Fynlo Privacy Policy

Last updated 23 August 2026. Fynlo is a trading name of Lucid Directions Ltd (Company No. 16409407), registered with the UK Information Commissioner's Office (registration ZC207902).

This policy explains how Lucid Directions Ltd ("Fynlo", "we", "us") handles personal data in the Fynlo hospitality platform and its mobile and web applications. Fynlo is a business to business platform provided to hospitality venues, usually through their accountancy partner. We act as a data controller for account and platform data, and as a data processor for the operational data a venue records using Fynlo.

Who we are

Data controller: Lucid Directions Ltd, a company registered in England and Wales (Company No. 16409407). For any privacy question or request, contact us at privacy@luciddirections.co.uk.

Data we collect

How we use data, and our legal basis

We use personal data to provide and secure the Fynlo service, to process orders and payments on behalf of the venue, to provide support, and to meet legal and accounting obligations. Our legal bases under the UK GDPR are the performance of our contract with the business, our legitimate interests in operating and securing the platform, and compliance with legal obligations. We do not use personal data for advertising.

Payments

Card payments are handled by Stripe, our payment service provider. When a payment is taken, card data is processed directly by Stripe under its own privacy terms. Fynlo receives and stores transaction records (such as amount, status and a reference) but not full card numbers.

Sharing

We do not sell personal data and we do not share it for third party advertising. We share data only with service providers that help us run the platform, such as Stripe for payments, Google Firebase for hosting and infrastructure, and error monitoring providers. These providers act on our instructions under contract. We may disclose data where required by law.

International transfers

Some providers may process data outside the United Kingdom. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or adequacy decisions.

Retention

We keep personal data for as long as the venue uses Fynlo and for as long as we are required to keep financial and accounting records, after which it is deleted or anonymised.

Your rights

Under the UK GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. You can delete your account and associated personal profile directly in the Fynlo app from the account menu, which is also reachable before signing in. To exercise any other right, contact privacy@luciddirections.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Security

Fynlo uses encryption in transit (HTTPS and TLS) and access controls so that each user sees only their own venue's data.

Children

Fynlo is a business tool for hospitality venues and is not directed at children.

Changes

We may update this policy from time to time. The date at the top shows when it was last changed.

Contact

Lucid Directions Ltd. Email privacy@luciddirections.co.uk.