LEGAL
Last updated: 15 October 2026
Mr Flyer is a trading name of Flow Solutions Group Limited. Throughout this Privacy Policy, references to “Mr Flyer”, “we”, “us” and “our” mean Flow Solutions Group Limited when operating under the Mr Flyer name.
We provide leaflet distribution, direct mail, printing and related marketing services to businesses across the UK.
We respect the privacy of the people and businesses we work with. Whether you contact us about a campaign, become a customer or provide information for a mailing, we aim to handle your personal information responsibly, keep it secure and use it for appropriate purposes.
This Privacy Policy explains what personal information we collect, why we use it, how we handle it, who we may share it with and the rights you have under data protection law.
Our handling of personal information is governed by applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations 2003 (PECR), as amended.
We may collect or process personal information relating to:
The way we handle your information depends on our relationship with you and the service being provided.
When you contact us about our services, we will generally act as the data controller. This means we decide why and how your personal information is used.
When a client supplies a mailing list for us to print, prepare or distribute campaign materials on its behalf, the client will generally act as the data controller, and we will act as its data processor. In these circumstances, we process the information in accordance with the client’s documented instructions and our contractual obligations, unless applicable law requires otherwise.
There may be circumstances in which we act as a data controller in our own right, including where we need to maintain business records, protect our services or meet our own legal obligations.
Our responsibilities depend on the actual processing taking place, not simply the type of service being provided.
The information we collect depends on how you interact with us and the services you require.
This may include your name, job title, business name, business address, email address, telephone number and other contact details you provide.
We may collect details about your requirements, campaign objectives, target audience, proposed distribution areas, quantities, budgets, correspondence and any other information needed to prepare a quotation or recommend suitable services.
This may include order details, invoices, payment records, delivery arrangements, account information and correspondence relating to the services we provide.
Where a third party handles payments, that provider may process payment information in accordance with its own privacy information. We will handle any payment-related information we receive in accordance with our legal obligations and the purpose for which it was provided.
When carrying out work for a client, we may process names, postal addresses and other information supplied for the campaign. Depending on the project requirements, this may include mailing preferences, suppression records, and information needed to prepare, organise, and deliver campaign materials.
We will process campaign information only to the extent necessary for the agreed service and in accordance with the applicable contractual arrangements and data protection requirements.
When you visit our website, we may collect technical information such as your IP address, browser type, device information, pages visited and details of how you interact with the website.
The information collected will depend on the website technologies in use and, where applicable, the cookie preferences you select.
We may keep records of your communication preferences, consent where required, marketing objections and requests to unsubscribe. We may also maintain limited records to ensure that your preferences continue to be respected.
We may process personal information contained in emails, telephone conversations, website messages, feedback, complaints and other communications with us.
Please avoid sending sensitive personal information unless it is necessary for the service and we have agreed how it will be handled.
We may collect personal information directly from you when you complete a website form, request a quotation, download a resource, telephone us, email us or place an order.
We may also receive information from your employer, business representatives, suppliers, service providers or other organisations involved in a campaign.
Where a client provides a mailing list, we will normally receive the information from that client and process it for the agreed campaign.
We may obtain business contact information from publicly available sources where this is lawful and appropriate. The fact that information is publicly available does not automatically mean we can use it for marketing. We will consider the source of the information, the intended use and the relevant legal requirements.
Where we obtain personal information from another source and act as the data controller, we will provide the privacy information required by law, subject to any applicable exceptions. Where we act as a processor, responsibility for providing privacy information will generally rest with the client as controller, although we will provide reasonable assistance where required.
We use personal information where we have a lawful basis and a clear purpose for doing so.
Depending on the circumstances, we may use it to:
We will consider the purpose for which information was collected before using it for another purpose. Where required by law, we will inform you before using your information for a new purpose.
Under data protection law, we must have a lawful basis for processing personal information. The basis we rely on depends on the purpose and circumstances of the processing.
We may process information where it is necessary to enter into or perform a contract with you. This includes preparing for an order, managing your account, providing our services and communicating with you about work you have commissioned.
We may process information where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.
Our legitimate interests may include responding to business enquiries, managing customer relationships, maintaining business records, improving our services, protecting our business and undertaking relevant business-to-business marketing where permitted by law.
We consider whether the processing is necessary, proportionate and fair in the circumstances. Where we rely on legitimate interests, you have the right to object in certain circumstances.
Legitimate interests under data protection law do not, by themselves, permit marketing activity that would otherwise breach the rules under PECR.
We may process and retain information where necessary to comply with legal obligations, including applicable accounting, tax and other statutory requirements.
