Privacy Policy

Last updated: 16 July 2026

This notice explains how Lanyard handles personal data within the Lanyard Staff and CRM System. The data controller is Lanyard / Benjamin Mercer. For any privacy questions or to exercise your rights, contact benmercer76@btinternet.com.

What we process

• Staff account details: username, email, name, date of birth, preferred language, and a hashed password.
• Attendance records: clock-in/out times, shifts, and rota assignments.
• Device and network data: client device IP addresses and network interface addresses.
• Security logs, which may include IP addresses.

Why, and our legal basis

We process this data to manage staff access, to keep working-time records (a legal obligation and part of your employment), and to operate and secure our venue systems (our legitimate interests).

Retention

We keep personal data only as long as necessary for these purposes and to meet legal obligations. Retention periods are set out in our internal data-retention policy.

Your rights

You have the right to access, correct, erase, or restrict processing of your personal data, and to object to processing. To exercise these, contact benmercer76@btinternet.com. You may also complain to the Information Commissioner's Office (ICO).

Cookies

Lanyard uses only strictly-necessary cookies: an authentication cookie to keep you signed in (up to 14 days) and an antiforgery token to protect forms. These are essential to the service and are not used for tracking or analytics.