GDPR and data protection

Your information, your choices

Our English-language service targets businesses in the United Kingdom, United States, Canada, Australia and New Zealand. A business context does not automatically remove privacy protection. We are not targeting the EU at launch, but this does not override any law that applies to a particular person or activity.

Ask us first

Email info@mylink.contact or use the contact form to request access, a correction, deletion or help with a privacy concern. Tell us which account or record is involved and what you would like us to do. Do not send identity documents unless we explain why they are necessary and provide a secure route.

United Kingdom

As a UK operator, we handle personal information under the UK GDPR and Data Protection Act 2018, as amended. These provide rights of access, correction, erasure, restriction, portability and objection. Consent can be withdrawn where it is the processing basis. These rights have conditions and exceptions. You may raise a concern with the Information Commissioner’s Office.

We normally respond to a UK rights request without undue delay and within one month. If an extension or another permitted adjustment applies, we will explain it. Requests are normally free. We may ask for proportionate information to identify the relevant records or confirm your identity. If we cannot carry out a request, we will explain the reason and how to complain. You do not have to close your business account to raise a privacy concern.

How we protect access

Business workspaces use authenticated access and business-specific permissions. Team roles limit access to administrative functions. Optional passkeys and two-factor authentication provide additional account protection. Platform-owner access supports checks, reports and authorised support, with audit records for support changes. These measures reduce risk but cannot guarantee that every security incident will be prevented.

Report suspected unauthorised access through Support without sending passwords or recovery codes. If a personal-data breach requires notification under applicable law, we will notify the relevant authority and affected people as required.

Public information and AI matching

Information about a sole trader or named business representative may be personal information even when it appears on a company website or public register. You can ask about its source, request a correction or object to its use. Preparing an unclaimed business record does not override these rights.

OpenAI recommendations compare published business information and suggest possible connections. They do not determine business verification, make contracts or send introductions for you. The Privacy Policy explains the information sent and retained. Contact us to challenge inaccurate information or raise an objection to automated matching involving your personal information.

United States

Privacy rights vary by state and by whether a law applies to the business and processing. They can include access, correction, deletion, portability and choices about certain uses or disclosures. We do not claim that every US state law applies identically. For example, the California Attorney General explains CCPA rights and applicability. Contact us to exercise an applicable right or ask for a review of our response.

We do not sell personal information or share it for cross-context behavioural advertising. Where applicable law provides an appeal, authorised-agent or opt-out right, you can contact us to exercise it. We will not penalise you for exercising an applicable privacy right.

Canada

Federal PIPEDA and applicable provincial laws can govern commercial handling of personal information. Rights may include access, correction and withdrawal of consent, subject to legal conditions. English-language delivery does not remove provincial privacy or language requirements. You can contact the Office of the Privacy Commissioner of Canada or the relevant provincial authority.

Australia

Where the Privacy Act 1988 and Australian Privacy Principles apply, they include rules about collection, use, security, overseas disclosure, access and correction. Applicability includes specific thresholds and exceptions. The Office of the Australian Information Commissioner explains rights and complaint routes.

New Zealand

The Privacy Act 2020 can apply to overseas organisations doing business in New Zealand. Its principles cover purposes, security, access, correction, retention and disclosure, including safeguards for overseas disclosure. See the Office of the Privacy Commissioner for independent guidance and complaints.

Introductions and independent businesses

Both businesses choose whether to share introduction contacts. Recipients are responsible for their own use of those details and must respect the agreed purpose and requests to stop contact. You can block or report a business from an introduction, or contact Support.

Being a business customer does not automatically remove the rights of individual employees, representatives or sole traders. Equally, a request for information about a person does not automatically entitle someone to confidential information about other people or businesses. We assess each request against the law that applies.

The Privacy Policy explains the information we use, who receives it and the criteria for keeping it. You can change optional analytics permissions through Cookie preferences at any time. Contact us if you need help exercising a right or want an explanation of a decision about your information.