Privacy Notice

This page is maintained by Lynn Baker (trading through CX Company) to explain how personal information submitted through this website is collected, used, stored and protected. It is written to align with the South African Protection of Personal Information Act (POPIA) and the EU General Data Protection Regulation (GDPR).

The Responsible Party / Data Controller is Lynn Baker. If you have any questions about this notice or your personal information, contact lynn@cx-company.com.

1. What we collect

We only collect information you choose to submit through the enquiry and booking forms on this site. Depending on which form you use, this may include:

• Your name
• Email address
• Company or organisation
• Phone / WhatsApp number (optional)
• Event details (approximate date, location, audience size, format, indicative budget)
• Any message or context you provide

We do not knowingly collect special categories of personal information, and we do not run marketing cookies or third-party advertising trackers on this site.

2. Why we collect it

The information is used solely to:

• Respond to your enquiry about speaking, fees or availability
• Prepare a proposal or quote for your event
• Coordinate logistics if a booking is confirmed
• Keep a record of the enquiry for reference and follow-up

Our legal basis is your consent, given via the tick-box on each form at the point of submission. You may withdraw that consent at any time (see section 6).

3. Where it goes

Submissions are stored in a private database hosted on Lovable Cloud (which runs on Supabase infrastructure) and are accessible only to Lynn Baker and authorised assistants. A copy is also sent to Lynn's email inbox, and — if you choose to open the WhatsApp preview — the message you send is delivered via WhatsApp. We do not sell, rent or share your personal information with third parties for marketing.

4. How long we keep it

Enquiry records are kept for up to 24 months from your last interaction, so we can pick up the conversation if you come back to us. Records connected to a confirmed booking are kept for up to 7 years to comply with tax and accounting obligations. After these periods, the information is deleted or anonymised.

5. How we protect it

Data is transmitted over HTTPS and stored in a database protected by row-level security policies, so only authorised accounts can read submissions. Access is limited to Lynn Baker and people acting on her behalf, under an obligation of confidentiality.

6. Your rights

Under POPIA and GDPR you have the right to:

• Ask what personal information we hold about you
• Request that inaccurate information be corrected
• Request that your information be deleted
• Withdraw your consent to further processing at any time
• Object to the processing of your information
• Lodge a complaint with the South African Information Regulator (inforeg@justice.gov.za) or your local EU data protection authority

To exercise any of these rights, email lynn@cx-company.com and we will respond within 30 days. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Cookies

This site does not set advertising or tracking cookies. Any cookies used are strictly necessary to serve the pages and remember display preferences.

8. Changes to this notice

We may update this notice from time to time. The "last updated" date at the top of this page will always reflect the most recent change. Material changes will be highlighted on the site.

9. Contact

Lynn Baker · CX Company
Email: lynn@cx-company.com