Your privacy

Privacy Policy

Last updated: 22 October 2026

At Flamingo PA, I respect your privacy and take care to handle personal information responsibly. This policy explains what information I collect through my website, how I use it, and your rights.

1. Who I am

Flamingo PA is the trading name of Mrs Rebecca Lorraine Orpin, a Virtual Assistant and Founder’s Assistant based in Hurstpierpoint, West Sussex. I am responsible for the personal information collected through this website.

Contact: becky@flamingopa.com

ICO registration: ZB394879. View my registration on the ICO public register.

2. Information I collect

If you contact me through my website, I may collect:

  • Your name and email address.
  • Your job title and business name, if you choose to provide them.
  • The details of your enquiry and any other personal information you include in your message.

I may also receive personal information when you contact me directly by email or engage me to provide services.

When you visit my website, my hosting, security and font providers process certain technical information needed to deliver the website to you. This includes your IP address, browser and device information, and the pages and files your browser requests.

Please avoid including sensitive personal information in a website enquiry unless it is necessary.

3. How I use your information

I use personal information to:

  • Respond to enquiries and discuss potential work.
  • Provide and manage my Virtual Assistant services.
  • Communicate with clients and manage contracts, invoices and payments.
  • Maintain appropriate business and financial records.
  • Deliver my website and keep it secure.
  • Meet legal and regulatory obligations.

I only use personal information where there is an appropriate legal basis. These are: taking steps at your request before entering into a contract (for example, replying to an enquiry); performing a contract with a client; meeting a legal obligation (such as keeping financial records); and my legitimate interests in running my business and keeping my website secure, where these do not override your rights.

4. How the website enquiry form works

When you complete the enquiry form and select “Send me an enquiry”, your email application opens with a message addressed to becky@flamingopa.com.

You must send the email yourself. The form does not submit your enquiry to a website server or store it in a website database. If you do not send the email, I do not receive it.

Once you send the email, it is processed by your email provider and mine (Google Workspace). I then handle it in accordance with this policy.

5. Website hosting, security and technical services

My website is hosted using Lovable. Cloudflare provides website delivery and security, and processes technical information such as IP addresses, browser details and security-related information to deliver and protect the website.

Google Fonts is used to display the website’s typography. When your browser requests fonts from Google, Google receives your IP address and browser information.

I do not use visitor analytics, Google Analytics, advertising pixels or embedded social media feeds on the website. Links to my LinkedIn, Instagram and Facebook pages are ordinary links; those services only receive information if you choose to visit them.

Some of these providers may process information outside the UK. Where this happens, the transfer should be covered by an appropriate legal safeguard, such as UK adequacy regulations or the UK International Data Transfer Addendum.

6. Cookies and similar technologies

The website does not use advertising or analytics cookies. The following are set when you visit:

  • __cf_bm (Cloudflare, about 30 minutes): helps protect the website against automated and malicious traffic. This is strictly necessary for security.
  • __dpl (Lovable, about 1 day): a cookie set by my hosting platform when the website is delivered. I have asked Lovable to confirm its exact purpose and will update this policy once confirmed.
  • Scroll position (your browser’s session storage, cleared when you close the tab): remembers where you were on a page when you go back. This is needed for the website to work as expected.

The Cloudflare security cookie and scroll-position storage are used to help secure and operate the website. I have asked Lovable to confirm the purpose of the __dpl cookie and will update this policy if needed. If I introduce any non-essential cookies or similar technologies in future, I will obtain consent where required by law and update this policy.

7. How long I keep information

I keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, taking account of legal, accounting, contractual and business requirements.

For client work, my Terms of Business state that confidential information will be deleted six months after the agreement ends, and address the return or deletion of client personal data on termination, subject to legal retention requirements.

Some records, such as invoices and financial records, need to be kept for longer where required by law.

Website hosting and security providers may keep technical logs under their own retention arrangements.

8. When information may be shared

I do not sell personal information. Information may be processed by service providers where necessary to operate my business or website, including:

  • Lovable, for website hosting.
  • Cloudflare, for website delivery and security.
  • Google, for website fonts and for my business email (Google Workspace).
  • Relevant professional advisers or authorities, where necessary to meet legal obligations or protect legal rights.

I only share information where there is an appropriate reason to do so.

9. Testimonials and public recommendations

My website displays testimonials, including names and job titles, which are published with permission.

Some recommendations may also be publicly available on LinkedIn. Where I use a public recommendation, I take care to respect the original context and permissions.

If you have a question or concern about a testimonial featuring you, or would like it removed, please contact me at becky@flamingopa.com.

10. Your privacy rights

Under UK data protection law, you have the right to:

  • Request access to the personal information I hold about you.
  • Ask for inaccurate information to be corrected.
  • Request deletion of your information in certain circumstances.
  • Ask me to restrict how I use your information.
  • Object to certain types of processing.
  • Request a copy of information you provided to me in a portable format, where the right applies.
  • Withdraw consent where processing is based on consent.

These rights are subject to legal conditions and exceptions. To exercise a right or ask a question about your information, email becky@flamingopa.com. I may need to verify your identity before responding, and I will normally reply within one month.

11. Complaints

If you have a concern about how I handle your personal information, please contact me first so I can try to resolve it.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint.

12. Changes to this policy

I may update this policy from time to time to reflect changes to my business, website or legal requirements. The latest version will always be published on this page.

If you have any questions about this policy, please email becky@flamingopa.com.