GDPR Compliance

Last updated: September 8, 2026

Our Commitment to Data Protection

fjord-lynx complies with the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018 in all handling of personal data. This page outlines your rights and our obligations under these regulations.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit a consultation request, you consent to our use of your contact information
• Contractual necessity: Processing required to deliver contracted environmental consulting services
• Legitimate interests: Maintaining client records for business continuity and quality assurance

Data Controller Information

fjord-lynx is the data controller for personal information collected through this website and during service delivery. Our registered office is located at 42 Victoria Quays, Wharf Street, Sheffield S2 5SY, United Kingdom.

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You may request a copy of all personal data we hold about you. We will provide this within 30 days of your request at no charge.

Right to Rectification

If any information we hold is inaccurate or incomplete, you may request correction.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes it was collected, or if you withdraw consent.

Right to Restrict Processing

You may request that we limit how we use your data in specific circumstances, such as while verifying accuracy of disputed information.

Right to Data Portability

You may request your personal data in a structured, machine-readable format for transfer to another service provider.

Right to Object

You may object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling in our service delivery.

Data Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Access controls limiting data access to authorized personnel
• Regular security assessments and updates
• Staff training on data protection obligations

Data Breach Notification

In the event of a data breach that poses risk to your rights and freedoms, we will notify you and the Information Commissioner's Office within 72 hours of becoming aware of the breach.

International Data Transfers

Personal data is processed and stored within the United Kingdom. We do not transfer personal data outside the UK or European Economic Area.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with your specific request. We will respond within 30 days.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). Contact details are available at ico.org.uk.