Last updated: 2 August 2026.

1. Who controls your personal data

Flyn & Co., a French simplified joint-stock company with a single shareholder (SASU), registered at Rue Sainte Colombe, Bordeaux, France, is the controller of personal data collected through this website.

2. Data we collect

Depending on how you use the site, we may collect:

• identity and professional information, such as your name, company, role and organisation;
• contact details, including business email address and telephone number when provided;
• information submitted through consultation, contact or project forms;
• communications and follow-up information;
• technical and usage data, including IP address, browser, device, pages viewed, referral source and consent choices.

Please do not submit confidential, sensitive or regulated information unless it is necessary and specifically requested.

3. Why we use personal data

• To respond to enquiries, assess service fit and take steps before a possible engagement.
• To provide requested services and manage client relationships.
• To operate, secure and improve the website and forms.
• To measure website performance when the required consent has been given.
• To comply with legal, accounting, security and regulatory obligations.

The relevant legal bases may include pre-contractual steps, performance of a contract, legitimate interests, consent and compliance with legal obligations.

4. Recipients and service providers

Access is limited to Flyn & Co. and service providers that support hosting, website security, forms, email delivery, analytics and professional operations, only where access is necessary. Personal data is not sold.

5. International transfers

Some service providers may process data outside the European Economic Area. Where this occurs, Flyn & Co. relies on an adequacy decision, appropriate contractual safeguards or another lawful transfer mechanism.

6. Retention

Enquiry and prospect information is generally retained for up to three years after the last meaningful contact, unless a shorter period is appropriate or a longer period is required by law or necessary for the establishment, exercise or defence of legal claims. Client and accounting records are retained for the applicable contractual and statutory periods. Cookie and analytics retention is described in the Cookie Policy.

7. Your rights

Subject to applicable law, you may request access, rectification, erasure, restriction, portability or object to processing. You may withdraw consent at any time without affecting processing carried out before withdrawal. You may also lodge a complaint with the French data protection authority, the CNIL.

8. How to exercise your rights

For privacy requests only, contact ukbox22@yahoo.co.uk. We may request reasonable proof of identity when necessary to protect your data.

9. Security

Reasonable technical and organisational safeguards are used to protect personal data. No online system is completely risk-free, so visitors should avoid transmitting unnecessary sensitive information.

10. Cookies

Non-essential cookies and similar technologies are used only under the consent choices presented by the website. You can review or change those choices through the consent controls and read the Cookie Policy.

11. Updates

This policy may be updated when services, providers or legal requirements change. The date above identifies the latest version.