Legal, Privacy & Security Centre
Lycia Limited is committed to transparency in how we collect, use and protect personal data. This centre provides access to all public legal, privacy and security documents.
Privacy Policy
How Lycia Limited collects, uses and protects personal data across all websites, portals and services.
Terms & Conditions of Use
The terms governing use of the Lycia Limited website and services.
Cookie Policy
How Lycia uses cookies and similar technologies, and how to manage your preferences.
Data Protection Policy
Lycia's internal data protection framework, governance and staff responsibilities.
Information Security Statement
Technical and organisational security measures protecting data processed by Lycia.
Personal Data Breach Policy
Protocols for detecting, assessing, reporting and remediating personal-data breaches.
Data Subject Rights
Your rights under UK GDPR and how to exercise them, including subject access requests.
Data Retention Schedule
How long different categories of data are retained and the basis for each period.
Subprocessors & Data Sharing
Third-party providers that may process data on behalf of Lycia.
Acceptable Use Policy
Acceptable use of Lycia's website, portals and digital services.
Client Portal Terms
Terms governing access to the Lycia Client Portal.
Secure Verification Terms
Terms applicable to secure verification links used for client onboarding.
Accessibility Statement
Lycia's commitment to accessibility and current compliance status.
Complaints Procedure
How to make a complaint and how Lycia handles it.
Contact the Privacy Team
Contact details for privacy, data protection and security enquiries.
All documents are in draft status
These policies have been drafted to reflect Lycia Limited's actual processing activities, integrations and platform architecture. They have not yet been formally approved by solicitor or data-protection review. No legal claims, certifications, encryption standards, penetration testing or compliance status should be inferred from these documents until the Master Administrator records formal approval. Retention periods marked "LEGAL REVIEW REQUIRED" have not been confirmed by legal, tax or provider requirements.
For privacy, data protection or security enquiries, please visit our Contact the Privacy Team page.