Privacy Policy
Privacy Policy 2024
Your privacy is important to us. When we process your personal data we comply with the UK GDPR and the Data Protection Act 2018, together with any other applicable data protection and privacy legislation.
Your personal data includes all the information we hold that identifies you or is about you. More information about the types of personal data we process about you is set out below.
Everything we do with your personal data counts as processing it, including collecting, storing, amending, transferring and deleting it.
This privacy policy provides information about the personal data we process about you, why we process it and how we process it. It applies to users of our Lynx GP Calculator App (“App”), our website visitors and our other business contacts.
Our responsibilities
Lynx Purchasing Limited (a company registered in England with registered company number 04786086 with registered address at Parkhill Studio, Walton Road, Wetherby LS22 5DZ) is the controller of the personal data you provide.
If you have any questions or concerns about the ways in which we process your personal data, please contact us at hello@lynxpurchasing.co.uk.
What data do we process about you?
- Users of the App
All of our sales are business to business, so if you are using our App the personal data that we process about you will be limited to your name, the postcode of the organisation for which you work and your email address.
- Website visitors
If you visit our website at www.lynxpurchasing.co.uk we may process your personal data if you submit a message to us using our “Contact us” form. That personal data will be limited to your full name, the name of the organisation for which you work, your phone number and email address and any other personal data you may choose to include in your message to us.
We may also process your name and email address if you download or request any of the resources and materials available on our website.
- Business contacts
If you work for one of our clients or suppliers or are one of our business contacts, we may process your name, the details of the organisation for which you work, information about your job role, your email address and telephone number.
All other information that we process, such as payment details and transaction / order data will relate to the organisation for which you work and is therefore not personal data.
We do not collect any special categories of data about you. Special categories of data include information revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data or information about your sexual orientation.
Why do we process your personal data?
- Users of the App
We process your personal data to the extent necessary to enable you to use and benefit from the App and for us to be able to provide the calculations you have requested.
We process your data on the grounds of our legitimate interests in ensuring you can use our App.
- Website visitors
We will process your personal data in order to provide you with the materials and resources you have requested and/or so we can respond to any messages you send us using our “contact us” form. We rely on our legitimate interests in doing so.
- Business contacts
We process your personal data in order to manage and maintain our relationship with you. We rely on our legitimate interests in doing so.
Marketing
We will send marketing communications to you if you have asked us to do so. You will have the opportunity to unsubscribe in all emails that we send to you.
We may also send marketing to you on the grounds of our legitimate interests if you download our App. We are entitled to do so because, by downloading our App, you become one of our customers. You will have the opportunity to opt out of marketing at the point you register for the App, and in each marketing communication that we send to you.
Our collection of your personal data
We use different methods to collect data from and about you including through:
- Direct interactions
You may give us your personal data by filling in forms on our website or the App or by corresponding with us by post, phone, email or otherwise.
- Automated technologies or interactions
As you interact with our website, we may automatically collect personal data about you. You can find out more information in our cookie policy available here.
Who will receive your personal data?
Your personal data is only transferred to the extent that this is necessary. Recipients of your personal data may include:
- third party consultants who provide marketing and similar services to us;
- third party marketing platform providers;
- legal advisers to the extent they need to see your personal data to provide us with legal advice; and
- third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
Our marketing platform provider is located in the US and our marketing database is therefore accessible from the US. We have entered into the provider’s standard terms and conditions which is certified with the EU-US Data Privacy Framework (“DPF”) and the UK Extension to the EU-US DPF which means that appropriate safeguards are in place in respect of the transfer of data.
How long will we keep your personal data?
- Users of the App and website visitors
If you are in receipt of marketing communications from us we will continue to process your personal data until you opt out of receiving such communications, at which point your data will be processed solely for the purpose of maintaining an up to date marketing suppression list unless we require it for other purposes.
We will also delete your data if requested by you, provided that we no longer require your information in accordance with data protection legislation.
We will continue to monitor our processing of personal data and will delete your information if we determine we no longer require it, including if you have ceased interacting with our marketing communications.
- Business contacts
We will retain your personal data for no longer than 7 years from the date our relationship with the organisation for which you work ceases, which is usually the date our contract with your organisation terminates or expires. If we are notified that you no longer work for such organisation we will delete your personal data no later than the end of the calendar year in which we are notified.
Your information will be kept securely at all times. Following the end of the retention period your personal data will be permanently deleted or destroyed.
What are your rights?
You benefit from a number of rights in respect of the personal data we hold about you. We have summarised your rights below, and more information is available from the Information Commissioner’s Office website (https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/). These rights apply for the period in which we process your data. There are certain caveats and exemptions to those rights which mean that in some circumstances you may not be entitled to exercise them, if we believe that is the case upon receipt of a request from you we will let you know.
- Access to your data
You have the right to ask us to confirm that we process your personal data, as well as access to and copies of your personal data. You can also ask us to provide a range of information, although most of that information corresponds to the information set out in this fair processing notice.
- Rectification of your data
If you believe personal data we hold about you is inaccurate or incomplete, you can ask us to rectify that information.
- Right to be forgotten
In some circumstances, you have the right to ask us to delete personal data we hold about you.
- Right to restrict processing
In some circumstances you are entitled to ask us to suppress processing of your personal data. This means we will stop actively processing your personal data but we do not have to delete it.
- Data portability
You have the right to ask us to provide your personal data in a structured, commonly used and machine-readable format so that you are able to transmit the personal data to another data controller.
- Right to object
You are entitled to object to us processing your personal data:
- if the processing is based on legitimate interests or performance of a task in the public interest or exercise of official authority;
- for direct marketing purposes (including profiling); and/or
- for the purposes of scientific or historical research and statistics.
We do not intend to use your personal data for scientific or historical research and statistics.
Automated decision making
Automated decision making means making a decision solely by automated means without any human involvement.
We do not carry out any automated decision making using your personal data.
Your right to complain about our processing
If you think we have processed your personal data unlawfully or that we have not complied with GDPR, please get in touch with us first so we can try to help. You can also report your concerns to the supervisory authority in your jurisdiction. The supervisory authority in the UK is the Information Commissioner’s Office (“ICO”). You can call the ICO on 0303 123 1113 or get in touch via other means, as set out on the ICO website – https://ico.org.uk/concerns/.