Privacy Policy

1. Introduction

Sourcelyn Ltd (“Sourcelyn”, “we”, “us”, or “our”) is committed to protecting the privacy and security of your personal data. This privacy policy describes how we collect, use, store, and share information when you use our website (sourcelyn.com) and our expert network services.

Sourcelyn Ltd is registered in England and Wales. For the purposes of applicable data protection legislation (including the UK GDPR and the Data Protection Act 2018), we are the data controller.

2. Information We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, company name, job title, and phone number — provided when you submit a brief, apply as an expert, or contact us.
• Professional information: Current employer, job title, industry sector, seniority level, areas of expertise, and geographic location — collected from experts who join our network.
• Usage data: IP address, browser type, pages visited, and referring URLs — collected automatically when you visit our website.
• Communication data: Content of emails, form submissions, and correspondence between you and our team.

3. How We Use Your Information

We use personal data for the following purposes:

• To match experts with client research briefs
• To verify expert identity, employment status, and credentials
• To conduct compliance and conflict-of-interest screening
• To communicate with you about engagements, scheduling, and payments
• To send occasional updates about our services (with your consent)
• To improve our website and services through aggregated analytics
• To comply with legal obligations and regulatory requirements

4. Legal Basis for Processing

We process personal data on the following legal bases under UK GDPR:

• Contractual necessity: Processing required to deliver our expert network services.
• Legitimate interests: Processing for business operations, service improvement, and fraud prevention, where those interests are not overridden by your rights.
• Consent: Where you have given explicit consent, such as for marketing communications.
• Legal obligation: Where we are required to process data to comply with law or regulation.

5. Data Sharing

We share personal data only in the following circumstances:

• With clients, to facilitate expert matching (limited to professional profile information — never personal contact details without consent)
• With service providers who assist our operations (e.g., email infrastructure, payment processing) under appropriate data processing agreements
• Where required by law, regulation, or court order
• In connection with a merger, acquisition, or asset sale (with appropriate safeguards)

We never sell personal data to third parties.

6. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations. Expert profile data is retained for 24 months from the last engagement. Client data is retained for the duration of the business relationship plus 6 years for accounting and legal purposes. You can request deletion at any time.

7. Your Rights

Under UK GDPR, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data
• Right to restriction — request that we limit how we process your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for marketing
• Right to withdraw consent — where processing is based on consent

To exercise any of these rights, contact us at [email protected].

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, access controls, and regular security reviews.

9. International Transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses and adequacy decisions.

10. Contact

If you have questions about this privacy policy or our data practices, contact us at: