1. Who is responsible

Lenya ApS is the data controller for personal data processed through this website. Questions or requests concerning your personal data can be sent to hello@lenya.ai.

When Lenya works with your company, personal data that Lenya processes on your company's behalf is covered by the data processing agreement signed with you, not by this policy.

ICO Registration

Lenya ApS is registered with the UK Information Commissioner’s Office. Our registration reference is ZC174427. The registration can be verified through the ICO’s public register.

2. Information we collect

When you book a consultation, Lenya collects your name, work email, company name, your company's number of employees and what you would like help with, and your LinkedIn profile if you choose to share it. If you contact Lenya by email, Lenya receives the information you include.

Website hosting and security services may process limited technical information, such as an IP address, browser type, requested page and event timestamps, where needed to deliver and protect the website.

3. Why we use it

• To respond to enquiries and take steps you request before a possible engagement.
• To arrange a consultation, prepare for it and follow up afterwards.
• To operate, secure and improve the website and submission process.
• To meet legal obligations and establish, exercise or defend legal claims.

Depending on the context, the legal basis is taking steps at your request before a contract, Lenya's legitimate interests in responding to business enquiries and operating a secure website, compliance with legal obligations, or consent where consent is specifically requested.

4. Service providers and transfers

Lenya may share personal data with providers that host the website, store form submissions, support communications, or provide security and operational infrastructure. They may process data only for the relevant service and under appropriate contractual safeguards. Lenya does not sell personal data.

If a provider processes personal data outside the European Economic Area, Lenya uses a legally recognised transfer mechanism where required, such as an adequacy decision or standard contractual clauses.

5. Retention and security

Enquiry and booking information is ordinarily kept for up to 12 months after the last substantive contact, unless a longer period is needed for an active engagement, a legal obligation, or a legal claim. Lenya applies reasonable technical and organisational measures intended to protect personal data.

6. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data. You may also object to certain processing and withdraw consent where processing relies on consent. Contact Lenya using the email above to exercise a right.

You may lodge a complaint with the Danish Data Protection Agency. It recommends contacting the organisation first so the matter can be addressed directly.

7. Updates

This policy may be updated when the website, forms or processing practices change. The effective date above identifies the latest version.