Effective Date: 08/08/2024
At LexDex Solutions (“we”, “us”, “our”), we are committed to respecting and protecting the privacy and personal data of all individuals who visit our website, purchase our products, or engage with our services. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard personal data in compliance with the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, the European Union General Data Protection Regulation (EU GDPR).
LexDex Solutions is an online-only business based in the United Kingdom. We provide privacy compliance services, including template documentation, support with regulatory forms, and tailored consultancy services to businesses primarily operating in the UK and EU.
1. Identity and Contact Details of the Data Controller
LexDex Solutions is the data controller in relation to the processing of personal data described in this Privacy Policy.
We operate exclusively online and do not maintain a physical business address. All communication with us should be directed via email.
Business Name: LexDex Solutions
Jurisdiction: United Kingdom
Email Contact: contact@lexdex-solutions.uk
Website URL: https://lexdex-solutions.uk
If you have any questions or concerns regarding this Privacy Policy or the way in which we process your personal data, you may contact us at the email address provided above.
2. Scope of This Policy
This Privacy Policy applies to the collection and processing of personal data from:
- Visitors to our website;
- Individuals who purchase our digital templates or ebooks or engage us to provide consultancy services;
- Subscribers to our newsletters or marketing communications;
- Clients who contact us via email, contact forms, or other communication methods;
- Users who interact with our site through cookies or third-party embedded technologies.
By accessing our website or providing personal data to us, you acknowledge and agree to the practices described in this policy.
3. Categories of Personal Data We Collect
We may collect and process the following categories of personal data, depending on the nature of your interaction with us:
3.1 Data Provided Directly by You:
Your full name;
Your email address;
Your business or company name;
Your job title or position within a business ,if voluntarily provided;
Your phone number, if voluntarily provided;
Any other information you choose to include in free-text fields or correspondence, such as contact forms, consultations, or service requests.
3.2 Transactional and Contractual Data:
Details of services or templates purchased;
Payment-related data (excluding card details, which are processed securely via third-party payment processors);
Billing contact information;
Client onboarding forms or intake documentation required to deliver our services.
3.3 Technical and Usage Data:
Internet Protocol (IP) address;
Device and browser type;
Operating system and version;
Pages viewed and time spent on the site;
Referral URLs;
Time zone settings and location;
Cookie consent preferences.
3.4 Marketing and Communication Data:
Your preferences in receiving marketing from us;
Records of communications or email interactions, including email open rates and engagement metrics if you have subscribed to our newsletters.
3.5 Special Categories of Personal Data:
We do not intentionally collect special categories of data (e.g., data concerning health, racial or ethnic origin, or political opinions). However, if you voluntarily disclose such data in the course of receiving tailored privacy support, we will treat such data with heightened protection and only process it where strictly necessary and with your explicit consent.
4. How We Collect Personal Data
We may collect personal data through the following means:
Direct interactions with you, such as form submissions, consultations, email exchanges, and service requests;
Transactions made on our website, including the purchase of downloadable templates;
The use of cookies and other tracking technologies on our website;
Sign-up forms for marketing communications or service alerts;
Analytics tools integrated into our website to monitor usage and engagement.
5. Legal Bases for Processing Personal Data
We rely on the following lawful bases under Article 6 of the UK GDPR to process your personal data:
Contractual Necessity: We process data to fulfil our contractual obligations, including providing purchased templates and services, managing invoices, and delivering customer support (Article 6(1)(b)).
Legitimate Interests: We may process data for our legitimate business interests, such as improving our services, preventing fraud, or responding to enquiries, provided such interests are not overridden by your fundamental rights (Article 6(1)(f)).
Legal Obligations: We may process data where necessary to comply with our legal or regulatory obligations, including recordkeeping and tax reporting (Article 6(1)(c)).
Consent: We process personal data on the basis of your consent where required by law, for example in relation to the use of non-essential cookies or the sending of marketing emails (Article 6(1)(a)). You may withdraw your consent at any time.
6. How We Use Personal Data
We use personal data for the following purposes:
To deliver products and services that you have purchased from us;
To respond to enquiries, provide support, and manage client relationships;
To customise documentation or advice based on the specific business information you provide;
To send administrative information such as service updates, billing notifications, or changes to our policies;
To send newsletters or promotional materials where you have opted in;
To improve the functionality and usability of our website;
To comply with legal obligations, such as accounting or regulatory compliance.
7. Disclosure of Personal Data
We do not sell or rent personal data to any third parties. We may share your data with the following categories of recipients:
7.1 Service Providers:
We may share data with third-party service providers who assist us in delivering our services. These include, but are not limited to:
Payment processors such as Stripe or PayPal;
Cloud storage providers, such as Google Drive;
Website hosting platforms and content delivery networks;
Email marketing providers such as MailerLite;
Analytics and cookie management platforms.
These providers are contractually obligated to process your data in accordance with applicable data protection laws and to implement appropriate security measures.
7.2 Legal and Regulatory Disclosure:
We may disclose personal data where required by law, regulation, court order, or competent authority, or where necessary to establish, exercise, or defend legal claims.
8. International Data Transfers
Some of the service providers with whom we share data may be located outside of the United Kingdom or the European Economic Area. In such cases, we ensure that appropriate safeguards are in place, including the use of approved Standard Contractual Clauses and UK Addenda, in compliance with Chapter V of the UK GDPR.
9. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including to comply with legal obligations, resolve disputes, or enforce agreements. Our typical retention periods are as follows:
Client records and service data: retained for a period of up to six years from the date of the last transaction;
Contact form submissions and general correspondence: retained for a period of 12 to 24 months;
Email marketing data: retained until consent is withdrawn or the user unsubscribes;
Website analytics data: retained for up to 26 months, depending on the platform used.
Where data is no longer required, we securely delete or anonymise it in accordance with industry standards.
10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to ensure the proper functioning of the website, to enhance your experience, and to collect analytical data.
We seek your consent before placing non-essential cookies, in accordance with the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR.
11. Your Rights
Under applicable data protection law, you have the following rights:
The right to request access to your personal data;
The right to request correction of inaccurate or incomplete data;
The right to request erasure of your personal data under certain circumstances;
The right to object to or request the restriction of processing;
The right to data portability in a structured, commonly used format;
The right to withdraw consent where processing is based on your consent;
The right to lodge a complaint with the Information Commissioner’s Office (ICO) or another relevant supervisory authority.
To exercise any of your rights, please contact us at [Insert Contact Email]. We will respond to your request in accordance with applicable laws and within one calendar month.
12. Data Security
We have implemented appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include the use of secure servers, encrypted connections, strong access controls, and regular monitoring for vulnerabilities.
While we take reasonable steps to secure your personal data, no method of transmission over the internet or method of electronic storage can be guaranteed as completely secure.
13. External Links
Our website may contain links to third-party websites or applications. We are not responsible for the privacy practices or content of those external sites. We recommend that you review the privacy policies of any third-party websites before providing them with your personal data.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time in response to legal, regulatory, or operational changes. The most recent version will always be available on our website and the date of the last update will be indicated at the top of the policy.
15. Contact Details
If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights under applicable law, you may contact us at:
Email: contact@lexdex-solutions.uk
Website: https://lexdex-solutions.uk
Supervisory Authority (UK): Information Commissioner’s Office – www.ico.org.uk