1. Introduction SimFlow Ltd (“we,” “our,” or “us”), registered with UK Companies House, is committed to protecting and respecting your privacy. This policy outlines how we collect, store, and use personal information from users of our platform, SimFlow, which is designed to enhance education and training.

2. Information We Collect We only collect minimal personal information necessary to provide our services. This includes:

• First name
• Surname
• Email address
• User inputs during interactions with our simulation platform

We do not actively collect or require sensitive personal information (e.g., health data, financial information). If you do not wish us to store any sensitive information, please do not provide it to us directly.

3. Purpose of Data Collection The personal data we collect is used solely for:

• User account creation and management
• Providing access to SimFlow services
• Communicating updates and support information related to your use of the platform

4. Data Retention Policy We retain your personal information for the duration of your subscription with us. Once your subscription ends, we will securely delete your personal data within a reasonable period (30-60 days) unless further retention is required or requested.

5. Data Storage and Security Your data is stored securely in an Amazon Web Services (AWS) data centre, which is ISO 27001 certified.

All data storage and handling processes comply with the UK Data Protection Act 2018 and GDPR regulations. Staff or third-party companies we may work with are required to adhere to strict IT policies and undergo regular training on data protection best practices.

6. Data Sharing and Disclosure We do not share, sell, or distribute your personal information to third parties for commercial purposes. Additional data sharing can include the following:

• To authorised employees who manage your information under this policy
• To service providers (e.g., cloud hosting) who comply with strict data protection standards
• When legally required or necessary to protect our rights

7. Your Rights Under GDPR If you are based in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to:

• Access the data we hold about you
• Request correction or deletion of your data
• Restrict our processing of your data
• Object to data processing or withdraw consent (if applicable)
• Transfer your data to another organization (data portability)
• Lodge a complaint with a supervisory authority if you believe we have violated your privacy rights

You can exercise these rights by contacting us at info@simflow.ai.

8. How to Access or Correct Your Information You can access and update your personal information by contacting our support team at info@simflow.ai. We will respond to your request within 14 business days. In certain circumstances, we may deny access if it would violate another individual’s privacy or if legally exempt.

9. Complaints and Contact Information If you have any concerns or complaints about our handling of your personal information, please reach out to us at info@simflow.ai. We aim to resolve complaints within 30 days. If you are unsatisfied with our response, you have the right to escalate your complaint to the Information Commissioner’s Office (ICO) in the UK, whom we have voluntarily registered with.

10. Updates to This Policy We may update this Privacy Policy to reflect changes in our practices or legal requirements.