Private and Cookie Policy

home / Private and Cookie Policy

It’s time to learn more about us

FlatWorldWorks is a company that operates in the United Kingdom under company number 07671671 and our registered office is:

The Old Rectory, 57 Waterloo Road, Wolverhampton, WV1 4QH.

Your privacy is important to us. This privacy policy covers what we collect and how we use, disclose, transfer and store your information. At FlatWorldWorks we collect, use and are responsible for certain personal information about you. When we do so we are regulated under the General Data Protection Regulations which apply across the European Union (including the United Kingdom) and we are responsible as 'controller' of that personal information for the purposes of those laws.

FlatWorldWorks is committed to maintaining the trust and confidence of our visitors to our website. We do not ever, sell, rent or trade email lists with other companies and businesses for marketing purposes. Below we have provided detail on when and why we collect your personal information, how we use it, and how we may disclose it to others and how we keep it secure.


Our website uses cookies. We use cookies to personalise content and ads, to provide social media features and to analyse our traffic to improve and analyse performance and aid troubleshooting.

On the first occasion that you use our site we will ask whether you consent to our use of cookies. If you do not, cookies will not be used. Thereafter you can opt-out of using cookies at any time or you can set your browser not to accept cookies and the websites below tell you how to remove cookies from your browser. However, some of our website features may not function as a result.

Our website will:

  • Track the pages you visits and send data to Google Analytics about the visitor's device and behaviour. We will also track the visitor across devices and marketing channels.

This website will not:

  • Share any personal information with third parties.

Use of personal data

  • Analytics: uses navigation data in services provided by the NHS website and third parties.
  • Advertising: some campaigns we host are supplied with advertising data.
  • Personalisation: uses navigation data and personal information to enable us, and third parties, to tailor the services provided to you.

Data sharing

Site navigation and usage data is shared with trusted third-party services where we are utilising their technology to provide essential analysis data. We will not intentionally share personal information with any third parties without your consent.

The FW2 website Data Controller

  • The Data Protection Officer is Laura Codner
  • If there are any queries regarding this privacy policy, you may contact us using the information below:
  • You are entitled to know whether we hold information about you and, if we do, to have access to that information and require it to be corrected if it is inaccurate
  • You also have the right to lodge a complaint.

How do we use your information?

We analyse information to see what is most effective about our website and associated services to help us identify ways to improve it and to make it more effective. We may also use information for other purposes, which we would describe to you at the point when we collect the information.

What information do we collect?

When you use the FW2 website, we use various technologies to collect information indirectly – such as your IP address. This is commonplace across all internet services to enable the investigation of issues such as service availability and the identification of malicious use. This information is then kept in our internet access logs. We also collect some personal information directly – e.g. when you actively submit details.

Contact form, information quality feedback and email

You may be contacted to provide feedback on how we managed your enquiry. You will be asked to consent to this at the point you submit your data. We will hold the information you provide us for as long as necessary to support the service we are providing you. If no communication has been made in over 12 months and the information is not required to resolve an ongoing issue, then all communication and any personal information will be deleted. Generic information, such as the duration your enquiry was opened for or the part of the website you were using, will remain. This is to allow for reporting over a period greater than 12 months.

Information is kept for 12 months to allow for trend analysis, identifying reoccurring issues and understanding common issues.

Exceptions include those currently following the complaints process, or when consent to keep information for longer has been obtained.

Social media

We utilise the following social media platforms to interact with our users:

  • Facebook (incorporating Instagram)
  • Twitter
  • Linkedin
  • YouTube

If you choose to interact with us on social media, we may receive some personally identifiable data about you, which is supplied by the channel you are using. This may include:

  • Name
  • Social media handles (e.g. Twitter account name)
  • Location history (where you are contacting us from)
  • Images (e.g. your profile picture)

We will process and store your data in accordance with the terms and conditions and privacy policy of the platform in question. You should be aware that your use of these platforms is governed by the terms and conditions agreed between you and the platform, rather than the FW2 website.

