Privacy Policy

1. Who we are & how to reach us

Ampliflow Ltdis the data controller for any personal data collected through sofaflow.co.uk. Ampliflow Ltd is registered in England & Wales and operates the e-commerce development agency ampliflow.ai.

Privacy contact: hello@ampliflow.ai
Registered address: 126 High Street, Solihull, United Kingdom

You can raise any data protection question, access request, or complaint by emailing the privacy contact above.

2. What this site is

SofaFlow.co.uk is a showroom site built to show UK furniture business owners what Ampliflow can deliver — a modern Next.js + headless Shopify storefront with an AI shopping assistant. It is not a live retail operation. Product pages, prices, reviews, promotional banners, and the checkout are illustrative content. No consumer orders or payments are processed on this site.

In plain terms: if you browse this website as a consumer, we typically collect no personal data from you beyond the essential technical data required to serve the page.

3. What we collect, and only when

We only collect personal data in the following circumstances:

• Business enquiry forms. When you submit a form on the For Retailerspage or any other contact surface, we collect the details you choose to give us — typically your name, company name, email address, optional phone number, optional country, optional current e-commerce platform, and the message you’ve written. We also record which CTA triggered your enquiry so we can reply with appropriate context.
• Email correspondence. If you email us, we retain the message thread so we can reply and follow up.
• Sofie AI conversations. If you interact with the Sofie chat or voice assistant, the exchange is transmitted through OpenAI (chat) or Google Gemini Live (voice) in order to generate a response. We do not tie those messages to your identity unless you also submit a contact form.
• Essential technical data.Our hosting provider (Vercel) logs standard request data — IP address, user agent, referring URL, and request path — for security, abuse prevention, and aggregate performance analytics. This is standard for any modern website.

We do not use advertising cookies, retarget visitors across the web, or sell any personal data.

4. Lawful basis under UK GDPR

• Legitimate interests— responding to business enquiries, following up on proposals, and operating a secure, performant website.
• Consent— where you have explicitly opted in to receive further communications from Ampliflow.
• Legal obligation— limited retention required by UK tax, accounting, and company law.

5. Third-party processors

Ampliflow Ltd acts as data controller; the providers below act as data processors on our behalf. Each is bound by a data-processing agreement consistent with UK GDPR.

• Vercel Inc.— hosting, edge delivery, request-level logging
• Convex Inc.— real-time backend for Sofie chat sessions
• OpenAI LLC— chat-response generation for Sofie
• Google LLC (Gemini Live)— voice-response generation for Sofie
• Resend Inc.— transactional email delivery for business enquiry confirmations

6. Cookies

This site uses only essential cookies required for the website and Sofie assistant to function (session continuity, consent state, cart state in the showroom commerce flow). We do not set analytics or advertising cookies. You can clear cookies at any time through your browser settings.

7. Retention

Business enquiry submissions are retained for as long as is necessary to respond, follow up, and maintain a record of our business relationship — typically up to 24 months from the last contact, after which records are deleted or anonymised. Email threads are retained by our email provider under their standard retention policy. Server logs are retained for up to 30 days.

8. Your rights

Under UK GDPR, you have the right to:

• Access— request a copy of the personal data we hold about you
• Rectification— ask us to correct inaccurate data
• Erasure— ask us to delete your data where there is no compelling reason to continue processing
• Restriction— ask us to restrict processing in certain circumstances
• Portability— receive your data in a structured, machine-readable format
• Object— object to processing based on legitimate interest

To exercise any of these rights, email hello@ampliflow.ai. We respond to verified requests within one calendar month.

9. Complaints

If you are unhappy with how we handle your personal data, you can raise a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to put things right before you escalate, so please do contact us first at hello@ampliflow.ai.

10. International transfers

Some of our processors (notably Vercel, OpenAI, and Google) are based outside the United Kingdom. Where personal data is transferred internationally, it is done under the UK International Data Transfer Agreement or equivalent Standard Contractual Clauses that provide equivalent protection to UK GDPR.

11. Changes to this policy

We may update this policy from time to time to reflect changes to this website, the agency’s stack, or applicable law. Any material changes will be posted on this page with a new “Last updated” date.