Privacy Policy

Last updated: 10 April 2026

Who We Are

Lynceris Intelligence (lynceris.com) is a boutique investment risk advisory firm providing non-headline intelligence for cross-border transactions. For any privacy-related inquiries, contact us at contact@lynceris.com.

Data controller: Lynceris Intelligence, operating from Poland.

What Data We Collect

Contact Form Submissions

If you submit an inquiry through our structured request form, we collect the information you voluntarily provide — typically your name, email, company, role, and details relevant to your inquiry. This data is processed by Tally (tally.so), our form provider, and stored by Lynceris for the purpose of responding to your request and, if applicable, delivering requested advisory services.

Email Correspondence

If you contact us directly by email at contact@lynceris.com, we collect the information you provide in your message. Email is delivered and stored via SiteGround (our email hosting provider based in the Netherlands). This data is used only to respond to your inquiry.

Technical Data

Our website is hosted on Cloudflare Pages. Cloudflare may process limited technical data (IP address, country, browser type) for security, DDoS protection, and content delivery purposes. This data is essential for the operation of the website and is handled under Cloudflare's privacy policy.

Cookies

Our website uses only essential cookies required by Cloudflare for security and content delivery. These cookies are strictly necessary for the operation of the website and do not require consent under GDPR. We do not use performance cookies, advertising cookies, or any third-party tracking technologies.

Why We Process Your Data

We process personal data for the following purposes:

• Inquiries: To respond to contact form submissions and advisory requests
• Client engagements: To deliver requested advisory services under confidentiality agreements
• Security: To protect our website from malicious activity (via Cloudflare)
• Legal compliance: To maintain records as required by applicable Polish accounting and tax regulations

Legal basis under GDPR Article 6(1): (a) consent for contact form submissions, (b) performance of contract for client engagements, (c) legal obligation for record retention, and (f) legitimate interest for website security and B2B communication.

Third-Party Services

We use the following third-party services that may process your data:

• Tally (Belgium) — Contact form processing. Privacy policy
• Cloudflare, Inc. (United States) — Website hosting, CDN, security. Privacy policy
• SiteGround (Netherlands) — Email hosting for contact@lynceris.com. Privacy policy

We do not share, sell, or transfer personal data to any other third parties.

Confidentiality of Client Engagements

Findings and communications related to client engagements are treated as strictly confidential. Lynceris does not disclose client identities, engagement scopes, or findings to any third party without explicit written authorization from the client. Confidentiality obligations survive the termination of any engagement.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data
• Right to restrict processing — request limitation of how we use your data
• Right to data portability — request your data in a machine-readable format
• Right to object — object to processing of your data
• Right to withdraw consent — withdraw consent for contact form submissions at any time
• Right to lodge a complaint — file a complaint with your local data protection authority (in Poland: UODO, uodo.gov.pl)

To exercise any of these rights, contact us at contact@lynceris.com with "GDPR Request" in the subject line. We will respond within 30 days.

Data Retention

• Contact form submissions: Retained for 24 months from the date of last contact, unless a client engagement is initiated
• Client engagement records: Retained for the duration of the engagement plus 6 years, as required by Polish accounting and tax regulations
• Email correspondence: Retained for 24 months from last contact, unless related to an active engagement
• Technical data (Cloudflare): Retained according to Cloudflare's retention policy, typically up to 30 days

After retention periods expire, data is deleted or anonymized.

International Data Transfers

Some of our service providers (Cloudflare) operate servers outside the European Economic Area. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses or equivalent safeguards as provided by GDPR Article 46. Tally (Belgium) and SiteGround (Netherlands) operate within the EEA.

Children's Privacy

Lynceris services are directed exclusively at business clients and professional audiences. We do not knowingly collect personal data from individuals under the age of 16.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. Material changes will be communicated to active clients directly.

Contact

For any questions or requests regarding this privacy policy, contact us at contact@lynceris.com with "Privacy Policy" in the subject line.