GDPR Compliance

Last Updated: September 1, 2026

1. Our Commitment to GDPR

bold-lynx is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This document outlines how we process personal data in accordance with GDPR requirements.

2. Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit a consultation request, you provide explicit consent for us to process your information
• Contractual Necessity: Processing is necessary to provide the consulting services you request
• Legitimate Interests: To improve our services and communicate relevant information

3. Data Controller Information

The data controller responsible for your personal information is:

bold-lynx
118 Whitfield Street
London W1T 5EE
United Kingdom
Email: [email protected]

4. Your Rights Under GDPR

Under GDPR, you have the following rights:

4.1 Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies.

4.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

4.3 Right to Erasure

You have the right to request deletion of your personal data under certain conditions.

4.4 Right to Restrict Processing

You have the right to request restriction of processing your personal data under certain conditions.

4.5 Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you under certain conditions.

4.6 Right to Object

You have the right to object to processing of your personal data under certain conditions.

5. How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with "GDPR Request" in the subject line. We will respond within one month of receiving your request.

6. Data Processing Activities

We process personal data for the following purposes:

• Providing automotive consulting services
• Communicating about consultations and services
• Improving our website and services
• Maintaining records for legal and regulatory compliance

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Consultation records are typically retained for seven years for business and legal purposes.

8. International Data Transfers

Your personal data is processed within the United Kingdom and European Economic Area. If data must be transferred outside these regions, we ensure appropriate safeguards are in place.

9. Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

10. Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

11. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or your local supervisory authority.

ICO Contact:
Website: https://ico.org.uk
Helpline: 0303 123 1113

12. Updates to This Policy

We may update this GDPR policy to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised date.