Privacy Policy

Data controller

LEGAL - PYTHIA LLP
Third Floor, 3 Hill Street, New Town, Edinburgh, Scotland, EH2 3JP
United Kingdom
Email: info@syncnetgroup.com

1. About this policy

This policy explains how we process personal data when you visit this website or contact us through it. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we process

• Server log data: When you visit this website, our hosting provider automatically processes standard technical access data (IP address, date and time of access, browser type, operating system, referrer URL). This data is technically necessary to deliver and secure the website.
• Communication data: If you contact us by email, we process the details you provide (name, email address, content of your message) to respond to your enquiry.
• Meeting booking data: If you book a meeting through our booking link, our provider Calendly processes the details you enter (name, email address, selected time slot). See section 5 below.

3. Cookies and tracking

This website does not use analytics, marketing, or tracking cookies. We do not track your browsing behaviour on this site.

4. Legal basis and purposes

• Operating this website (Art. 6(1)(f) UK GDPR): our legitimate interest in providing a secure and functioning website.
• Handling enquiries and meeting bookings (Art. 6(1)(b) UK GDPR): taking steps at your request prior to entering into a contract.
• Legal obligations (Art. 6(1)(c) UK GDPR): where we are legally required to process or disclose data.

5. Third-party providers

• Hosting: This website is hosted with a provider under a data processing agreement compliant with UK GDPR requirements.
• Meeting booking (Calendly): We use Calendly LLC (USA) for scheduling. Data transfers to the US take place under an appropriate safeguard mechanism. See Calendly's privacy policy at calendly.com/privacy.

6. Retention

• Server log data: deleted after 30 days at the latest, unless a security-related incident requires longer retention.
• Communication data: deleted once your enquiry has been fully resolved, unless we are subject to a legal retention requirement (e.g. accounting or tax obligations).

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you,
• Rectification of inaccurate data,
• Erasure of your data, where no legal retention obligation applies,
• Restriction of processing in certain circumstances,
• Data portability,
• Object to processing based on legitimate interests.

To exercise any of these rights, contact us at info@syncnetgroup.com. We respond to requests within one month.

You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ico.org.uk).

8. Changes to this policy

We review this policy periodically and update it if our processing activities or the applicable law changes. The current version is always available on this page.