Last Updated: August 4, 2026
velvet-lynx is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we comply with these regulations and how you can exercise your rights.
velvet-lynx is the data controller responsible for your personal information. Our contact details are:
velvet-lynx
42 Duke Street
Liverpool L1 5AS
United Kingdom
Email: [email protected]
We process the following categories of personal data:
We process your personal data under the following legal grounds:
Under GDPR, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction or completion of that data.
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected or when you withdraw consent.
You have the right to request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significant effects. We do not currently employ automated decision-making processes.
To exercise any of your GDPR rights, please contact us at [email protected] with the subject line "GDPR Request" and specify which right you wish to exercise. We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of any such extension.
We may request specific information from you to help us confirm your identity and ensure your right to access your personal data or exercise other rights. This security measure ensures that personal data is not disclosed to unauthorized individuals.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, accounting, or reporting requirements. Our standard retention periods are:
We have implemented appropriate technical and organizational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:
Your personal data is primarily stored and processed within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
When we engage third-party service providers to process personal data on our behalf (such as accommodation providers or tour operators), we ensure they comply with GDPR requirements through contractual agreements that specify their data protection obligations.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach, in accordance with GDPR requirements.
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the relevant supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk
We may update this GDPR compliance information from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.
If you have questions about our GDPR compliance or wish to exercise your rights, please contact us at [email protected].