We may use social media management tools (e.g. Hootsuite) to help deliver elements of our service to you. Any personally identifiable data processed using these tools is supplied by the platforms we use, in accordance with their terms and conditions.

We will not remove, duplicate or transfer your personal data from or between any of the social platforms that we use, except for when you give us explicit permission to do so

How can you access, amend or withdraw the personal data you have given us?

To get in touch about these rights, please contact us via the Data Controller details above. We will seek to deal with your request without undue delay, and in any event within 1 month (subject to any extensions to which we are lawfully entitled).

*Please note that we may keep a record of your communications to help us resolve any issues that you raise.

Right to object:

  • if we are using your data and you do not agree, you have the right to object. We will respond to your request within the required time frame. Generally, we will only disagree with you if certain limited conditions apply
  • this right enables you to object to us processing your personal data where we do so for one of the following reasons:
    1. to enable us to perform a public task or exercise official authority
    2. to send you direct marketing communications, and for research or analytical purposes

Right to withdraw consent:

Where we have obtained your consent to process your personal data, or consent to send you information, you may withdraw your consent at any time and we will cease to carry out the particular activity that you previously consented to, unless we consider that there is an alternative reason to justify our continued processing of your data for this purpose, in which case we will inform you of this condition.

Data access requests:

You may ask us to confirm what information we hold about you at any time, and request us to modify, update or delete such information. We may ask you to verify your identity and for more information about your request. If we provide you with access to the information we hold about you, we will not charge you for this. If we refuse your request for any legitimate reason, we will always tell you the reasons for doing so.

Right to remove:

In certain situations, you have the right to request us to "remove" your personal data. We will respond to your request within the agreed timeframe and will only disagree with you if certain limited conditions apply. If we do agree to your request, we will delete your data but will generally assume that you would prefer us to keep a note of your name on a register of individuals who would prefer not to be contacted. That way, we will minimise the chances of you being contacted in the future where your data are collected in unconnected circumstances. If you would prefer us not to do this, you are free to say so.

Normally, the information must meet one of the following criteria:

  • the data is no longer necessary for the purpose for which we originally collected and/or processed it
  • where previously given, you have withdrawn your consent to us processing your data, and there is no other valid reason for us to continue processing
  • the data has been processed unlawfully (i.e. in a manner that does not comply with existing Data Protection regulations)
  • it is necessary for the data to be deleted for us to comply with our legal obligations as a data controller

We would only be entitled to refuse to comply with your request for one of the following reasons:

  • to exercise the right of freedom of expression and information
  • to comply with legal obligations or for the performance of a public interest task or exercise of official authority
  • for public health reasons in the public interest
  • for archival, research or statistical purposes
  • to exercise or defend a legal claim When complying with a valid request for the removal of data, we will take all reasonably practicable steps to delete the relevant data

Right to restrict processing:

You have the right to request that we restrict our processing of your personal data in certain circumstances. This means that we can only continue to store your data and will not be able to carry out any further processing activities with it until either:

  • one of the circumstances listed below is resolved; you consent; or further processing is necessary for either the establishment, exercise or defence of legal claims, the protection of the rights of another individual, or reasons of important public interest.

Right to rectification:

You also have the right to request that we rectify any inaccurate or incomplete personal data that we hold about you. If we have shared this personal data with third parties, we will notify them about the rectification unless this is impossible or involves disproportionate effort. Where appropriate, we will also tell you which third parties we have disclosed the inaccurate or incomplete personal data to. Where we think that it is reasonable for us not to comply with your request, we will explain our reasons for this decision.

Keeping information secure

We invest significant resources to protect your personal information, from loss, misuse, unauthorised access, modification or disclosure. However, no internet-based site can be 100% secure and so we cannot be held responsible for unauthorised or unintended access that is beyond our control.

If you have any questions about this policy or the information we hold about you, please contact us by emailing: