Privacy Policy

Last updated: 26 September 2026 · Effective: 26 September 2026

1. Who we are

Syncfully (“Syncfully”, “we”, “us” or “our”) operates the website at syncfullytech.com and provides communication infrastructure services that unify messaging and communication providers behind a single API.

For the purposes of the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) and other applicable data protection laws, Syncfully is the data controller in respect of the personal data described in this policy. You can reach us at info@syncfullytech.com.

2. Scope of this policy

This policy applies to:

• This website. Your visit to syncfullytech.com and any information you send us through it.
• Our business communications. Enquiries, demos, proposals and correspondence with prospective and existing customers, partners and suppliers.

Where we process messages or personal data on behalf of a business customer as part of the Syncfully service, we act as a data processor. In that situation, the customer is the controller, and their agreement with us — including any data processing agreement — governs that processing. This policy does not apply to that processing. If you are an end user of one of our customers and have a question about your data, please contact the business you were communicating with.

3. Data we collect

Information you provide to us

When you email us, book a demo or otherwise get in touch, we may receive:

• your name, email address, telephone number and company or organisation;
• your role or job title, where you share it;
• the content of your message and any attachments you send;
• details of the products or services you are interested in.

If you become a customer, we may also process account, billing and contact details, and records of our communications with you. Where we need to collect personal data to enter into a contract with you, we will make clear what is required and why.

Information collected automatically

Like most websites, our hosting infrastructure records standard technical information when a page is requested. This typically includes:

• your IP address;
• the browser and operating system your device reports (user agent);
• the page or file requested, and the date and time of the request;
• the referring page, where one is sent.

We use this information only to keep the site available, secure and protected against abuse. It is not used to build profiles of visitors, and it is not combined with other information to identify you.

What we do not collect

We do not ask for, or knowingly collect, special category data (such as health, religious or biometric information) through this website, and we do not collect payment card details here. Please do not send us confidential or sensitive information until we have agreed a secure way to share it.

4. Cookies and tracking

This website does not set cookies and does not use analytics, advertising pixels, fingerprinting or any other cross-site tracking technology. Because of this, you will not see a cookie banner — there is nothing to consent to.

If we ever introduce cookies or similar technologies, we will update this policy first and, where the law requires it, ask for your consent before setting anything on your device.

5. How and why we use data

We use personal data for the following purposes. Where the UK/EU GDPR applies, we have identified the lawful basis for each purpose.

• Responding to your enquiries and providing information you have asked for — necessary for steps prior to entering a contract, or our legitimate interests in operating our business.
• Providing, supporting and administering our services to customers — performance of a contract.
• Keeping this website secure and preventing spam, fraud and abuse — our legitimate interests in protecting our systems and users.
• Sending service and administrative messages, such as changes to our terms or important notices — performance of a contract or our legitimate interests.
• Sending marketing about our products, where permitted — your consent where required, otherwise our legitimate interests in promoting our business. You can opt out at any time.
• Complying with legal obligations, such as tax, accounting and regulatory requirements — legal obligation.
• Establishing, exercising or defending legal claims — our legitimate interests.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects, and we do not use it to train general-purpose artificial intelligence models.

6. Sharing and disclosure

We do not sell personal data, and we do not share it for cross-context behavioural advertising. We share personal data only as follows:

• Service providers. Companies that help us run our business and this website, such as our hosting and infrastructure provider (Cloudflare), our email provider and our IT service providers. They may only process personal data on our instructions and under written terms that require appropriate security and confidentiality.
• Professional advisers. Lawyers, accountants and auditors, where necessary for the services they provide to us.
• Authorities and legal proceedings. Where we are required to do so by law, or where it is necessary to establish, exercise or defend legal claims or to protect the rights, property or safety of Syncfully, our customers or others.
• Business transactions. If we are involved in a merger, acquisition, financing or sale of assets, personal data may be disclosed or transferred as part of that transaction, subject to this policy and appropriate safeguards.

7. International transfers

Our hosting infrastructure is operated by Cloudflare, which runs a global network. As a result, personal data may be processed in countries outside the United Kingdom or the European Economic Area, including the United States.

Where we transfer personal data out of the UK or EEA, we rely on appropriate safeguards — such as the UK International Data Transfer Agreement (IDTA) or Addendum, or the European Commission’s Standard Contractual Clauses — together with a transfer risk assessment where required. You can ask us for more information about the safeguards we use by emailing info@syncfullytech.com.

8. Retention

We keep personal data only for as long as we need it for the purposes described in this policy, and then delete or anonymise it. In practice:

• Enquiries and correspondence that do not lead to a customer relationship are typically kept for up to 24 months, so we can pick up the conversation if you return.
• Customer and contract records are kept for the duration of the relationship and afterwards for as long as we need to meet legal, tax and accounting requirements, or to handle claims.
• Technical logs from our hosting provider are retained for a short period, typically days to weeks, for security and troubleshooting purposes.

When the retention period ends, we securely delete the data or, where deletion is not possible, irreversibly anonymise it.

9. Security

We take the security of personal data seriously. We use transport encryption (HTTPS/TLS), access controls and the principle of least privilege, secure configuration of our hosting and email services, and we limit the people who can access personal data to those who need it.

No method of transmission or storage is completely secure. If you believe you have found a security issue, or you are concerned about the security of data you have shared with us, please contact us as soon as possible at info@syncfullytech.com.

10. Your rights

If you are in the UK, EU or another jurisdiction with similar laws

You have the right to:

• access the personal data we hold about you, and receive a copy of it;
• rectify data that is inaccurate or incomplete;
• erase data in certain circumstances (the “right to be forgotten”);
• restrict how we use your data in certain circumstances;
• port data you provided to us to another organisation, in a common machine-readable format;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• withdraw consent at any time where we rely on consent — this does not affect processing carried out before you withdrew it.

You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner’s Office (ico.org.uk). If you are in the EEA, you can contact your local supervisory authority.

If you are in the United States

Depending on where you live, you may have rights under state privacy laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and similar laws in other states. Subject to those laws, you have the right to:

• know what categories of personal data we have collected, the sources, and how we use and share it;
• access and receive a copy of your personal data;
• correct inaccurate personal data;
• delete personal data, subject to certain exceptions;
• opt out of the sale or sharing of personal data — we do not sell personal data and we do not share it for cross-context behavioural advertising;
• limit the use and disclosure of sensitive personal data — we do not collect sensitive personal data through this website for the purpose of inferring characteristics about you;
• not be discriminated against for exercising your rights.

You may exercise these rights yourself or through an authorised agent. We will verify your request using the information you provide, and we aim to respond within the timeframe required by the applicable law (normally 45 days in California).

How to exercise your rights

Email info@syncfullytech.com with your request. Please tell us the jurisdiction you are in and enough information about your interaction with us that we can locate any data we hold. We will respond within the timeframes required by law.

11. Children

This website and our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children under 16 (or under 13 in the United States). If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices, our services or the law. When we do, we will revise the “last updated” date at the top of this page. If the changes are material, we will take reasonable steps to bring them to your attention — for example, by placing a notice on this website.

13. Contact

If you have any questions about this policy, or about how we handle personal data, please contact us:

Syncfully — Privacy enquiries
Email: info@syncfullytech.com

We will do our best to resolve any concern you raise. If you are not satisfied, you also have the right to complain to your local data protection authority.