This Privacy Policy explains how Syntera Limited (“Syntera”, “we”, “us”, “our”) processes personal information collected through this website and through direct interactions initiated via this website. It is written for clarity and practical compliance with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

1. Scope and role

Syntera is the controller of personal information collected via this site. This Policy applies to visitors and users of the site. It does not cover third-party websites that we link to; those are governed by their own policies.

2. Categories of data we may process

Contact and enquiry data: details you submit in forms or emails (e.g., name, professional role, email, phone) and the content of your message.
Technical data: device, browser, language, IP address, timestamps, pages viewed, and referrer URL generated by your visit.
Preference data: cookie or local storage choices you make on our site. See Cookie Preferences.

Client matter data (if you become a client): information provided during an engagement, including correspondence and project documentation.
Communications: emails or messages exchanged following an enquiry through this site.

3. Sources of data

Information you provide directly through forms or email links on this site.
Information generated by your use of this site (technical and usage data).
Information provided during a subsequent commercial engagement (if applicable).

4. Purposes and lawful bases

Responding to enquiries and providing requested information or proposals.
Operating and improving the site, including security, performance, and analytics.
Entering into and performing contracts if you engage Syntera for services.
Complying with legal obligations where required by law or regulation.
Marketing communications where you have actively opted in, with the ability to opt out at any time.

5. Retention

We keep personal information only as long as necessary for the stated purposes or as required by law. Enquiry data is typically reviewed periodically and deleted when no longer needed. Client matter records follow retention periods appropriate to the nature of the engagement and applicable regulation or professional standards.

6. Sharing

We do not sell personal data. We may disclose limited information to service providers who help operate the site or deliver services (for example, secure hosting). These providers are bound by contractual obligations to handle data lawfully and securely. We may also disclose information if required to do so by law or to protect our rights.

7. International transfers

Where a service provider is located outside the UK, we will implement safeguards required by law for such transfers, such as UK IDTA or other appropriate contractual protections. If a transfer cannot be safeguarded appropriately, we will not make the transfer.

8. Security

We apply administrative, technical, and organisational measures proportionate to the risks presented by processing. No website can guarantee absolute security. We monitor and improve controls as reasonable in light of evolving threats and technology.

9. Your rights

Access to your personal data.
Rectification of inaccurate or incomplete data.
Erasure in specific circumstances.
Restriction of processing in specific circumstances.
Data portability where applicable.
Objection to processing based on legitimate interests or direct marketing.
Withdrawal of consent where processing relies on consent.

To exercise rights, use the contact details published on our Contact page. We will respond in accordance with legal timeframes. You also have the right to complain to the UK Information Commissioner’s Office.

10. Cookies and similar technologies

See our Cookie Preferences for details on categories of cookies, how choices work, and how to manage settings in your browser.

11. Changes to this Policy

We may update this Policy to reflect legal or operational changes. The “Last updated” date indicates the latest version.