Links Connect Privacy Policy

This privacy notice tells you what to expect us to do with your personal information.

Contact details
Post
Office 1, 22 Unit Manor Complex, Kirkby Bank Rd, L33 7SY

Telephone
07888836660

Email
info@linksconnect.co.uk

What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery:
Names and contact details
Payment details (including card or bank information for transfers and direct debits)
Records of meetings and decisions
Information relating to sponsorship

We collect or use the following information for service updates or marketing purposes:

Names and contact details
Marketing preferences
Website and app user journey information
Information relating to sponsorship
Records of consent, where appropriate

We collect or use the following information to comply with legal requirements:
Name
Contact information

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.

Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.

Your right to erasure – You have the right to ask us to delete your personal information. Read more about the right to erasure.

Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.

Your right to object to processing – You have the right to object to the processing of your personal data. Read more about the right to object to processing.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.

Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.

If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Our lawful bases for the collection and use of your data
Our lawful bases for collecting or using personal information to provide services and goods are:

Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for legal requirements are:

Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Directly from you
Providers of marketing lists and other personal information
Suppliers and service providers

How long we keep information

Data Retention Schedule

Links Connect
Version: 1.0
Effective Date: February 2026
Review Date: February 2027 (and annually thereafter)
Approved by: Daniel Curwen & James Taylor (co-founders)

Purpose

This schedule sets out how long Links Connect retains personal data in compliance with the UK GDPR (storage limitation principle). Personal data is kept only as long as necessary for the purposes collected and legal obligations. After the retention period, data is securely deleted or anonymised (where anonymisation removes it from UK GDPR scope).
Extensions to any period require documented justification (e.g., ongoing legal dispute, subject access request, or regulatory investigation) and are reviewed at least every 12 months.

Customer / Client Contact and Account Data

Examples: Name, email address, phone number, postal address, account login details.
Purpose / Lawful Basis: Performing a contract, legitimate interests (service delivery and communication).
Retention Period: Duration of the active customer relationship + 6 years after the last interaction or contract termination.
Justification: Limitation Act 1980 (6-year period for most contract and debt claims).
Action at End: Secure deletion or anonymisation.

Order / Transaction / Payment Data

Examples: Purchase details, order history, invoices (excluding full payment card numbers which are not stored).
Purpose / Lawful Basis: Contract performance, legal obligation (tax and accounting).
Retention Period: 6 years from the end of the tax year in which the transaction occurred.
Justification: HMRC requirements for VAT, tax, and accounting records.
Action at End: Secure deletion.

Website Analytics and Log Data

Examples: IP address, browser type, device information, page views, non-essential cookies data.
Purpose / Lawful Basis: Legitimate interests (improving website), consent (for certain cookies).
Retention Period: Maximum 2 years (or until consent withdrawn for marketing-related tracking).
Justification: No ongoing business need beyond analytics and security review periods (ICO/PECR guidance).
Action at End: Deletion or aggregation/anonymisation.

Marketing and Newsletter Subscriber Data

Examples: Email address, name, marketing preferences, consent records.
Purpose / Lawful Basis: Consent or legitimate interests.
Retention Period: Until consent is withdrawn + 12 months (for proof of original consent if challenged).
Justification: No legitimate need to retain after opt-out.
Action at End: Secure deletion.

Enquiry / Contact Form / General Correspondence

Examples: Name, email, message content from forms or emails.
Purpose / Lawful Basis: Legitimate interests (responding to enquiries).
Retention Period: 2 years after last contact (or sooner if no further engagement).
Justification: Short-term need for follow-up or complaint resolution.
Action at End: Secure deletion.

Customer Support / Complaint Records

Examples: Support tickets, complaint details, related correspondence.
Purpose / Lawful Basis: Contract performance, legitimate interests.
Retention Period: 6 years after resolution of the issue.
Justification: Potential civil claims under Limitation Act 1980.
Action at End: Secure deletion.

Archived / Backup Data

All personal data in backups follows the same retention as live data.
Retention Period: Backups are retained for technical recovery purposes only (typically 1–2 backup cycles, max 12 months).
Justification: Technical necessity.
Action at End: Overwrite or secure deletion of old backups.

Additional Rules

Deletion Process: Data is securely deleted using industry-standard methods (e.g., overwriting, certified destruction).
Anonymisation: Where feasible, data is anonymised instead of deleted (e.g., for aggregated statistics).
Monitoring: This schedule is reviewed annually or upon significant changes to processing activities.
Reference: This schedule forms part of our accountability measures under UK GDPR Article 5 and is referenced in our Privacy Notice.

For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.

Who we share information with
Others we share personal information with
Publicly on our website, social media or other marketing and information media
Suppliers and service providers

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Last updated
Feb 2026