Privacy policy

LynxLab is the data controller for the personal data described here. That means we decide how it is used and we are responsible for it.

• Trading name: LynxLab (lynxlab.co.uk)
• Email: support@lynxlab.co.uk

When you place an order

• Name, delivery address and email address
• Phone number, if you give one
• What you ordered, prices and order history
• Payment status and a payment reference

We never see or store your full card details. Card and wallet payments are handled by our payment provider on their secure pages.

When you email us

• Your email address and whatever you choose to tell us

When you leave a review

• Your name, email address, star rating and review
• Only your name, rating and review are shown publicly. Never your email.

When you browse

• Standard technical data your browser sends, such as IP address and browser type. Our hosting provider uses this to deliver the site and keep it secure.

UK GDPR says we need a lawful reason for each use. Here is ours:

• To process and deliver your order and handle returns. Reason: performing our contract with you.
• To answer your emails and give support. Reason: our legitimate interest in helping customers.
• To keep tax and accounting records. Reason: legal obligation.
• To prevent fraud and keep the site secure. Reason: our legitimate interest.
• To send news and offers, only if you tick the box at checkout. Reason: your consent. You can withdraw it at any time.
• To publish your review, if you submit one. Reason: your consent.

We do not sell your data. We do not use it for automated decisions about you.

• We only send them if you opt in.
• Every email has an unsubscribe link.
• Or email support@lynxlab.co.uk and we will stop.
• Order and delivery emails still come, as they are part of your order.

Only the companies we need to run the shop, and only what they need:

• Our payment provider to take your payment securely. Your card details go straight to them and are never stored on our systems.
• Royal Mail to deliver your parcel. They get your name and address.
• Website hosting and database providers that store our order records.
• Email providers that send and store our emails.
• Analytics and advertising providers receive the pages you viewed and, when you place an order, the order value and a scrambled (hashed) copy of your contact details, so they can tell us which adverts led to an order. We never send them the product you bought.
• Professional advisers, such as our accountant, where needed.
• Police, HMRC or regulators, only if the law requires it.

Each one must keep your data secure and use it only for the job we give them.

Some of our providers may process data outside the UK, including in the USA. When this happens, the transfer is protected by UK-approved safeguards, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Agreement.

• Orders and payment records: 6 years, as UK tax law requires.
• Support emails: up to 2 years after your last message.
• Reviews: while the review is shown on the site, or until you ask us to remove it.
• Marketing list: until you unsubscribe.

We keep this minimal.

• Your basket is saved in your own browser (local storage) so it is still there if you leave and come back. It never leaves your device until you check out.
• Analytics and advertising cookies count visits, show us which pages people use, and measure which adverts lead to an order. They do not tell us your name or your address.
• Our payment provider may set its own cookies on its checkout pages to process payment and prevent fraud.

We do not sell your data. You can block these cookies in your browser settings or by using private browsing.

• The whole site runs over an encrypted (HTTPS) connection.
• Order records are stored in a secured database with restricted access.
• Only authorised staff can see customer data.

Under UK GDPR you have the right to:

• Access a copy of the data we hold on you
• Correct anything that is wrong
• Delete your data, where we do not need to keep it by law
• Object to or restrict how we use it
• Move your data to another company (portability)
• Withdraw consent at any time, for marketing or reviews

Email support@lynxlab.co.uk. It is free, and we reply within one month. We may ask you to confirm who you are first.

Please talk to us first at support@lynxlab.co.uk. If you are still unhappy, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Our site and products are for adults aged 18 or over. We do not knowingly collect data from anyone under 18.

If we change how we use your data, we will update this page and the date at the top. For big changes, we will email customers who are affected.