Who We Are
This website and the NimbleTel Flow app (“the app”) are operated by ThriveOnz Group UK LTD (“NimbleTel,” “we,” “us”), a company registered in England and Wales (company number 16837242), registered office 86-90 Paul Street, London, EC2A 4NE. We are the controller of your personal data and are registered with the Information Commissioner’s Office (ICO), registration number ZC268899. This policy explains what information we collect, why we collect it, and what rights you have over it.
What We Collect on This Website
We collect only what you give us directly, through the contact form or by emailing us:
- Name and company/telco name
- Work email address
- Market and product interest (Flow or Pipeline)
- Any message content you choose to include
If you join the NimbleTel Flow launch waitlist on our UK plans page, we collect your email address. We use it only to tell you once when the app is available, on the basis of your consent, and we delete it after 12 months or when you ask.
We do not run e-commerce on this site and do not collect payment information. We use standard website analytics to understand traffic patterns; no personally identifying data is sold to third parties.
How We Use Website Information
Information submitted through the contact form is used solely to respond to your inquiry and evaluate a potential partnership. We do not use it for unrelated marketing without your separate consent, and we do not sell or rent it to third parties.
What We Collect in the NimbleTel Flow App
NimbleTel Flow helps you find a UK mobile plan. You can use the finder without an account. If you create a free account, or use the optional features, we collect the following:
- Account details: your email address (or your Sign in with Apple identifier, if you use it). Lawful basis: providing the app to you.
- What you ask the finder, and the answers. Used to answer you. We keep your questions only if you switch on “Save my finder questions”, to improve our advice and send you alerts. Lawful basis: providing the app; your consent for keeping them.
- Your wishlist: what you want from a plan, budget, data, minutes, roaming needs and notes. Lawful basis: your consent.
- Sharing your wishlist with a named partner: only if you tick the box for that partner. Lawful basis: your consent.
- Device and notification details: a push token and app version, only if you allow notifications. Lawful basis: your consent.
- Anonymous use: when you use the finder without an account, a random identifier stored on your device and your IP address, kept for up to two days to limit abuse and protect the service. Lawful basis: legitimate interests.
- A record that a question was asked: which plan was suggested and topic tags such as “roaming”, but not the text, when you have not agreed to save your questions. Lawful basis: legitimate interests (counting use and managing cost).
- Taps on “Get this plan”: the link carries the plan and campaign name, not your identity, so our partner can credit us if you buy. We also keep an anonymous count of these taps (which plan, which screen and the date, with nothing that identifies you) to see which plans people look at, and delete it after 12 months. Lawful basis: legitimate interests.
- Records of your choices: your consents and when you gave them, so we can show what you agreed to. Lawful basis: legitimate interests.
Please don’t type personal details (your name, phone number, address or bank details) into the finder. We filter out obvious personal details before a question is processed.
Plan Finders on Our Website
Our plan finders (UK, Singapore, Malaysia, Cambodia, Australia and the United States) work without an account. This is what we collect when you use one.
- Anonymous counts. We record that a finder was used and the topics chosen, for example a data band, a budget band, needs such as roaming or family lines, which plan or provider page we showed, and whether you clicked through. We do not store the text you type, your name, your email address or your IP address with these counts. Lawful basis: legitimate interests (understanding what people look for and managing cost). We may publish totals, never anything about one person, and we leave out any total smaller than 10.
- Security. A short-lived technical record derived from your IP address, kept for up to two days, limits abuse of the finders. Lawful basis: legitimate interests.
- What you type. The text you type into a finder is sent to our AI service provider in the United States to produce your answer, without your name or contact details, and we do not store it. Please do not type personal details.
Cookies
We use Google Analytics to count visits and finder events. Analytics cookies are off unless you press “Accept analytics” on our banner. If you decline, we do not set analytics cookies, although Google Analytics may still receive basic, non-identifying page signals (Google’s consent mode). You can change your choice at any time with “Cookie settings” at the bottom of every page. We also use Ahrefs Web Analytics, which does not use cookies. Your choice is stored in your browser and is not sent to us.
Notifications
We send two kinds, and you choose each separately: alerts about plans that match what you saved, and offers (marketing). We will not send more than two a week, and not between 21:00 and 08:00 UK time. You can turn either off in the app at any time, and you never need to allow notifications to use the app.
Our Partner and Affiliate Links
When you choose “Get this plan”, you leave the app for our partner’s website. We are paid a commission by our partner if you buy through our link. This does not change the price you pay. Prices and offers shown come from our partner’s website and can change; always check the partner’s page before you buy. Our partner has its own privacy policy for what you do on its site.
Who Receives Your Data
- Service providers (processors) that run the website and app for us: Supabase (database and sign-in; data stored in London, UK), Resend (sends your sign-in code email; EU region, Ireland) and Apple (push notifications).
- An AI service provider (a company based in the United States) that processes the text of your finder questions to produce answers. We send it your recent questions and our plan information, not your name, email or contact details.
- A named partner, only if you agreed to share your wishlist with that partner.
We do not sell your personal data.
Transfers Outside the UK
Our database is in the UK (London) and sign-in emails are sent from the EU (Ireland), which the UK treats as adequate. Our AI service provider processes finder questions in the United States; we rely on the safeguards the law accepts for that transfer, such as the UK International Data Transfer Addendum or the UK-US data bridge, as applies.
Data Retention
- Website contact form submissions: only as long as needed to respond to your inquiry and, where a partnership discussion proceeds, for the duration of that relationship.
- Launch waitlist email addresses: up to 12 months, or until you ask us to remove yours.
- App account and wishlist: until you delete your account, or 24 months after you last use the app, whichever is first.
- Finder history (only if you agreed to save it): 12 months, then it is removed.
- Consent records: kept while your account exists and deleted when you delete your account.
- Notification tokens: until you turn notifications off or delete the app; inactive tokens are removed after 12 months.
- Anonymous finder counts: kept as totals; they contain no personal data. The short-lived technical record used to limit abuse of the finders is deleted within two days.
Your Rights
Depending on your location, you may have rights under UK GDPR, Singapore’s PDPA, or equivalent local law to access, correct, move or request deletion of the information we hold about you, to object to some uses, and to withdraw consent at any time. In the app: Account > Export my data and Delete my account. Otherwise contact us at the address below and we will reply within one month. If you are unhappy with how we handle your data, you can complain to the ICO (ico.org.uk, 0303 123 1113).
Children
The app is for people aged 18 and over. We do not knowingly collect data from children; if you think we have, tell us and we will delete it.
Security
We use encrypted connections, restrict access to named people, and apply row-level security so each app user can see only their own data.
Contact
Questions about this policy or requests regarding your data: connect@nimbletel.com (or connect@thriveonz.co.uk).
Changes to This Policy
We may update this policy as the business grows across new markets or the app changes. Material changes will be reflected with an updated “Last updated” date above, and in the app where they affect app users.