← Back to Home

Privacy Policy

Last updated: May 2026

1. Introduction

Lion Tech Innovations Ltd ("LionTech", "we", "our", "us"), registered in England and Wales (Company No. 17068390), is committed to protecting the privacy of individuals who interact with our website, services, and products. This policy explains what information we collect, how we use it, and the rights you have under UK GDPR and the Data Protection Act 2018.

2. Information We Collect

We collect the following categories of personal data:

  • Contact information you provide voluntarily (name, email address, company, role) when submitting a brief through our AI intake assistant or contacting us directly.
  • Conversation data from the AI intake assistant, including the messages you send and the structured brief generated from those messages.
  • Technical data automatically logged when you visit the site: IP address, browser type, device type, referring page, and timestamps.
  • Communication records from any subsequent correspondence with our team.

We do not knowingly collect special category data, financial details, or information from children under 16.

3. How We Use Your Information

We process personal data on the following lawful bases under UK GDPR:

  • Legitimate interests: to respond to enquiries, evaluate fit for engagements, operate our infrastructure, and improve our services.
  • Contractual necessity: where you become a customer or engagement partner.
  • Legal obligation: to comply with applicable UK laws, including tax, company, and data protection legislation.

We do not sell personal data. We do not use personal data for advertising or profiling.

4. Third-Party Processors

We use the following processors to deliver our services. Each is bound by data protection contracts and processes data only on our instructions:

  • OpenRouter (OpenRouter, Inc., USA) — routes the AI intake conversation to the Anthropic Claude language model.
  • Anthropic, PBC (USA) — provides the underlying Claude language model used for the intake assistant. Anthropic's API data usage policy applies.
  • Resend (Resend, Inc., USA) — delivers transactional email notifications. Hosted in Ireland (EU).
  • Vercel Inc. (USA) — hosts our website infrastructure on its Edge network.
  • Google LLC (USA / Ireland) — provides Google Workspace for our email and document infrastructure.
  • GoDaddy.com, LLC (USA) — registers our domain.

International transfers to the USA are protected by Standard Contractual Clauses (SCCs) and the EU–US Data Privacy Framework where applicable.

5. Data Retention

  • AI intake conversation transcripts are transmitted in-memory during the conversation. Once a brief is generated and emailed to our team, the transcript is retained only as part of that email record. We do not store transcripts in a database.
  • Email correspondence is retained for up to 7 years for legitimate business and tax purposes, then deleted.
  • Technical logs are retained for up to 30 days for security and operational purposes, then deleted.
  • Customer records are retained for the duration of the engagement plus 7 years thereafter.

6. Your Rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data where applicable.
  • Request restriction of, or object to, processing.
  • Request data portability in a structured, machine-readable format.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email privacy@liontechinnovations.co.uk. We will respond within one calendar month.

7. Cookies

Our website uses only essential cookies required for site function. We do not use advertising, analytics, or tracking cookies. You can control cookie preferences through your browser settings.

8. Security

We apply reasonable technical and organisational measures to protect personal data, including encrypted transport (HTTPS), least-privilege access controls, and segregation of production credentials. We will notify affected individuals and the ICO of any qualifying data breach within 72 hours of discovery.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top.

10. Contact