Where consent is the appropriate legal basis, we will ask for it clearly and explain what you are agreeing to. You can withdraw your consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
Enquiring, visiting our website or placing an order does not automatically mean that you have consented to receive marketing.
Where we rely on another lawful basis, we will not describe that processing as consent.
We may contact prospective and existing business customers about our services, including leaflet distribution, direct mail, printing and related campaign support.
The rules that apply depend on the recipient, the information being used and the method of communication.
We will send electronic marketing only where the applicable legal requirements are met.
Under PECR, you can generally send unsolicited marketing emails and texts to corporate subscribers, such as limited companies, without consent under the electronic marketing rules. However, we must identify ourselves appropriately and provide a valid opt-out option.
Sole traders and certain partnerships are treated as individual subscribers. Marketing emails and texts to these recipients generally require consent or a valid exception, such as the products and services soft opt-in, where all legal conditions are met.
We will not assume that a publicly available email address permits us to send marketing.
We may use telephone calls or post for relevant business communications where permitted by law. We will comply with applicable marketing restrictions, including relevant objections and preference services where required.
You can ask us to stop sending promotional marketing by using the unsubscribe link provided in our marketing emails or by contacting us at info@mrflyer.co.uk.
We will respect valid marketing objections and unsubscribe requests. We may retain a limited record of your request where necessary to ensure that we do not contact you again for the same marketing purpose.
We may continue to send necessary communications about existing orders, payments, contracts or other service matters. These communications will not be used to disguise promotional marketing as routine administration.
Our services may involve processing personal information supplied by clients for direct mail, leaflet distribution and related campaigns.
Where we receive names, addresses or other personal information to prepare and deliver a campaign, we will use that information for the agreed service and in accordance with our contractual obligations and applicable data protection law.
Unless otherwise agreed and lawfully authorised, we will not sell a client’s mailing list, use it for our own marketing or use it for an unrelated purpose.
Clients are responsible for establishing an appropriate lawful basis for their campaign, ensuring they are entitled to provide the data to us and meeting their obligations to provide privacy information and comply with applicable marketing rules.
We will take responsibility for the processing activities we carry out and meet the data protection obligations that apply to us in our role as controller or processor.
Where we act as a processor, we will follow the client’s documented instructions, apply appropriate security measures, use authorised subprocessors and provide assistance with data protection requests and other obligations where required by law and our agreement.
We may use authorised suppliers or subcontractors to support printing, mailing, fulfilment, delivery or other agreed campaign activities. Where they process personal information on our behalf, we will put appropriate contractual and security arrangements in place.
We will apply appropriate safeguards to campaign information and arrange for its return or secure deletion in accordance with the relevant agreement, our retention arrangements and applicable law.
If we become aware of a personal data breach affecting information we process, we will follow the incident management and notification requirements that apply to our role and the circumstances.
We understand that artwork, flyers and other printed materials may contain commercially sensitive information or content that has not yet been made public.
Placing an order does not automatically give us unrestricted permission to use your artwork, designs or printed materials for our own promotion.
We may wish to display examples of completed work on our website, social media, in our offices or in sales materials to demonstrate our services. Where we do so, we will ensure that we have the necessary permission, licence or other appropriate legal authority.
Permission to use artwork and the lawful basis for processing any personal information appearing in it are separate matters. We will consider both where relevant.
We will take particular care where materials contain personal information, confidential information or details of an unpublished campaign.
If you have questions or concerns about the use of your materials, please get in touch with us at info@mrflyer.co.uk.
We do not sell personal information to third parties.
We may share personal information where necessary with:
Where a supplier processes personal information on our behalf, we will put appropriate contractual safeguards in place. Where an organisation acts as an independent data controller, it will be responsible for its own processing activities.
We will share only the information reasonably necessary for the relevant purpose and will take appropriate steps to protect it.
We may store personal information in our business systems, email services, document management systems, accounting software and other applications used to operate our business.
Depending on the services we currently use, these may include third-party providers supporting electronic signatures, payment collection, customer communications, and business administration.
The providers we use may change over time. We will assess relevant suppliers according to the services they provide, the information involved and the safeguards available.
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration, disclosure or destruction. Depending on the system and the risks involved, these measures may include access controls, authentication, encryption, staff permissions, secure transfer arrangements and appropriate storage controls.
Access to personal information should be limited to people who need it for their work or an authorised business purpose.
No method of electronic transmission or storage can be guaranteed to be completely secure. We nevertheless take appropriate steps to protect the information entrusted to us and to respond to security incidents in accordance with our legal obligations.
