LYOS Ltd Customer Privacy Notice
Scope of this Privacy Policy
This privacy policy explains how LYOS Ltd collects, uses, stores, and protects your personal information.
This policy applies to:
- The LYOS website(s), including https://www.lyos.com and any related domains (the Website);
and - The LYOS mobile applications, including iOS and Android applications (the App).
By using our Website or App, you acknowledge that your personal information will be processed in accordance with this policy.
Contact Details
Post
LYOS Ltd
3 East Point, High Street
Seal, Sevenoaks, Kent
TN15 0EG
United Kingdom
Email
hello@lyos.com
What information we collect, use, and why To provide services and goods (including digital services)
We may collect or use
- Names and contact details
- Account credentials and registration details
- Information relating to loyalty or reward programmes
- Travel history identified and generated through the App
- Social connections and interactions within the App
Lawful basis: Performance of a contract; Consent (for optional features)
To operate and manage user accounts
We may collect or use:
- Names and contact details
- Account information, including login and authentication data
Lawful basis: Performance of a contract
For service updates, analytics, and marketing
We may collect or use:
- Names and contact details
- Location data (where enabled)
- Website and App user journey information
- Records of consent
- Website analytics and cookie-related data
Lawful basis: Consent; Legitimate interests (to improve and optimise our services)
For queries, complaints, and support
We may collect or use:
- Names and contact details
- Account information
Lawful basis: Legitimate interests (to manage and resolve issues efficiently)
Information collected automatically
When you use our Website or App, we may automatically collect:
- Device and browser information
- IP address
- App usage and interaction data
- Cookie and similar tracking data (Website)
- GPS or approximate location data (App, where enabled)
Information from third parties
We may receive personal information from:
- Social login providers (e.g. Apple, Google, Facebook)
- Analytics and performance monitoring providers
- Other technical service providers supporting the Website or App
Lawful bases and your data protection rights
Under UK data protection law, we must have a lawful basis for processing your personal information. These bases include performance of a contract, consent, and legitimate interests.
Your rights include:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object
- Right to data portability
- Right to withdraw consent at any time
We will respond to valid requests within one month. Requests should be sent to the contact details
above.
Where we get personal information from
- Directly from you
- Automatically through your use of the Website or App
- From third-party services such as social login or analytics providers
International data transfers
Where personal data is transferred outside the UK or EEA (for example, through global cloud infrastructure providers), we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions
- Other legally recognised safeguards
We only work with third parties that maintain appropriate security and data protection standards.
Automated decision-making and profiling
We may use automated tools to analyse information such as travel history and preferences to personalise your experience. You may object to profiling or request human review.
Children’s privacy
Our Website and App are not intended for children under the age of 16. We do not knowingly collect personal data from children without appropriate parental consent.
How long we keep information
Unless otherwise required by law:
- Identity information: 6 years
- Contact information: 6 years
- Account information: 6 years
- Payment information: 6 years
- Transaction information: 6 years
- Survey and feedback information: 6 years
- Marketing preferences: 6 years
How to complain
If you have concerns about how we handle your personal data, please contact us first using the details above.
If unresolved, you may complain to the UK Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113
Website:https://www.ico.org.uk/make-a-complaint
Last updated:
22 January 2026
general category Types of Personal Data in that category | Retention Periods | IDENTITY INFORMATION
This is information relating to your identity such as your name (including any previous names and any titles that you use), gender, marital status and date of birth | 6 Years |
|---|---|
CONTACT INFORMATION This is information relating to your contact details such as email address, addresses, telephone numbers | 6 Years |
ACCOUNT INFORMATION This is information relating to your account with us (including username and password) | 6 Years |
PAYMENT INFORMATION This is information relating to the methods by which you provide payment to us such as [bank account details, credit or debit card details] and details of any payments (including amounts and dates) that are made between us | 6 Years |
TRANSACTION INFORMATION This is information relating to transactions between us such as details of the goods, services and/or digital content provided to you and any returns details | 6 Years |
SURVEY INFORMATION This is information that we have collected from you or that you have provided to us in respect of surveys and feedback | 6 Years |
MARKETING INFORMATION This is information relating to your marketing and communications preferences | 6 Years |
