SMYLYX LTD (“we”, “us”, “our”) is a company registered in England & Wales under company number 10325550, with its registered office at 1st Floor Prospect House, Rouen Road, Norwich, Norfolk, NR1 1RE.
This policy explains what personal data we collect through this website and in the course of providing our services, why we collect it, and what rights you have. We are the data controller for that personal data for the purposes of the UK GDPR and the Data Protection Act 2018.
What we collect
When you contact us. If you complete an enquiry form we collect your name, email address, and anything else you choose to tell us in the message — typically your organisation and a description of your project.
When you buy from us. To fulfil an order we collect your name, email address and billing address. Card details are never seen or stored by us: payments are processed by our payment provider, and we receive only confirmation of the outcome and a transaction reference.
When you use the site. Our hosting provider records standard server logs, including IP address, browser type and pages requested, for security and diagnostic purposes.
Why we use it, and our lawful basis
- To respond to your enquiry — our legitimate interest in answering people who contact us, and steps taken at your request prior to entering a contract.
- To provide the services or products you have ordered — performance of our contract with you.
- To keep accounting and tax records — our legal obligations under UK tax law.
- To keep the site secure and working — our legitimate interest in operating a secure service.
How long we keep it
Enquiries that do not lead to work are deleted within 24 months. Records relating to a client engagement, including invoices, are kept for seven years to meet statutory accounting and limitation requirements. Server logs are retained for a short period by our hosting provider.
Who we share it with
We do not sell personal data and we do not share it for marketing purposes. We share it only with the service providers we need in order to operate — our website host, our email provider, our payment provider and our accountants — each acting under contract and only on our instructions. We may also disclose data where we are legally required to do so.
Transfers outside the UK
Some of our providers process data outside the UK. Where that happens we rely on UK adequacy regulations or on the International Data Transfer Agreement / Addendum, together with appropriate safeguards.
Your rights
You have the right to access a copy of your personal data, to have inaccurate data corrected, to have data erased in certain circumstances, to restrict or object to processing, and to data portability. Where processing is based on consent you may withdraw it at any time. To exercise any of these rights, email welcome@smylyx.online. We will respond within one month.
If you are unhappy with how we have handled your data you may complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We would ask that you raise it with us first so we have the chance to put it right.
Cookies
See our Cookie Policy for what this site stores on your device.
Changes
If we change this policy we will update the date shown below. Material changes affecting existing clients will be notified by email.