Some service providers may store or process personal information outside the United Kingdom. Whether this applies will depend on the providers and services used for the relevant activity.
Where personal information is transferred internationally, we will ensure that the transfer is permitted under applicable data protection law and that any required safeguards are in place.
Depending on the circumstances, these safeguards may include an applicable adequacy decision or an approved transfer mechanism, together with any additional measures required by law.
If you would like further information about a relevant international transfer and the safeguards that apply, please get in touch with us at info@mrflyer.co.uk.
We retain personal information for as long as it is reasonably necessary for the purpose for which it was collected, taking account of our legal obligations, contractual requirements, business needs and the need to establish or defend legal claims.
Different types of information may be retained for different periods.
We may retain enquiry and quotation information while we are dealing with your request and for a further period where necessary to manage follow-up, maintain business records or deal with potential disputes.
We retain relevant customer and order information for the duration of the relationship and for any further period required for accounting, tax, legal or dispute resolution purposes.
We retain marketing information while it remains appropriate to contact you and in accordance with your preferences and the applicable marketing rules.
Where necessary, we may retain limited suppression records to ensure that marketing objections and unsubscribe requests continue to be respected.
We retain mailing lists and campaign data in accordance with the relevant service agreement, client instructions and operational requirements. When the information is no longer needed for the agreed purpose, we will arrange for its return or secure deletion, subject to any applicable legal obligation or other lawful reason for retention.
We may retain information for longer where necessary to comply with a legal obligation, establish or defend a legal claim, investigate an incident or demonstrate compliance with applicable law.
When personal information is no longer required, we will take appropriate steps to delete it securely or anonymise it where appropriate.
Our retention arrangements should be reviewed periodically to ensure that information is not kept for longer than necessary.
Our website may use cookies and similar technologies to support its operation and, where applicable, understand website performance or improve the visitor experience.
Some cookies and technologies are strictly necessary for the website or an online service you request. Others, including certain analytics and advertising technologies, may require your consent before they are used.
Where consent is required, we will seek it through our cookie management mechanism before using the relevant technologies. You can change your preferences through the available cookie settings.
The information collected may include device identifiers, IP addresses, browsing activity and details of how visitors interact with our website. Depending on the technology and the information involved, this may constitute personal data.
The cookies and technologies in use, their purposes, providers and retention periods should be explained in our cookie notice or cookie settings. These details will depend on the technologies actually operating on the website.
Turning off certain cookies may affect how parts of the website function.
Under applicable data protection law, you may have the right to:
Access your information. Ask us for a copy of the personal information we hold about you.
Correct your information. Ask us to correct information that is inaccurate or incomplete.
Request erasure. Ask us to delete your personal information where the law gives you that right.
Restrict processing. Ask us to limit how we use your information in certain circumstances.
Object to processing. Object to processing based on legitimate interests where the relevant legal conditions apply. You have an absolute right to object to the use of your personal information for direct marketing.
Data portability. Request certain information in a commonly used, machine-readable format where the right applies.
Withdraw consent. Where we rely on your consent, you can withdraw it at any time.
These rights are subject to legal conditions and exceptions. For example, we may need to retain certain information to meet a legal obligation or establish, exercise or defend legal claims.
To exercise your rights, contact us at info@mrflyer.co.uk. We may ask for information to verify your identity where reasonably necessary to protect your personal information.
We will respond within the time limit required by law, normally one month after receiving your request. Where the law permits an extension, for example because a request is complex or we receive several requests, we will explain this within the applicable time limit.
We will not charge a fee for a standard request unless the law permits us to do so.
If we cannot comply with a request, we will explain our decision where required by law.
If you have concerns about how we use your personal information, please get in touch with us first at info@mrflyer.co.uk. We will consider your concerns and respond appropriately.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
Further information about your rights and how to make a complaint is available at:
https://ico.org.uk/make-a-complaint/
Our website may contain links to other websites, including partner organisations and service providers.
When you follow an external link, the privacy policy and practices of that organisation will apply to its website and services. We are not responsible for how other organisations handle personal information, so we recommend reviewing their privacy information before submitting any details.
We may update this Privacy Policy from time to time to reflect changes in our services, the way we handle personal information or applicable law.
The latest version will be published on this page, together with the date it was last updated. Where appropriate, we will notify affected individuals of significant changes.
If you have a question about this Privacy Policy, wish to exercise your data protection rights or have a concern about how your information is handled, please contact:
Mr Flyer - A trading name of Flow Solutions Group Limited
Email: info@mrflyer.co.uk
Please use this email address for privacy enquiries and requests relating to personal information.
