Privacy Notice

Last updated: 12 October 2026

Who we are

silverliningdigital provides AsbestosFlow and is the data controller for the personal data described here, under UK GDPR and the Data Protection Act 2018.

What we collect and why

• Account details (name, email, login credentials) — to create and run your account (contract).
• Survey data you enter (site addresses, client names, findings) — to provide the service (contract).
• Support messages — to help you (contract / legitimate interests).
• Technical data (IP address, device and usage information) — for security, fraud prevention and improving the service (legitimate interests).

Who we share it with

• Hosting and infrastructure providers who store data on our behalf.
• Paddle, our Merchant of Record, for sales, subscription management, payments, tax and invoicing.
• Professional advisers (legal, accounting).
• Authorities where required by law.

International transfers

Some providers may process data outside the UK. Where they do, we rely on adequacy decisions or the UK International Data Transfer Agreement / Standard Contractual Clauses.

Retention

We keep your data while your account exists and for up to 12 months afterwards, unless the law requires longer. It is then deleted or anonymised.

Your rights

You can request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. We respond within one month. You can complain to the Information Commissioner's Office (ico.org.uk).

Security

We use appropriate technical and organisational measures, including encryption in transit and access controls.

Cookies

We only use essential storage needed to keep you signed in. We do not use advertising cookies.