Privacy Policy
Effective Date: August 6, 2026
Last Updated: August 6, 2026
This Privacy Policy explains how [LEGAL ENTITY NAME], a Kansas [limited liability company / corporation]doing business as SYNS (“SYNS,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you visit our website, contact us, or engage with our marketing, strategy, research, and consulting services.
For purposes of applicable data protection laws, [LEGAL ENTITY NAME] is the controller of the personal information described in this Privacy Policy unless otherwise stated.
1. Personal Information We Collect
We may collect the following categories of personal information.
Information You Provide to Us
When you complete a contact form, communicate with us, request information, or discuss a potential engagement, we may collect:
Your name
Your work email address
Your company or organization
Your job title or professional role
The business challenges or services you are interested in
Information you include in messages, forms, emails, or other communications
Meeting details and correspondence
Any other information you voluntarily provide
Please do not submit sensitive personal information, confidential customer information, payment card information, health information, government identification numbers, passwords, or other information that is not necessary for your enquiry.
Client and Business Relationship Information
If you become a client, partner, supplier, contractor, or other business contact, we may also collect:
Business contact details
Contract and project information
Billing and transaction records
Project communications
Materials, documents, and data provided for an engagement
Feedback and information relating to our business relationship
Specific client projects may be subject to additional contractual terms, including a services agreement, statement of work, confidentiality agreement, or data processing agreement.
Website and Technical Information
Our website hosting and infrastructure providers may process limited technical information needed to operate, deliver, secure, and troubleshoot the website. This may include:
Internet Protocol address
Browser and device type
Operating system
Date and time of access
Requested pages or resources
Referring website
Security and diagnostic logs
We currently use Hostinger Website Builder’s built-in traffic analytics. This provides aggregated information such as session counts, visitor country, device category, and traffic over time.
According to Hostinger, its built-in Website Builder analytics is provided through Cloudflare’s content delivery network, does not use analytics cookies, does not collect personal data for the analytics report, and does not connect the collected analytics information with activity on other websites.
2. How We Use Personal Information
We may use personal information to:
Respond to enquiries and contact requests
Evaluate whether our services are appropriate for your business
Arrange meetings and communicate with you
Prepare proposals, estimates, contracts, and statements of work
Provide consulting, research, strategy, marketing, content, and related services
Manage client and business relationships
Process invoices and maintain financial records
Improve our website, services, communications, and business operations
Protect our website, systems, business, clients, and users
Prevent fraud, misuse, and security incidents
Establish, exercise, or defend legal claims
Comply with applicable laws, regulations, tax requirements, and legal processes
Send marketing communications where permitted by law
We will not use personal information for materially different purposes without providing appropriate notice or obtaining consent where required.
3. Legal Bases for Processing
Where the European Economic Area GDPR or UK GDPR applies, we rely on one or more of the following legal bases:
Steps Taken Before Entering a Contract
We may process your information when you ask us to provide information, evaluate a project, prepare a proposal, or take other steps before entering into a contract.
Performance of a Contract
We may process personal information when necessary to provide contracted services, manage a client engagement, issue invoices, or perform our contractual obligations.
Legitimate Interests
We may process personal information when necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
These interests may include:
Responding to business enquiries
Operating and securing our website
Managing professional relationships
Improving our services
Protecting our legal rights
Conducting reasonable business-to-business marketing
Consent
We may rely on consent where required, including for certain marketing communications or non-essential tracking technologies.
You may withdraw your consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.
Legal Obligations
We may process personal information when necessary to meet accounting, taxation, regulatory, legal, or law-enforcement obligations.
4. How We Disclose Personal Information
We may disclose personal information to the following categories of recipients.
Hosting and Technology Providers
We may use third-party companies to provide website hosting, content delivery, security, email, cloud storage, communications, scheduling, document management, and other technology services.
These providers may include Hostinger and other providers that we select as our business operations develop.
Professional Advisers
We may disclose information to attorneys, accountants, insurers, consultants, and other professional advisers where reasonably necessary.
Contractors and Service Providers
We may disclose information to contractors or service providers that assist us with client services, research, design, content production, marketing operations, administration, or technical work.
Such parties are permitted to use personal information only for the purposes for which it was provided and subject to appropriate contractual obligations where required.
Legal and Safety Disclosures
We may disclose information when we reasonably believe disclosure is necessary to:
Comply with a law, regulation, subpoena, court order, or legal process
Respond to a lawful request from a public authority
Protect the rights, property, or safety of SYNS, our clients, users, or others
Investigate fraud, misuse, or security incidents
Establish, exercise, or defend legal claims
Business Transactions
If SYNS is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, personal information may be disclosed as part of that transaction, subject to appropriate confidentiality protections.
5. Sale and Sharing of Personal Information
We do not sell personal information for monetary consideration.
