Privacy Policy

1. Who We Are

Lexgit is a legal AI maturity assessment platform operated by Synctronic Ltd, a company registered in England and Wales (Company No. 16815380) ("we", "us", "our").

For the purposes of applicable data protection laws—including the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, and the EU General Data Protection Regulation ("EU GDPR")—Synctronic Ltd is the data controller in respect of any personal data processed through the Platform.

📧 support@lexgit.com 🌐 https://synctronic.uk

2. Our Approach to Privacy

Lexgit is designed with privacy in mind. We do not collect identifying personal information during the assessment process. You can complete the full assessment and download your results without providing any identifying information.

We collect the minimum data necessary to operate and improve the Platform. We do not sell your personal data. We do not build profiles of individual users.

3. What Data We Collect and Why

Professional and Organisational Context (Required)

To generate a meaningful and accurate Assessment Output, the following information is required:

Your role (selected from a dropdown list)
Your organisation's industry (selected from a dropdown list)
The size of your organisation
The size of your legal or relevant team

This information is not linked to your identity and is used exclusively to contextualise your assessment responses and produce your Assessment Output.

Legal basis: Legitimate interests — this data is necessary to deliver the core service you have requested

Assessment Responses (User Inputs)

Your answers to the structured assessment questions form the basis of your Assessment Output.

What we collect: Your question responses and the Assessment Output generated from them

Why we collect it: To generate your personalised Assessment Output

Legal basis: Legitimate interests — processing is necessary to deliver the service you have requested

Aggregated and Anonymised Data

We may combine assessment responses with organisational context data — such as industry sector, organisation size, and team size — to produce anonymised, aggregated statistical insights. This data cannot identify you or your organisation and is used for research, benchmarking, and industry reporting purposes.

Technical and Usage Data

When you access the Platform, certain technical data is automatically collected by our servers and third-party infrastructure providers. This may include:

IP address
Browser type and version
Device type and operating system
Pages visited and time spent on the Platform
Date and time of access
Referring URL

Why we collect it: To maintain the security and performance of the Platform, detect misuse, and understand how the Platform is used

Legal basis: Legitimate interests — ensuring the security, integrity, and improvement of the Platform

Communications

If you contact us directly — for example by emailing support@lexgit.com to report a technical issue — we will collect the information you include in that communication, such as your email address and the content of your message.

Why we collect it: To respond to your enquiry and resolve any issues

Legal basis: Legitimate interests — responding to user communications

4. What We Do Not Collect

To be explicit, Lexgit does not collect:

Payment or financial information
Sensitive personal data of any kind (such as health, political, or biometric data)
Data from third-party sources or social media platforms
Any information beyond what is described in Section 3

5. How We Use Your Data

We use the data we collect for the following purposes:

To generate and deliver your Assessment Output
To maintain the security, stability, and performance of the Platform
To detect, investigate, and prevent misuse or unauthorised access
To produce anonymised, aggregated research and benchmarking reports based on collective assessment data
To respond to any communications you send us
To comply with our legal obligations

6. Third-Party Services and Data Processors

To deliver the Platform, we work with a limited number of third-party service providers who may process data on our behalf. These include:

6.1 Infrastructure and AI Model Provider

The Platform is hosted on third-party cloud infrastructure, Manus, which also provides AI technology to generate Assessment Outputs from your responses based on our logic. Your assessment responses are transmitted to Manus's systems for processing. Manus acts as a data processor on our behalf and is subject to appropriate data processing terms. Our provider operates under appropriate security and data protection standards.

For more information on how Manus handles data, please refer to its privacy documentation at https://manus.im/privacy

6.2 Analytics

We use Google Analytics in a strict, cookieless configuration to understand Platform usage. Where it is used, they are configured to minimise data collection and prevent individual identification.

We do not share your personal data with third parties for marketing, advertising, or commercial profiling purposes.

7. International Data Transfers

Synctronic Ltd is based in the United Kingdom. To operate the Platform, we may engage third-party service providers located in jurisdictions outside the UK and the European Economic Area (EEA). Whenever data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK and EU GDPR requirements. This includes relying on Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms recognised under applicable data protection law.

8. Data Retention

We retain data for a period of 5 years from the date of collection, unless you request deletion earlier or we are required by law to retain it for a different period.

Specifically:

Assessment responses: Retained for up to 5 years for service delivery, quality assurance, and research purposes, then permanently deleted or fully anonymised
Technical and usage data: Retained for up to 12 months for security and performance monitoring purposes, then deleted
Communications: Retained for up to 5 years from the date of the communication, then deleted
Anonymised aggregated data: Retained indefinitely as it no longer constitutes personal data and cannot identify any individual

9. Security

We take the security of your data seriously. We implement appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular security reviews.

However, no system is entirely without risk. If you have concerns about the security of the Platform, please contact us at support@lexgit.com.

10. Your Rights

Under the UK GDPR and EU GDPR, you have the following rights in relation to your personal data:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate or incomplete data
Right to erasure — to request deletion of your personal data in certain circumstances
Right to restriction — to request that we limit how we use your data in certain circumstances
Right to object — to object to processing based on legitimate interests
Right to data portability — to receive your data in a structured, commonly used format where applicable

Important: Because the assessment is completed entirely anonymously, we do not hold identifying information to link you to specific assessment data. Consequently, we may be unable to fulfill data access or erasure requests without further technical information (such as specific timestamps or session identifiers) to locate your anonymous inputs.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's data protection supervisory authority — at any time:

🌐 https://ico.org.uk 📞 0303 123 1113

If you are located in the European Economic Area (EEA), you also have the right to lodge a complaint with your local data protection supervisory authority.

11. Cookies

The Platform may use strictly necessary cookies or similar technologies to ensure basic functionality — for example, to maintain your session while completing the assessment or to remember your Terms of Service acceptance.

We do not currently use cookies for advertising, tracking, or profiling purposes. If this changes, we will update this Policy and, where required by law, seek your consent before placing non-essential cookies.

12. Children

Lexgit is intended for professional and business use only. The Platform is not directed at individuals under the age of 18. We do not knowingly collect data from minors. If you believe a minor has used the Platform, please contact us at support@lexgit.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the Platform, our data practices, or applicable law. Where changes are material, we will display a notice on the Platform and update the version date at the top of this document.

We encourage you to review this Policy periodically. Your continued use of the Platform after any update constitutes acceptance of the revised Policy.

14. Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your data, please contact:

Synctronic Ltd
Registered in England and Wales — Company No. 16815380
📧 support@lexgit.com
🌐 https://synctronic.uk

We will respond to all legitimate enquiries within 30 days.