Privacy Policy
Who We Are
Last updated: 14 October 2026
This Privacy Policy explains how Lexbit Ltd, a private limited company registered in England and Wales under company number 16778438, with its registered office at 5 Brayford Square, London, United Kingdom, E1 0SG ("Lexbit", "we", "us"), processes personal data when you visit lexbit-global.com or contact us through it.
Lexbit Ltd is the data controller of your personal data. We process it under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR). If you are in the European Union or European Economic Area, we also respect your rights under the EU General Data Protection Regulation (EU GDPR) to the extent it applies to our processing.
For any privacy question or request, contact us at action@lex-bit.com.
Personal Data We Collect
Data you give us
When you submit a contact or consultation form, we collect your name, email address, phone number and the message you write. If you email or call us directly, we collect the details you choose to share.
Please do not send special category data (for example health information) or confidential documents through the website forms.
Data collected automatically
Our hosting servers record standard technical data such as IP address, browser type, the pages requested and the date and time of access. This is used for security and to keep the website working. We record your cookie choice in a strictly necessary cookie (see Cookies below). We do not currently use analytics or marketing cookies.
On our Tools pages, your IP address is used transiently to infer your country so we can show it first; the IP address is not stored, and only the resulting country code is kept in your browser's session storage until you close the tab. IP geolocation by DB-IP (CC BY 4.0).
Purposes and Lawful Bases
- Responding to your enquiry and taking steps at your request before entering into a contract — lawful basis: steps prior to entering into a contract (Article 6(1)(b)) and our legitimate interests in answering business enquiries (Article 6(1)(f)).
- Providing services if you become a client — performance of a contract (Article 6(1)(b)).
- Website security and operation, including preventing spam and abuse of forms — legitimate interests (Article 6(1)(f)).
- Storing your cookie preference — strictly necessary under PECR; legitimate interests (Article 6(1)(f)).
- Complying with legal obligations, such as record-keeping, anti-money laundering or responding to lawful requests from authorities — legal obligation (Article 6(1)(c)).
- Any non-essential cookies or marketing emails (not currently used) — only with your consent (Article 6(1)(a)), which you may withdraw at any time.
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
How Long We Keep Data
- Enquiries that do not lead to an engagement: up to 24 months from our last contact, then deleted.
- Client records: for the duration of the engagement and up to 6 years afterwards, or longer where the law requires (for example anti-money laundering records, normally 5 years from the end of the business relationship).
- Server logs: for a limited period needed for security, normally no more than 90 days.
- Cookie consent record: 12 months, after which you will be asked again.
Who We Share Data With
We do not sell your personal data. We share it only where necessary with:
- Our website hosting provider, which stores the website and form submissions;
- Our email and communications service providers, used to receive and answer your messages;
- Professional advisers and partner firms, only where needed to deliver a service you have requested and with your knowledge;
- Courts, regulators, law enforcement or other authorities where required by law.
Our service providers act as data processors under written terms and may only use your data on our instructions.
International Transfers
Some of our service providers may process data outside the UK or the European Economic Area. Where this happens, we make sure the transfer is protected by an adequacy decision (such as UK adequacy regulations or the European Commission's adequacy decisions), or by appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses. You can ask us for more information about these safeguards.
Your Rights
Subject to conditions and exceptions in the law, you have the right to:
- Access the personal data we hold about you;
- Have inaccurate data corrected;
- Have your data erased;
- Restrict our processing;
- Object to processing based on legitimate interests;
- Data portability;
- Withdraw consent at any time, where processing is based on consent (this does not affect processing before withdrawal).
To exercise any right, email action@lex-bit.com. We will reply within one month, which may be extended where the law allows. We may need to verify your identity.
You also have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113. If you are in the EU/EEA, you may complain to the data protection authority in your country of residence. We would appreciate the chance to address your concerns first.
Cookies, Security and Changes
Cookies
We use only a strictly necessary cookie to remember your cookie choice. See our Cookie Policy for details. You can change your choice at any time via Cookie settings.
Security
We use appropriate technical and organisational measures, including encrypted (HTTPS) connections and restricted access, to protect personal data. No transmission over the internet is completely secure.
Changes
We may update this policy. The latest version is always published on this page with its "last updated" date.
Contact
Lexbit Ltd, 5 Brayford Square, London, United Kingdom, E1 0SG. Email: action@lex-bit.com.