Privacy Policy

Digital Biz with Lindy ("we", "us", "our") is a business based in the United Kingdom providing digital business education, business set-up support, custom creations and business growth services. We are the data controller for the personal data described in this policy.

• Identity and contact data: name, email address, phone number, business name.
• Enquiry data: the content of forms, messages, files or briefs you send us.
• Booking data: details you provide when booking a discovery call or session.
• Order and delivery data: billing details, delivery address, purchase history.
• Technical and usage data: IP address, device and browser type, pages visited and referral source, collected via analytics.
• Marketing preferences: whether you have opted in to receive emails from us.

• Contract — to deliver services, digital products, custom orders, mentoring and support you have purchased or requested.
• Legitimate interests — to respond to enquiries, improve our services, keep the website secure and prevent fraud.
• Consent — to send marketing emails and to set non-essential cookies. You can withdraw consent at any time.
• Legal obligation — to keep accounting and tax records as required by HMRC.

Where payment is taken, card details are handled directly by our payment provider. We never see or store your full card number. Payment providers act as independent controllers for the payment data they process.

We share data only with service providers who help us run the business — website hosting, email delivery, analytics, payment processing, booking tools and print or fulfilment partners for custom orders. All are required to keep your data secure and may only use it on our instructions. We never sell your personal data.

Some providers are based outside the UK. Where data is transferred internationally we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses, so your data keeps an equivalent level of protection.

• Enquiries with no purchase: up to 24 months.
• Client and order records: 6 years plus the current tax year (HMRC requirement).
• Marketing list data: until you unsubscribe, then suppression data only.

Under UK GDPR you have the right to:

• Access a copy of your personal data.
• Have inaccurate data corrected.
• Request erasure where we have no ongoing lawful reason to keep it.
• Restrict or object to processing, including direct marketing.
• Data portability.
• Withdraw consent at any time.

To exercise a right, contact us via the contact page. We respond within one month. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

We use encrypted connections (HTTPS), access controls and reputable providers to keep your data safe. No transmission over the internet is completely secure, but we take reasonable steps to protect your information and will notify you and the ICO of a qualifying breach where required.

Our services are intended for adults aged 18 and over. We do not knowingly collect data from children.