Privacy policy | Aonnoy Sengupta

Who we are

This site is run by Flow Pundits Ltd, the company Aonnoy Sengupta trades through. "I" and "me" on this page mean Aonnoy and the company. Flow Pundits Ltd is registered in England and Wales, company no. 15703797, registered office 71 All Saints Road, Portsmouth, PO1 4NB.

For anything about your data, email hello@aonnoysengupta.com.

What we collect

When you get in touch: your name, email address, and what you tell me about your project, including your timeline, whether you're an agency, a founder or a team, and how you found me.
If we work together: contact details, project messages, contracts and invoices.
When you visit: Cloudflare, which hosts the site, handles technical data such as your IP address, browser and the pages you request. Cloudflare Web Analytics also counts visits on every page, without cookies or anything stored on your device.
When you use a form: Cloudflare Turnstile checks you're a person and not a bot. It looks at signals such as your IP address, browser and connection details. It doesn't read what you type.
If you allow analytics: Google Analytics and PostHog record how the site is used, such as pages viewed, how you arrived, and your device and browser type.
If you allow session recordings: PostHog records how you move around a page, such as clicks and scrolling, plus technical logs and page timing. Anything you type is hidden, and forms are never recorded.

Why we use it

Why	Lawful basis
To reply to your enquiry and discuss a project	Legitimate interests (answering people who contact me), or steps you've asked for before a contract
To do the work we've agreed	Contract
To keep accounting and tax records	Legal obligation
To keep the site and its forms running and secure, and count visits	Legitimate interests (a safe, working website)
To see how the site is used and improve it, with analytics and session recordings	Consent, which you can withdraw at any time

You don't have to give me any information, but I need an email address to reply. Apart from the bot check on the forms, I don't make automated decisions about you, and I don't add you to a mailing list when you get in touch.

Who we share it with

I never sell your data. These companies handle it on my behalf:

Cloudflare: hosting, security, Cloudflare Web Analytics and Turnstile, the bot check on the forms. Cloudflare also uses Turnstile's signals to improve its bot detection, and it's responsible for that use itself. See its Turnstile privacy addendum.
Google: Google Tag Manager, only if you allow analytics or session recordings, and Google Analytics, only if you allow analytics. If you press play on a video, it loads from YouTube, which is also Google.
PostHog: analytics and session recordings, only if you allow them, hosted in the EU. Your IP address is anonymised.
Resend: sends contact form messages to my inbox, using its EU region.
Hostinger: hosts my email at hello@aonnoysengupta.com.
My email app and AI assistants: AI assistants read my inbox alongside me, to help me manage it. I still read every message myself.
The accounting, invoicing and project tools I use if we work together.

I'll also share information if the law requires it.

Outside the UK: some of these companies are based in the US, so your data may be handled there. Where that happens, I rely on the UK-US data bridge or the ICO-approved transfer terms in each company's data agreement. Email me for details.

How long we keep it

Enquiries that don't become work: 12 months after we last spoke.
Client and accounting records: 6 years from the end of the financial year they relate to, as the law requires, or longer in the cases where the law asks for it.
Google Analytics: 14 months.
PostHog session recordings: 30 days.
PostHog analytics: 1 year.
Security logs: for as long as Cloudflare's service keeps them.

Your rights

You can ask me for a copy of your data, and ask me to correct it, delete it, limit how I use it, or send it to someone else. Email hello@aonnoysengupta.com. It's free, and I'll reply within a month.

You can object at any time to my using your data for legitimate interests. You can also withdraw consent for analytics or session recordings at any time, using Cookie settings in the footer.

To make a complaint: email hello@aonnoysengupta.com. I'll acknowledge it within 30 days and tell you the outcome without undue delay.

You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, by phone on 0303 123 1113, or by post at Wycliffe House, Water Lane, Wilmslow, SK9 5AF.

Cookies

The cookie policy lists what this site stores on your device.

Changes

If anything changes, I'll update this page and the date at the top. Last updated 4 November 2026.

Privacy policy.