GDPR Compliance

Last updated: June 2026

Your Rights Under GDPR

Under the General Data Protection Regulation, you have specific rights regarding your personal data. We are committed to respecting these rights and ensuring compliance with all applicable data protection legislation.

Data Controller

moor-lynx is the data controller responsible for your personal information. Our registered address is:

142 Kensington Park Road
London W11 2ES
United Kingdom

Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Contract Performance: Processing necessary to fulfill our catering service agreements with you
• Legitimate Interest: Maintaining client relationships and improving our services
• Consent: Marketing communications sent only with your explicit consent
• Legal Obligation: Compliance with financial and regulatory requirements

Your Individual Rights

Right to Access

You may request a copy of all personal data we hold about you. We will provide this information within one month of your request.

Right to Rectification

If you believe any information we hold is inaccurate or incomplete, you may request correction.

Right to Erasure

You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for its original purpose.

Right to Restrict Processing

You may request that we limit how we use your personal data in specific situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision making or profiling in our service delivery.

Data Retention Periods

We retain personal data for different periods depending on the purpose:

• Client booking information: 7 years (accounting requirements)
• Marketing consent records: Until consent is withdrawn
• Inquiry forms: 2 years if no booking results
• Dietary requirement records: Duration of client relationship plus 1 year

International Data Transfers

Your personal data is processed within the United Kingdom. If data is transferred outside the UK, we ensure appropriate safeguards are in place.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach.

Exercising Your Rights

To exercise any of these rights, please contact us at:

[email protected]

We will respond to your request within one month. If your request is complex, we may extend this period by two additional months and will inform you of any such extension.

Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom

Website: ico.org.uk

Contact Our Data Protection Officer

For any questions regarding data protection or GDPR compliance, contact:

[email protected]