Privacy Policy

TaskFlow, operated by Harrison Dangerfield (sole trader), is the data controller for information collected through this website and the ECCMS platform. You can contact us at support@taskflow.systems.

We collect the following types of information:

• Account information — your name, email address, phone number, and business details when you sign up.
• Payment information — processed securely through our payment provider. We do not store card details.
• Usage data — how you interact with the ECCMS platform, for the purpose of support and improvement.
• Client data you enter — details of your customers, jobs, and invoices that you add to the system.
• Communications — emails or messages you send to TaskFlow support.

We use your information to:

• Set up and manage your ECCMS account.
• Process your monthly subscription payments.
• Provide technical support and respond to queries.
• Send service-related updates and notices (not marketing).
• Improve the ECCMS platform based on usage patterns.

We do not sell your data to third parties, use it for advertising, or share it with anyone outside of what is necessary to operate the service.

When you use ECCMS to manage your own customers, you are the data controller for that information. TaskFlow acts as a data processor on your behalf. You are responsible for ensuring you have the appropriate basis under UK GDPR to collect and store your clients' personal data.

We do not access, use, or share your clients' data for any purpose other than providing and maintaining the platform.

We process your personal data on the following legal bases:

• Contract — to fulfil our agreement with you and deliver the ECCMS service.
• Legitimate interests — to improve the platform and provide support.
• Legal obligation — where we are required to retain records by law.

We retain your account data for as long as your subscription is active, and for up to 6 years afterwards for legal and financial record-keeping purposes, in line with UK HMRC requirements. You may request deletion of non-essential data at any time.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (where legally permissible).
• Object to or restrict certain processing.
• Request a portable copy of your data.

To exercise any of these rights, contact us at support@taskflow.systems. We will respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

This website and the ECCMS platform use essential cookies only — to keep you logged in and maintain your session. We do not use tracking or advertising cookies. No cookie consent banner is required as we rely only on strictly necessary cookies.

We take reasonable technical and organisational steps to protect your data, including encrypted connections (HTTPS), secure hosting, and restricted access. No system is completely secure, and we cannot guarantee absolute security, but we take our responsibilities seriously.

We may update this policy from time to time. We'll notify you by email if anything material changes. The "last updated" date at the top of this page will always reflect the most recent revision.