At Flux, we value your privacy and are committed to safeguarding the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website, use our services, or interact with us as a shopper or vendor partner.

Flux is operated by FLUXAI GROUP HOLDINGS LTD ("Flux", "we", "us"), the data controller responsible for your information. For any privacy query, contact us at chat@withflux.co.uk .

1. Information We Collect

From shoppers:

• Negotiation activity: the conversations that take place through the Flux widget on vendor product pages, including offers made and deals agreed.

• Discount codes generated through successful negotiations.

• Basic usage data such as IP address, device type, browser, and the time and date of your interaction.

• Device and security signals, including a device fingerprint and the referring page. Because Flux involves discounts and real money, we use these signals to recognise repeat sessions and to detect and prevent fraud, abuse, and attempts to game or manipulate negotiations — protecting both vendors and genuine shoppers.

• Email address — voluntarily provided when a deal is agreed, used solely to (a) deliver your discount code, and (b) where you sign in with Flux ID, link your deals across sessions so they can be honoured together at checkout. We do not use your email for marketing and we do not sell it.

• Account identifiers where you choose to sign in with Flux ID, including via a third-party sign-in provider — limited to what is needed to recognise you across sessions.

• Order information including order number, products purchased, and transaction value, received via Shopify webhook when a shopper completes a purchase using a Flux discount code.

From AI shopping agents: Where a shopper uses an AI assistant to negotiate on their behalf, we process the negotiation activity and the authentication identifiers needed to issue a valid discount code, within the same vendor rules that apply to any shopper.

From vendor partners:

• Business information: store name, website domain, contact name, and work email address provided during the application process.

• Pricing rules: floor prices, maximum discount limits, product names, and negotiation preferences you set for your store. This information is stored securely and is never shared with shoppers.

• Platform and traffic information provided during onboarding.

• Campaign details including start and end dates where applicable.

From all users: Usage data (pages viewed, time spent) and cookies / similar technologies used to enhance your experience and understand how our site is used.

2. How We Use Your Information

We use the information we collect to:

• Operate the Flux negotiation widget and deliver conversations between shoppers (or the AI agents acting for them) and vendor stores. To do this, conversation content is processed by trusted third-party AI model providers that power the negotiation.

• Generate and validate unique discount codes when deals are agreed.

• Manage vendor partner accounts, pricing rules, and campaign settings, and review vendor applications.
  negotiation.

• Detect, prevent, and investigate fraud, abuse, and attempts to game or manipulate negotiations, and otherwise keep the service and our vendors' pricing secure.

• Analyse usage to improve the performance and quality of our service.

• Communicate with vendor partners about their account, setup, and service updates.

• Send discount codes to shoppers who request email delivery, and track completed orders where a Flux code was used, for commission calculation.

• Comply with legal obligations and enforce our terms and policies.

Negotiation is AI-assisted, but we do not make decisions that produce legal or similarly significant effects about you solely by automated means without a route to human review.

Legal bases. Where UK/EU data protection law applies, we rely on: performance of a contract (delivering deals and codes you request); our legitimate interests (operating, securing, and improving the service, and preventing fraud and abuse); consent (where required, e.g. certain cookies); and compliance with legal obligations.

3. Sharing of Your Information

We do not sell your personal data. We share information only with trusted parties that help us operate Flux, under appropriate confidentiality and data-processing terms, including:

• Hosting and database infrastructure (e.g. our cloud hosting and database providers).

• AI model providers that process negotiation content to generate responses.

• Payment and billing providers used to collect commission and process transactions.

• Email delivery providers used to send discount codes and account communications.

• Authentication providers where you choose to sign in.

• E-commerce platform providers (e.g. Shopify) that supply order data and mint discount codes.

A current list of our sub-processors is available on request at chat@withflux.co.uk . We may also disclose information for legal compliance, or in connection with a merger, acquisition, or sale of assets (subject to the same privacy commitments).

Vendor stores may see aggregated or anonymised data about negotiation outcomes on their store, but do not receive personal shopper information.

4. Vendor Pricing Rules — Confidentiality

Vendor pricing rules — floor prices, maximum discounts, and negotiation style — are strictly confidential commercial information. They are stored securely, never displayed to shoppers, and never shared with third parties outside the operation of the Flux service.

5. International Data Transfers

Some of our service providers operate outside the UK and EEA. Where personal data is transferred internationally, we rely on appropriate safeguards — such as adequacy decisions or standard contractual clauses / the UK International Data Transfer Agreement — so that your information remains protected.

6. Data Retention

We retain personal information only for as long as necessary for the purpose it was collected. Negotiation activity and security signals are kept while needed to operate the service, honour deals, and prevent fraud and abuse; order and commission records are kept for as long as required to meet our legal, accounting, and tax obligations (in the UK, typically six years). We review the data we hold, delete or anonymise it when it is no longer needed, and will delete your data on request where we are not legally required to retain it.

7. Data Security

We implement appropriate technical and organisational measures to protect your information. All data is transmitted over encrypted connections. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

You have the right to access, correct, delete, or port your data; to object to or restrict certain processing; and, where processing is based on consent, to withdraw it at any time. To exercise any of these rights, contact chat@withflux.co.uk . If you are in the UK, you also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

We use cookies and similar technologies and you can control them via your browser; disabling them may affect certain features.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review the privacy policies of any external sites you visit.

11. Children's Privacy

Flux does not knowingly collect personal information from individuals under the age of 13. If we become aware that such data has been provided, we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the effective date clearly stated. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

FLUXAI GROUP HOLDINGS LTD, chat@withflux.co.uk

Last updated: 31/05/2026