processing based on legitimate interests. You may withdraw consent to optional analytics at any time without affecting earlier lawful processing. We may ask for proportionate information to verify a request.

You can also raise a concern with the Nigeria Data Protection Commission. Contacting us first is optional.

Other services and updates

Links to OgeSync, Savour and other external websites lead to services with their own privacy practices. Newsletter signup is currently closed. If our use of data changes, we will update this notice and request new consent where appropriate.

Updated 3 October 2026.