A. Who we are
LYNR provides senior revenue execution services to B2B companies. LYNR is a trading name of THINKBUD LTD, a private limited company registered in England and Wales under company number 17013341. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
Lynr Network applicants and members also receive the more specific Network Privacy Notice, which covers capability profiles, evidence, availability, opportunity invitations and matching, responses and participation data. This policy is not repeated there in full.
THINKBUD LTD is the controller for personal data described in this policy. Privacy and data-protection enquiries should be sent to privacy@getlynr.com. Unless LYNR separately confirms a formal statutory appointment, this contact address should not be interpreted as the appointment of a data protection officer under UK GDPR.
B. Information we collect and where it comes from
- Contact and company information you provide, such as name, work email, role, employer, company size and preferred contact method.
- Enquiry, discovery and workstream information you choose to provide.
- Business correspondence and records of requested meetings, proposals or commercial discussions.
- Where relevant to a genuine B2B relationship, enquiry, referral or targeted business-development activity, professional information obtained from public business sources such as company websites or professional profiles, or supplied by a business contact or referrer.
- Technical, security and reliability information produced by your browser and our infrastructure, such as IP address, device/browser information, timestamps and request logs.
- Cookie and storage-technology preference records held in your browser.
- Analytics information collected through Ahrefs and Contentsquare only where the relevant consent is in place.
- Transactional email delivery records, including message status, bounce/failure information and related operational metadata.
- Suppression or objection records kept so LYNR can continue to honour an opt-out or direct-marketing objection.
C. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Respond to an enquiry and take steps you request before a possible engagement. | Steps at your request before entering a contract where applicable; otherwise LYNR's legitimate interests in responding to B2B enquiries. |
| Qualify a potential engagement, prepare a proposal and maintain a reasonable business-development record. | Contract/pre-contractual steps where applicable and LYNR's legitimate interests in operating and developing its B2B business. |
| Operate, secure, investigate abuse and troubleshoot the website, forms and account services. | LYNR's legitimate interests in security, service integrity and fraud/abuse prevention; legal obligations where applicable. |
| Send requested acknowledgements, account messages and other service communications. | Contract/pre-contractual steps where applicable and LYNR's legitimate interests in operating the requested service. |
| Maintain accounting, contractual, legal-claim, audit, suppression and compliance records. | Legal obligations and, where appropriate, LYNR's legitimate interests in establishing, exercising or defending legal rights and maintaining accurate business records. |
| Run optional Ahrefs and Contentsquare analytics/storage technologies. | Consent where consent is required. |
D. Your right to object
Where LYNR relies on legitimate interests, you have the right to object to that processing. Tell us what processing you object to and why it affects your particular situation. LYNR will stop the processing unless it can demonstrate a lawful reason to continue that overrides the objection, or the processing is needed to establish, exercise or defend legal claims.
You have an absolute right to object at any time to the use of your personal data for direct marketing. If you object to direct marketing, LYNR will stop using the data for that purpose and may keep only a minimal suppression record needed to ensure the objection continues to be honoured.
E. B2B marketing and objections
LYNR may conduct targeted business-to-business outreach where permitted by applicable law. UK PECR rules distinguish corporate subscribers from individual subscribers such as many sole traders and some partnerships, so the permitted route can differ by recipient.
Where LYNR sends direct marketing, LYNR will identify itself and provide a valid way to opt out. Where personal data is processed for direct marketing, you can object at any time. An objection to direct marketing is honoured for future marketing and a minimal suppression record may be retained so the objection is not accidentally reversed.
F. Service providers and recipients
LYNR uses providers only where there is a business need and reviews the role they perform. Current categories include:
| Provider / category | Role |
|---|---|
| Lovable and deployment infrastructure | Application build, deployment and hosting-related services used for getlynr.com. |
| Cloudflare | Network, content-delivery and security services. |
| Supabase | Database, authentication, private storage and email-queue infrastructure. |
| Resend | Transactional/service email delivery and delivery-event processing. |
| Ahrefs | Optional website analytics after the relevant consent. |
| Contentsquare | Optional behavioural/site-use analytics after the relevant consent. |
| Calendly | Meeting booking when a visitor chooses to use it. |
| WhatsApp / Meta | Messaging when a visitor chooses to use that channel. |
| Professional advisers and authorities | Legal, tax, accounting, insurance, security or regulatory matters where reasonably necessary or legally required. |
LYNR does not sell personal data. External social-media services receive information under their own terms when you choose to follow an external link or use their service.
G. International transfers
Some providers operate internationally. Where UK data-protection law restricts an international transfer, LYNR uses or relies on an appropriate mechanism where required, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another lawful transfer mechanism, together with appropriate risk assessment where applicable.
You can contact privacy@getlynr.com for information about the transfer mechanism used for a relevant transfer and, where applicable, a copy of the relevant safeguards, subject to lawful and necessary redactions.
H. Retention
LYNR applies retention by data category rather than keeping information indefinitely. Operational working periods are reviewed against the purpose, legal requirements and claim/security risk.
- Unsuccessful or inactive enquiries are removed or anonymised when there is no reasonable business, legal or security need to keep them.
- Active client and contractual records are kept for the engagement and for any additional period reasonably required by accounting, tax, insurance, limitation or legal-claim rules.
- Security and operational logs are retained only for the period reasonably necessary for security, troubleshooting and incident response.
- Analytics data follows the provider/configuration retention settings described in the Cookie Policy and applicable consent.
- Suppression records may be kept for as long as needed to honour a continuing objection or opt-out.
LYNR maintains an internal retention schedule and deletes or anonymises data when the applicable purpose and lawful retention need end.
I. Cookies and storage/access technologies
Optional analytics and other non-essential storage/access technologies are controlled through the consent mechanism described in the Cookie Policy. Rejecting optional analytics does not prevent ordinary use of the site. You can reopen Cookie preferences from the footer at any time.
J. AI, profiling and automated decisions
LYNR may use AI-assisted tools internally for research, drafting, summarisation, analysis or workflow support where appropriate controls are in place. LYNR does not permit a public generative-AI service to be treated as an unrestricted destination for confidential client, member or applicant information.
LYNR does not use website enquiry data to make solely automated decisions that have legal or similarly significant effects. Material membership, client-selection and delivery decisions are subject to meaningful human judgement. If LYNR introduces higher-risk profiling or automated decision-making, it will assess the legal basis, transparency, human-review and data-protection impact requirements before deployment.
K. Your rights and account deletion
Subject to the law and the circumstances of the processing, you may have rights of access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent where processing depends on consent. These rights are not all absolute.
- Send a request to privacy@getlynr.com. Lynr Network users can also use the available account and data-rights controls.
- Where LYNR has reasonable doubts about identity, it may request proportionate information needed to verify the requester.
- LYNR normally responds within one month, subject to the extensions and exceptions permitted by applicable law.
- A request to delete an account closes the active account and removes account-linked information that no longer has a lawful retention purpose. It does not require LYNR to erase information that it must or is entitled to retain for legal obligations, claims, security, contracts, accounting, tax, fraud prevention or continuing suppression of marketing objections.
- If LYNR refuses or only partly fulfils a rights request, it will explain the basis where the law requires it and provide applicable complaint information.
- UK individuals may complain to the Information Commissioner's Office. Other individuals may also have rights to complain to an applicable local supervisory authority.
L. Children and changes
LYNR is a B2B service and is not directed at children. We do not knowingly invite people under 16 to provide personal information through the business or Network services.
We may update this policy when the law, providers or processing changes. Material changes will be reflected in the date above and, where required, communicated by an appropriate additional notice.