Privacy Policy

Scope

This policy covers how SynapseDx Ltd. (“SynapseDx”, “we”, “us”) collects, uses, and shares personal information across our websites, demos, proofs of concept, and customer engagements. Separate agreements govern production deployments; those controls build on top of the commitments described here.

How we use personal information

We only process personal information when there is a legitimate business or legal reason to do so. In practice, that means:

• Delivering, maintaining, and securing SynapseDx products and services.
• Responding to demo, partnership, and support requests with relevant materials.
• Monitoring platform health, detecting abuse, and troubleshooting incidents.
• Improving product experience through aggregated analytics and customer feedback.
• Meeting legal, regulatory, and risk management obligations in the jurisdictions we operate.

Legal bases for processing

When required by privacy laws like GDPR or UK GDPR, we rely on the following bases to process information:

• Performance of a contract when we process information to deliver subscribed services or trials.
• Legitimate interests such as securing our systems, communicating with prospective customers, and developing new capabilities.
• Consent when we send marketing communications or rely on optional cookies/tools.
• Compliance with legal obligations, including responding to lawful requests from regulators or authorities.

Sharing and disclosures

We do not sell personal information. We share it only with:

• Service providers that support hosting, security monitoring, analytics, or communications under data processing agreements.
• Professional advisors such as auditors or legal counsel as needed to operate responsibly.
• Authorities when required to comply with law, defend legal claims, or protect against security threats.

Whenever information leaves its original jurisdiction, we apply contractual and technical safeguards aligned with GDPR, UK GDPR, and applicable sector regulations.

Security, retention, and transfers

• Security. SynapseDx applies layered technical and organizational controls, including zero-trust network design, encryption in transit and at rest, access reviews, and incident response playbooks validated through tabletop exercises.
• Retention. We keep personal information only as long as necessary for the purposes described above, accounting for contract duration, statutory requirements, and audit obligations. When data is no longer needed, it is securely deleted or anonymized.
• International transfers. We host services in regions requested by customers. If data moves to countries without equivalent protections, we rely on approved transfer mechanisms such as Standard Contractual Clauses and apply supplemental safeguards.

Your choices

We honor privacy rights granted by applicable laws. Depending on your location, you can exercise:

• Access – obtain a copy of the personal information we hold about you.
• Correction – request updates to inaccurate or incomplete records.
• Deletion – ask us to erase information where we have no overriding lawful basis to keep it.
• Restriction – limit how we use your information in specific circumstances.
• Portability – receive certain information in a structured, commonly used format.
• Objection – opt out of processing based on legitimate interests or direct marketing at any time.

Submit requests by emailing privacy@synapsedx.co.uk. We will verify your identity and respond within the timelines required by law. You may designate an authorized agent where permitted.