We do not currently share personal information for cross-context behavioral advertising or use personal information to deliver targeted advertising across unrelated websites.
If our practices change, we will update this Privacy Policy and provide any opt-out mechanisms required by applicable law.
6. Cookies and Similar Technologies
Our website may use technologies that are strictly necessary to operate, secure, and deliver the website.
We currently use Hostinger Website Builder’s built-in, cookie-free traffic analytics. We do not currently use third-party advertising pixels or third-party behavioral analytics tools such as Meta Pixel, Hotjar, or Google Analytics.
If we later introduce non-essential analytics, advertising, personalization, or tracking technologies, we will update this Privacy Policy and, where required, obtain consent before those technologies are activated.
You may also control cookies through your browser settings. Disabling strictly necessary technologies may affect the operation of certain website functions.
7. International Data Transfers
SYNS is operated by a business established in the United States.
If you access our website or communicate with us from outside the United States, your personal information may be transferred to, stored in, or processed in the United States or other countries in which our service providers operate.
Privacy laws in those countries may differ from the laws where you live.
Where applicable law requires additional safeguards for an international transfer, we will use appropriate safeguards, which may include contractual protections, approved standard contractual clauses, adequacy mechanisms, or another legally permitted transfer method.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Our typical retention periods are:
General enquiries that do not result in a client relationship: up to 24 months after the last meaningful communication
Client and project records: for the duration of the engagement and generally up to seven years afterward
Contracts, invoices, tax, and accounting records: for the period required by applicable law
Marketing contact information: until you unsubscribe, object, or we determine that the information is no longer current
Security and technical records: for as long as reasonably necessary for security, troubleshooting, and legal purposes
We may retain information for a longer period when reasonably necessary to comply with legal obligations, resolve disputes, enforce agreements, or establish, exercise, or defend legal claims.
When information is no longer required, we will delete it, anonymize it, or securely isolate it from further use where deletion is not immediately possible.
9. Your Privacy Rights
Depending on where you live and the laws that apply, you may have the right to:
Request access to personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your personal information
Request restriction of certain processing
Object to processing based on legitimate interests
Object to direct marketing
Request a portable copy of certain information
Withdraw consent
Opt out of certain sales, sharing, profiling, or targeted advertising practices
Appeal a decision concerning a privacy request
Make a complaint to an applicable data protection authority
These rights are not absolute and may be subject to legal exceptions.
To exercise a privacy right, contact us using the details in the “Contact Us” section below. Please describe your request and identify the email address or other information associated with your interaction with us.
We may need to verify your identity before completing a request. We will use information provided for verification only to process and respond to the request.
Where permitted by law, an authorized agent may submit a request on your behalf. We may request evidence that the agent has authority to act for you.
We will not unlawfully discriminate against you for exercising an applicable privacy right.
European Economic Area and United Kingdom Complaints
Individuals in the European Economic Area or United Kingdom may have the right to submit a complaint to the data protection authority in the country where they live or work, or where they believe a violation occurred.
We encourage you to contact us first so that we have an opportunity to address your concern.
10. Marketing Communications
We may send marketing communications to professional contacts where permitted by applicable law.
You can opt out of marketing emails by:
Using the unsubscribe link contained in the email
Replying to the email and requesting removal
Contacting us at the email address listed below
Even after you opt out of marketing messages, we may continue to send non-marketing communications relating to an enquiry, contract, project, invoice, security matter, or existing business relationship.
We do not purchase bulk consumer email lists for unsolicited marketing.
11. Data Security
We use reasonable administrative, organizational, and technical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse.
However, no website, email system, cloud service, or electronic transmission is completely secure. We cannot guarantee absolute security.
You should avoid sending sensitive, confidential, or legally privileged information through the website contact form unless we have agreed on an appropriate secure method.
12. Children’s Privacy
Our website and services are intended for businesses and professional users. They are not directed to children under the age of 16.
We do not knowingly collect personal information from children through the website. If you believe a child has provided personal information to us, please contact us so that we can investigate and, where appropriate, delete it.
13. Third-Party Websites
Our website may contain links to websites or services operated by third parties.
We are not responsible for the privacy, security, content, or practices of third-party websites. You should review the privacy policies of those third parties before providing them with personal information.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes to our services, technology, business practices, or legal obligations.
When we make changes, we will revise the “Last Updated” date at the top of this page. If changes are material, we may provide additional notice where required by law.
15. Contact Us
Questions, concerns, or privacy requests may be submitted to:
[LEGAL ENTITY NAME]
Doing business as SYNS
[BUSINESS OR MAILING ADDRESS]
Kansas, United States
Email: [PRIVACY EMAIL ADDRESS]
Please include “Privacy Request” in the subject line when submitting a privacy rights request.