Privacy Policy

Version 2026-10-15.1 · Last updated: 15 October 2026

This policy explains how Slynk Digital Ltd handles personal data across its websites and business software and services.

1. Who we are

Slynk Digital Ltd is registered in England and Wales, company number 08451739, at Solihull Business Centre, 1711 High Street, Solihull, England, B93 0LN. Contact connect@slynk.io for privacy questions or requests.

2. Our role

We are a controller, deciding how personal data is used, for our account administration, business relationships, billing, marketing and business security. When handling records on a customer's instructions, including related troubleshooting, we act as its processor. The customer's privacy notice explains its purposes; our Data Processing Addendum governs our processing. We do not use customer-controlled records for our own marketing.

3. Data and sources

Depending on your use of our services, we handle:

  • contact and account details, employer, identifiers and access permissions;
  • subscription, invoice and payment records; card entry is handled by our payment provider;
  • support messages, attachments and troubleshooting information;
  • IP addresses, device and browser details, sessions, activity and security records; and
  • connection credentials, settings and customer-selected business records, including personal data in transactions, generated files, logs and incomplete work.

We obtain these from you, your organisation, customers instructing us, connected systems, and billing or referral partners. Required account, contact and billing details are identified when collected; without them we may be unable to create an account, supply the service or administer payment. Optional information is identified as such.

4. Purposes and lawful bases

For our controller activities:

  • Accounts, business relationships and support: our legitimate interests in supplying and administering services, or performance of a contract where the individual is our contracting customer.
  • Security and reliability: our legitimate interests in preventing misuse, diagnosing faults and improving service performance, subject to individuals' rights.
  • Accounts, tax and legal records: compliance with legal obligations; legitimate interests in establishing or defending claims where applicable.
  • Marketing: consent where required; otherwise our legitimate interests in promoting relevant services to business contacts where electronic-marketing rules permit it. This may include using business-contact and engagement information to prioritise relevant sales follow-up and matching our own prospect and business-customer contact details with advertising-platform users to show relevant adverts or find similar audiences.
  • Optional website analytics and advertising: consent, managed through Cookie settings.

You may object to direct marketing, including related profiling and advertising-audience use, at any time using an unsubscribe link or by contacting us. We will stop that use. Website cookie consent does not by itself authorise contact-list uploads. Necessary account, billing, security and service messages may continue.

5. Sharing

We share data as needed with hosting, communications, support, customer-relationship management, billing, accounting, security, analytics and advertising providers; professional advisers, insurers and auditors; and authorities where legally required or permitted. Business transfers may involve disclosure under confidentiality controls.

Customer-configured processing also sends data to the platforms, recipients and destinations the customer authorises. Those recipients may hold copies under their own arrangements. We distinguish these destinations from suppliers we appoint to process data for us. Suppliers processing customer-controlled records are identified on our Sub-processor List.

6. Locations and transfers

Personal data is processed in the UK and overseas, including through hosting providers and authorised remote support access. Where applicable, transfers rely on adequacy regulations or decisions recognising the destination as providing adequate protection.

Transfers we make to destinations without an applicable adequacy arrangement require appropriate safeguards, such as approved contractual transfer clauses and any necessary supplementary measures, or a permitted statutory exception. Contact us for the destinations and safeguards relevant to your data and a copy of the safeguards. Customer-selected overseas destinations may also involve the customer's own transfer responsibilities.

7. Retention and security

We use security measures appropriate to the nature and risk of the processing. No online service can guarantee absolute security.

Retention depends on the data's purpose:

  • Account and relationship records: while needed to administer the relationship, then for applicable legal duties and claim periods.
  • Billing and tax records: for the applicable statutory record-keeping period.
  • Support, security and operational records: for resolving the issue, investigating relevant incidents and meeting justified audit or legal needs, taking account of their sensitivity.
  • Customer-controlled records and outputs: for the configured processing, troubleshooting or recovery purpose and return or deletion under the DPA. Failed or incomplete work may need longer retention than completed work.
  • Backups: until expiry under the applicable backup cycle, with access restricted where data is awaiting deletion.

When retention is no longer justified, personal data must be deleted or, where lawful, irreversibly anonymised. Customer Personal Data is subject to the return and deletion requirements in the DPA; provider terms do not override those requirements. Withdrawal of marketing consent or an objection may require a limited suppression record to prevent further marketing.

8. Cookies

We use necessary session, security and preference storage. Optional analytics and advertising on our marketing website require consent. Choose “Necessary only” to decline, or use “Cookie settings” in the footer to withdraw it. Withdrawal stops optional tracking on this website and may automatically reload the page. It does not undo processing already completed. See our Cookie Policy.

9. Your rights

Depending on the processing and applicable law, you may request access, correction, deletion, restriction or portability of personal data, object to legitimate-interest processing, and withdraw consent without affecting earlier lawful processing. Contact us to exercise these rights. We may verify identity; legal exemptions can apply.

For customer-controlled records, contact the relevant customer where practical. We refer requests to it and assist as required by law.

To raise a data-protection complaint, contact connect@slynk.io. We will acknowledge it within 30 days, investigate and respond without undue delay, and keep you informed as required by law. You also have the right to complain to the UK data-protection regulator (ICO) or, where EU GDPR applies, the competent EU supervisory authority.

10. Updates

We publish updated versions of this policy and notify affected people of material changes where appropriate.