GDPR Information

Last updated: 25 June 2026

Our Commitment to Data Protection

grand-lynx is committed to protecting the privacy and security of your personal information. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Data Controller

grand-lynx acts as the data controller for personal information collected through this website and our services. This means we determine the purposes and means of processing your personal data.

Contact details:

grand-lynx
47 Berkeley Square
London W1J 5AU
[email protected]

Your Rights as a Data Subject

Under the UK GDPR, you have the following rights:

Right to be Informed

You have the right to be informed about how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR notice.

Right of Access

You can request a copy of the personal data we hold about you. We will respond to valid requests within one month.

Right to Rectification

If personal data we hold is inaccurate or incomplete, you have the right to have it corrected.

Right to Erasure

In certain circumstances, you can request that we delete your personal data. This right is not absolute and applies in specific situations, such as when data is no longer necessary for its original purpose.

Right to Restrict Processing

You can ask us to limit how we use your personal data in certain circumstances.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a commonly used format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not currently use automated decision-making or profiling that produces legal or similarly significant effects.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will verify your identity before processing your request. We aim to respond to all legitimate requests within one month. If your request is complex, we will inform you and may take up to three months.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: Where you have given clear consent for us to process your data for a specific purpose
• Contract: Where processing is necessary for a contract we have with you
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights
• Legal obligation: Where we must process data to comply with the law

International Transfers

We primarily store and process data within the United Kingdom. If we transfer data internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Breaches

We have procedures in place to detect, investigate, and report personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

Complaints

If you have concerns about how we handle your personal data, please contact us first so we can address your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: ico.org.uk

Updates to This Notice

We may update this GDPR information from time to time. Any significant changes will be communicated through our website.