Privacy Policy

Lynch I.E.I. Limited
Effective date: 5 September 2025

This Privacy Policy explains how Lynch I.E.I. Limited (“Lynch IEI“, “we“, “us“, “our“) collects, uses, shares and protects personal information in connection with our website https://lynchiei.com/ and our business operations.

We are the “controller” of your personal information for the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018). For cookie‑related technologies, the Privacy and Electronic Communications Regulations (PECR) also apply.


1) Who we are (Controller)

Lynch I.E.I. Limited
Barnet Hill, Barnet EN5 5YS, United Kingdom
Tel: +44 20 8449 1105
Email: info@lynchiei.com
Website: https://lynchiei.com/

We have not appointed a Data Protection Officer. For any privacy questions or to exercise your rights, please contact us using the details above.

2) What we collect

We collect and process the following categories of personal information:

  • Contact & business details: name, job title, company, email, phone number, and the content of your message when you contact us (e.g., through the site or by email/phone).
  • Transactional and project information: data needed to propose, deliver and manage projects and contracts with you/your organisation.
  • Website and device data: IP address, browser/user‑agent, pages viewed, timestamps, and similar diagnostic/log information generated by our web servers and security tools.
  • Cookies and similar technologies: subject to your choices, we may set or read cookies for essential site functions and, where used, basic analytics. See Section 9 (Cookies).

We do not intentionally collect special category data (e.g., health, biometrics) via our website and we do not offer services to children.

3) How we obtain your data

  • Directly from you (web forms, emails, phone calls, meetings).
  • From your organisation and its representatives in the course of a contract or tender.
  • Automatically from your device when you use our website (see Cookies and logs).

4) Why we use your data (purposes & lawful bases)

We use your information only when we have a lawful basis under the UK GDPR:

  • Responding to enquiries and providing proposals — to take steps at your request prior to entering a contract (contract / legitimate interests in running our business).
  • Providing and managing projects and services — including scheduling work, site access coordination, H&S documentation, and invoicing (contract, legal obligation).
  • Business administration & records — accounting, tax, compliance, and audit (legal obligation, legitimate interests).
  • Website operation, safety and security — maintaining and improving our site, preventing fraud and misuse, and ensuring availability (legitimate interests).
  • Legal claims and compliance — establishing, exercising or defending legal claims and responding to lawful requests (legal obligation, legitimate interests).
  • Marketing to business contacts — limited B2B outreach related to our services; you can object at any time (legitimate interests under UK GDPR; direct marketing rules under PECR apply).

We do not use your data for automated decision‑making that produces legal or similarly significant effects.

5) Sharing your data

We share personal information only with:

  • Service providers (processors) that host our website and IT systems, provide security/backup, anti‑spam, or professional services (e.g., accountancy, legal). They act on our instructions and are bound by confidentiality and data protection terms.
  • Business partners and principal contractors where necessary to deliver a project and only on a need‑to‑know basis.
  • Authorities and regulators where required by law or to protect our rights, users, or the public.

We do not sell your personal information.

6) International transfers

We generally store data in the UK. If we transfer personal information outside the UK (for example, to reputable cloud service providers), we will ensure an appropriate safeguard is in place, such as:

  • a UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses; or
  • transfers to US organisations certified under the UK‑US Data Bridge (the UK extension to the EU‑US Data Privacy Framework).

7) How long we keep your data (retention)

We keep personal information only for as long as needed for the purposes set out above:

  • Enquiries (no contract formed): typically up to 24 months after our last interaction.
  • Contract/project files and related business records: typically 7 years after project completion or as required by law (e.g., tax).
  • Website logs and security records: typically up to 12 months, unless needed longer for security or investigations.

Actual periods may vary based on legal, regulatory, operational and safety requirements.

8) Your rights

Subject to legal limits, you have the right to access, rectify, erase, restrict or object to processing, and to data portability. You also have the right to withdraw consent where we rely on consent (withdrawing does not affect prior lawful processing).

To exercise your rights, contact info@lynchiei.com. We may need to verify your identity.

If you are unhappy with how we handle your data, you can contact the Information Commissioner’s Office (ICO):
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, UK.
Helpline: 0303 123 1113 • Online: ico.org.uk/make-a-complaint.

EEA/Swiss visitors: We are UK‑based and primarily serve the UK market. If we deliberately offer services to you in the EEA/Switzerland or monitor your behaviour there, EU/EEA data protection rules may also apply in addition to UK law.

9) Cookies and similar technologies

We use cookies only as necessary to operate the site and, where implemented, to understand basic site usage. Under PECR, we can place strictly necessary cookies without consent, but for any non‑essential cookies (e.g., analytics) we will seek your consent and provide clear information about their purposes. You can change your cookie choices at any time via your browser settings and (where available) our cookie banner/settings.

Cookie categories we may use

  • Strictly necessary (e.g., security, load‑balancing, form submission).
  • Analytics/measurement (e.g., understanding aggregate site traffic) — only with your consent.
  • Functionality (remembering choices) — only with your consent if non‑essential.

If you deploy analytics or other third‑party tools in future, please update this section with the provider name, purpose, cookie names, and lifetimes.

10) Security

We implement appropriate technical and organisational measures designed to protect personal information (including access controls, encryption in transit where appropriate, least‑privilege access, logging/monitoring, vendor due diligence and staff awareness). No system is 100% secure; we maintain and review controls to reduce risk and meet UK GDPR security expectations.

11) Third‑party links

Our website may contain links to third‑party sites. Those sites have their own privacy policies and we are not responsible for their content or practices.

12) Changes to this Policy

We may update this Privacy Policy from time to time. The “Effective date” above shows when it was last revised. Significant changes will be highlighted on our website.


Contact us

Questions about this Policy or your data?
Lynch I.E.I. Limited
Barnet Hill, Barnet EN5 5YS, United Kingdom
+44 20 8449 1105info@lynchiei.com