Privacy Policy
Plain-English summary: your data is yours, we store it in the UK/EU, we don't sell it, and you can export or delete it any time.
Who we are
Site Lynx Group Ltd, a UK company, is the data controller for Work-Lynx. If you email info@site-lynx.co.uk with a privacy question, a real person replies: usually within a working day.
What we collect
Account data: name, work email, company name, role, job title, password (hashed).
Employee data you enter: employee names, emails, contracts, leave balances, payslips, clock-in records, GPS coordinates at clock-in, timesheet entries. You're the controller of this data; we're the processor.
Usage data: pages visited, features used, timestamps, IP address, browser and OS. We use this for security and product improvement, not ad tracking.
Payment data: handled by Stripe. We never see your card number: we only store a Stripe customer ID.
The Lynx HR app
Lynx HR is the Work-Lynx employee app for iPhone, iPad and Android, published on the App Store and Google Play by Site Lynx Group Ltd. It is used by employees of companies that run Work-Lynx. This section explains what the app itself collects on your device.
Account: your name, work email and the company you belong to, so the app can sign you in and show your own rota, leave, payslips and documents.
Location: the app reads your device location only at the moment you tap Clock in, Clock out, or start or end a break, and only while the app is open on screen. It uses it to check you are inside the boundary your employer drew for your workplace and stores the coordinates with that clock record, which your employer can see. The app never tracks location in the background and never reads it at any other time. You can refuse the location permission; clocking in will then ask you to allow it, and everything else in the app works without it.
Camera and photos: used only when you choose to take or attach a photo, for example to a document your employer has asked for. The app does not read your photo library without you picking a photo.
Notifications: if you allow notifications, the app stores a push token so your employer's Work-Lynx account can send you rota changes, leave decisions and announcements. Turning notifications off in your device settings stops this.
Device and diagnostics: the app model, operating system version and app version, and crash reports, used to keep the app working. No advertising identifiers, no ad tracking, no third-party analytics SDKs.
Who holds it: everything the app sends goes to Work-Lynx's own service and is held for your employer, who is the data controller for their employee records; Site Lynx Group Ltd processes it on their behalf under the terms above. Push notifications are delivered through Expo's notification service, which sees only the push token and the message.
Deleting your account and data: in the app, open More, then Account, then Delete account. You can also use work-lynx.co.uk/delete-account or email info@site-lynx.co.uk. Records your employer must keep by law (pay and working time) stay with your employer under their own retention rules.
Children: the app is for people employed by a Work-Lynx customer and is not directed at anyone under 16.
Why we process it
- To provide the service you've signed up for (contract).
- To bill you (contract).
- To keep the platform secure and detect abuse (legitimate interest).
- To send product updates and security notices (legitimate interest: you can opt out of non-critical emails).
Where it lives
All data is stored on UK/EU-region infrastructure, encrypted at rest (AES-256) and in transit (TLS 1.2+). Each company's data is isolated by row-level security: other tenants cannot query your rows.
Who we share it with
Only sub-processors we need to run the service:
- Supabase: database hosting (EU region).
- Vercel: application hosting.
- Stripe: payments.
- Resend: transactional email.
- Anthropic: processes employment question assistant questions. We don't send personal data unless you type it into the question.
How long we keep it
While your account is active, plus 30 days after cancellation to allow export. After that we hard-delete. Billing records we keep for 6 years as HMRC requires.
Your rights under UK GDPR
- Access: request a copy of your data.
- Rectify: correct anything wrong.
- Erase: delete your account and data.
- Port: export everything to CSV.
- Object: stop certain processing.
- Complain: to the ICO if you think we've got it wrong.
Email info@site-lynx.co.uk to exercise any of these. We reply within 30 days.
Changes
If we change this policy materially we'll email you before the new version takes effect.