Privacy policy

"Synergy Solutions" is a trading name of the proprietor, who is the data controller for personal data collected through this website and our audit service. This policy explains what we collect, why, and your rights under the UK GDPR.

1. Data we collect

• Booking & payment: name, email, billing details. Card details are handled directly by Stripe — we never see or store your full card number.
• Session details: the time slot you pick and any notes you enter via Calendly.
• Audit content: information you share with us about your idea or business, verbally or in writing, so we can perform the audit.
• Correspondence: emails you send us and our replies.
• Technical data: standard server logs (IP address, user agent, timestamps) for security and abuse prevention.

2. Why we use it and our legal basis

• To deliver the audit you booked and paid for — performance of a contract.
• To send receipts, session confirmations and audit reports — performance of a contract.
• To comply with tax, accounting and legal obligations — legal obligation.
• To improve our methodology and service — our legitimate interest in running and improving our business, balanced against your rights (we use anonymised learnings for this).

3. Who we share it with

We share the minimum necessary personal data with the following processors, all of whom are bound by data-processing terms:

• Stripe — payment processing.
• Calendly — session scheduling.
• Our hosting and email providers — to run the website and send transactional email.
• Advisory panel members (Gold and Platinum only) — under equivalent confidentiality obligations.

We do not sell personal data. We do not use it for advertising.

4. International transfers

Some processors (notably Stripe and Calendly) may process data outside the UK/EEA. Where they do, transfers are covered by the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or an equivalent safeguard.

5. How long we keep it

• Booking, payment and invoicing records: 6 years (UK tax law).
• Audit reports and supporting notes: 3 years, unless you ask us to delete them earlier.
• Server logs: up to 90 days.

6. Your rights

Under the UK GDPR you can ask us to access, correct, delete, or restrict use of your personal data, and to receive a copy in a portable format. You can also object to certain uses and withdraw consent where we rely on it. Contact nayimsammour@synergy-solutions.co.uk — we aim to respond within one month.

If you're unhappy with our response you can complain to the UK Information Commissioner's Office at ico.org.uk.

7. Cookies

We use only the strictly necessary cookies required to run the site and the booking/payment flow (for example, Stripe and Calendly may set their own cookies inside their embedded widgets). We do not use advertising or cross-site tracking cookies.

8. Contact

"Synergy Solutions" is a trading name of the proprietor. Registered office / business address: to be confirmed. Contact: nayimsammour@synergy-solutions.co.uk.