Privacy Policy

Last updated: 1 April 2026

This website and the LYNXSTA service are operated by Melunos Limited, trading as LYNXSTA. This Privacy Policy explains how we collect, use, store and share personal data when you interact with us.

1. Who We Are

2. What This Policy Covers

This Privacy Policy explains how we collect, use, store and share personal data when you:

• visit our website;
• sign up by email;
• create an account;
• use LYNXSTA as a beauty professional;
• interact with a LYNXSTA booking or confirmation flow;
• contact us for support, enquiries or updates.

3. The Personal Data We Collect

Information you give us

• Name
• Email address
• Phone number
• Profession / service category
• Account details
• Messages, support requests and other information you submit to us

Booking and workflow information

• Appointment date and time
• Service booked
• Prep status
• Terms-agreed status
• Deposit status
• Booking / confirmation history and related booking records

Payment and transaction information

• Whether a payment succeeded or failed
• Transaction references
• Limited billing / payment metadata supplied by our payment provider

We do not intentionally store full payment card details ourselves.

Technical and usage information

• IP address
• Browser / device information
• Operating system
• Pages viewed and actions taken on the site or platform
• Log and security information
• Cookie and consent preferences

Important: Please do not submit health, medical or other special-category personal data through public website forms unless we specifically ask for it.

4. How We Use Personal Data

We use personal data to:

• run and improve the website and platform;
• create and manage accounts;
• provide booking, confirmation and workflow functionality;
• process registrations and onboarding;
• respond to enquiries and support requests;
• record payment and booking status;
• send service, security and account messages;
• prevent fraud, misuse and abuse;
• comply with legal, tax, accounting and record-keeping obligations;
• send product updates where permitted.

5. Our Lawful Bases

• Contract: where we need the data to provide the website, account, platform, booking-confirmation flow, or related services.
• Legitimate interests: where we use data to operate, secure, support and improve LYNXSTA, prevent misuse, and understand how professional users use the platform.
• Legal obligation: where we need to keep records or comply with legal, tax, accounting, fraud-prevention or regulatory requirements.
• Consent: where consent is required, including certain non-essential cookies and, where applicable, certain marketing communications.

6. Marketing

We may send product updates by email. You can unsubscribe at any time using the unsubscribe link in the message or by contacting us at hello@lynxsta.com.

7. Who We Share Personal Data With

We do not sell personal data. We may share personal data with service providers who help us run LYNXSTA, such as:

• Hosting and infrastructure providers
• Analytics providers
• Email and communications providers
• Payment processors
• Fraud and security providers
• Developers and technical service providers
• Professional advisers, insurers, auditors or regulators where needed
• Law enforcement or public authorities where legally required

8. Controller / Processor Position

For the website, registrations, account administration, billing, security, product operations, professional-user analytics, and legal compliance, Melunos Limited / LYNXSTA acts as controller.

Where a beauty professional uses LYNXSTA to manage their own client bookings or client workflow, LYNXSTA generally acts as processor for that professional in relation to that client booking data, except where we need to use certain data ourselves for security, fraud prevention, billing, misuse prevention, or legal compliance.

9. International Transfers

Some of our providers may process personal data outside the UK. Where that happens, we use appropriate safeguards required by applicable data protection law.

10. How Long We Keep Personal Data

• Email sign-up / pre-account registration data: up to 24 months after last meaningful interaction if no live account is created
• Dormant accounts: up to 24 months after inactivity, unless a longer period is needed for legal, security or dispute reasons
• Support messages: up to 24 months after the issue closes
• Booking, account and transaction records: while the account remains active and for up to 6 years afterwards where needed for legal, tax, accounting or dispute reasons
• Failed or abandoned registrations: up to 90 days unless needed longer for fraud / security analysis
• Cookie preference records: for as long as needed to respect and evidence consent choices

Where we no longer need personal data, we delete it or anonymise it.

11. Your Rights

Depending on the circumstances, you may have rights to:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Object to certain processing
• Receive certain data in portable form
• Withdraw consent where we rely on consent

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

12. Security

We use reasonable technical and organisational measures to protect personal data. No online system is completely secure, so we cannot guarantee absolute security.

13. Third-Party Services

The site or platform may link to or use third-party tools, payment providers or services. Their privacy practices are their own, so you should review their policies where relevant.

14. Children

LYNXSTA is for users aged 18 and over and is not directed at children.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always appear on the website with the updated date above.

16. Contact