Legal

Privacy Policy

Last updated: 19 September 2026

Before you publish: replace [COMPANY NAME], [CONTACT EMAIL] and [POSTAL ADDRESS] below with your real details, and set the "Last updated" date. This is a general template, not legal advice — please have it reviewed before launch, particularly before Lyra begins handling financial data.

This policy explains how Lyra ("we", "us", "our") — operated by [COMPANY NAME] — collects, uses and protects your personal information when you visit this website and join our waitlist. We are the "data controller" for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What we collect

At this pre-launch stage we keep data collection to a minimum:

  • Your email address, when you submit it to join the waitlist.
  • A source label that simply records that the sign-up came from this landing page.
  • Basic technical data that our hosting and form providers log automatically, such as your IP address, browser type and the time of your request. This is standard for almost all websites and is used for security and to keep the service running.

We do not ask for your name, financial information or any bank details on this website.

2. How we use your information

  • To add you to the Lyra waitlist and let you know when we launch.
  • To send you occasional early-access news, product updates and money tips related to Lyra, as described when you signed up.
  • To understand how many people are interested and improve what we're building.
  • To keep the website secure and functioning.

We will not send you unrelated marketing, and we never sell your data.

3. Our lawful basis

Under UK GDPR we rely on:

  • Your consent — you choose to give us your email to join the waitlist, and you can withdraw that consent at any time by unsubscribing or contacting us.
  • Our legitimate interests — in operating a secure website and gauging interest in the product, balanced against your rights.

4. Who we share it with

We share your data only with trusted service providers who help us run the site, and only so far as they need it to do that. These currently include:

  • Our hosting provider (Vercel), which serves the website and keeps standard server logs.
  • Our waitlist / email provider, which stores your email address and helps us contact you. [Name your provider here once chosen — e.g. Formspree, ConvertKit, Mailchimp.]
  • Google Fonts, which serves the site's typeface. When the page loads, Google may receive your IP address. You can avoid this by self-hosting the fonts.

Some of these providers may process data outside the UK or European Economic Area. Where they do, they are required to protect it to a standard equivalent to UK law (for example, via standard contractual clauses or an adequacy decision).

5. How long we keep it

We keep your waitlist email until Lyra launches and for a reasonable period afterwards, or until you ask us to remove it — whichever comes first. Technical logs are kept only for as long as our providers retain them for security and operational purposes.

6. Your rights

Under UK data protection law you have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct anything that's inaccurate.
  • Ask us to delete your data ("right to erasure").
  • Object to or restrict how we use it.
  • Withdraw your consent at any time.
  • Ask for a copy of your data in a portable format.

To exercise any of these, email us at [CONTACT EMAIL]. You can also unsubscribe from our emails at any time using the link in any message we send. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies and tracking

This website does not currently set advertising or tracking cookies. If we add analytics or other tools in future, we'll update this policy and, where required, ask for your consent first.

8. Security

We use reasonable technical and organisational measures to protect your information, and we work with providers that maintain their own security controls. No method of transmission over the internet is ever completely secure, but we take protecting your data seriously.

9. Children

Lyra is intended for adults who are self-employed. It is not directed at children, and we do not knowingly collect data from anyone under 18.

10. Changes to this policy

We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top of this page.

11. Contact us

[COMPANY NAME]
[POSTAL ADDRESS]
Email: [CONTACT EMAIL]