How Rezlynxpms handles personal data.

1. Data controller

2. What data we process

When you browse rezlynxhub.co.uk

• IP address (truncated after 24 hours)
• Referrer and user-agent
• Cookie preferences

When you buy a module

• Name, business email, business phone
• Company name, billing address, VAT number
• Payment token from Stripe UK — we never see card numbers
• Your Rezlynx API token, stored encrypted with AES-256

When a module runs

• Reservation, folio and rate data pulled through the Rezlynx API
• Aggregated usage statistics for capacity planning

3. Lawful basis

Under UK GDPR, our lawful bases are: contract for anything necessary to deliver the modules you have paid for; legitimate interests for basic analytics and fraud prevention; and consent for any non-essential cookies. You can withdraw consent at any time through the cookie control in the footer.

4. Your rights

• Right of access (UK GDPR Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restrict processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to complain to the Information Commissioner’s Office

To exercise any of these, email dpo@rezlynxhub.co.uk; we respond within one month.

5. Where data is stored

Inside the United Kingdom only. Primary data centre in London Docklands (Equinix LD8), warm standby in Manchester (Telehouse Manchester). No transfer of personal data outside the UK. Payment tokens sit with Stripe Payments UK Ltd, London.

6. Retention

Account records kept for six years after account closure to satisfy HMRC record-keeping obligations under the Value Added Tax Regulations 1995. Rezlynx tokens deleted within seven days of account closure. Website analytics retained for 26 months.

7. ICO contact

If you are not satisfied with our response you may complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or online at ico.org.uk.