Synapsys Solutions Privacy Policy

Last updated: July 2026

Data Controller: Synapsys Solutions Ltd (Company No.4248470)

Synapsys Solutions (“us”, “we”, or “our”) operates the https://www.synapsys-solutions.com website (the “Service”).

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit https://www.synapsys-solutions.com (our “Website”), make a purchase, sign up to our newsletter, or otherwise interact with us.

Your privacy is extremely important to us, and we are dedicated to safeguarding the privacy of visitors to our website. All information you provide will be processed in accordance with the UK General Data Protection Regulation (UK GDPR), and applicable data protection laws.

This policy outlines your rights and choices regarding your personal data when you use our website and services.

Synapsys Solutions Ltd is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.

What Personal Data Do We Collect?

Category	Examples	When we collect it
Identity & Contact Data	First name, surname, email address, company name, telephone number	When you contact us, or subscribe to our newsletter
Communication Data	Any information you choose to include in the free-text message box when you submit an enquiry through our website contact form	When you use our enquiry contact form
Technical & usage data	IP address	Automatically when you browse our website
Marketing & communications data	Your marketing preferences, newsletter/offers	When you opt in/out

How We Use Your Personal Data (and Our Lawful Bases)

Category	Lawful basis (UK GDPR Art. 6)	Retention period
Respond to enquiries, or contact requests	Legitimate interests (to run our business and provide information you requested)	Until enquiry resolved + 12 months (or longer if it leads to a contract).
Provide, improve, and administer our Services	Performance of a contract (with your organisation)	Duration of service + 6 years (for legal/tax/dispute purposes).
Provide customer support	Legitimate interests (running our business)	3 years from last contact
Send marketing emails/newsletters (new products, news and insights)	Consent (you can withdraw at any time)	Until you unsubscribe
Comply with legal obligations (e.g. records for audits/tax)	Legal obligation	As required by law (e.g. 6 years for financial records).
Analyse website usage to improve our site/services	Legitimate interests (business improvement and security)	Up to 14–26 months (Google Analytics, anonymised where possible).

Who We Share Your Data With

Recipient	Purpose	Location	Safe Guards
ACT CRM	Storing contact details and sending our email newsletters & marketing communications.	UK	Cyber Essentials Certification
Google	For website analytics	USA	IDTA + TRA (for USA); adequacy for EEA
TAWK	Live Chat	USA	DPA in place, EU SCCs, UK Addendum, active  EU-U.S. DPF, active UK Extension, active Swiss-U.S. DPF, encryption, access controls and subprocessor controls

We never sell your personal data.

International Transfers

Some of our processors (e.g., Google, ACT CRM) are based in the USA. Where we transfer data to countries without a UK adequacy decision, we rely on appropriate safeguards under Chapter V of the UK GDPR (as amended by the Data (Use and Access) Act
2025), specifically the UK International Data Transfer Agreement (IDTA) and, where applicable, the UK Addendum to EU Standard Contractual Clauses, combined with a Transfer Risk Assessment (TRA) to ensure the level of protection for your data is “not materially lower” than under UK law.

Cookies & Similar Technologies

This website uses cookies and similar technologies. For full details, including categories of cookies and how to manage your preferences, please see our Cookie Policy. We obtain your consent where required under PECR before placing non-essential cookies.

You can withdraw consent or change settings at any time via the cookie banner or browser settings.

Your Rights Under UK GDPR

Under the UK General Data Protection Regulation (UK GDPR, as amended by the Data (Use and Access) Act 2025) you have the following rights:

Your right to be informed – You have the right to be informed about what personal data we collect and how we use it.
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
Your right to object to automated decision-making - We do not use automated decision making.

To exercise your rights, contact us at:

Email: enquiries@synapsys-solutions.com

Post: GDPR Lead, Synapsys Solutions Ltd, 1 Woodlands Court, Albert Drive, Burgess Hill, West Sussex, RH15 9TN
We will respond within 1 month (or up to 3 months for complex requests, as allowed under the UK GDPR). We will conduct reasonable and proportionate searches to fulfil your request.

You are not required to pay any charge for exercising your rights.

Your right to complain - You have the right to make a complaint at any time, if you wish to do so, please contact our GDPR Lead at: enquiries@synapsys-solutions.com, or by post to: GDPR Lead, Synapsys Solutions Ltd, 1 Woodlands Court, Albert Drive, Burgess Hill, West Sussex, RH15 9TN

We will acknowledge your complaint within 30 days and respond without undue delay.

You may escalate unresolved complaints to the Information Commissioner's Office (ICO - the UK supervisory authority for data protection issues) here: https://ico.org.uk/make-a-complaint/).

Marketing & Opting Out

You can opt out of marketing at any time by:

• Clicking “unsubscribe” in any email
• Emailing enquiries@synapsys-solutions.com

Data Security

We use:

• TLS/SSL encryption in transit
• AES-256 encryption at rest
• Access controls & staff training

No method is 100% secure, but we follow industry best practice.

Data Breaches

In the event of a data breach, if the breach is likely to risk your rights, we will notify the ICO within 72 hours and inform you without undue delay.

Changes to this policy

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.