Privacy Policy

SyncFlow Labs Ltd (London, United Kingdom) is the data controller for the personal data described in this policy. We process personal data in line with the UK GDPR, the Data Protection Act 2018 and, where applicable, the EU GDPR.

1. Data we collect

Contact and billing data: name, email, phone, company, address, tax ID.
Transaction data: order details, amounts, currency, payment status, the last four digits and brand of your card (provided by Stripe).
Technical and security data: IP address, browser, device, country, timestamps of checkout, policy acceptance and client-area access.
Communications: messages and support requests you send us.

2. Why we use it (lawful bases)

To provide the services and process payments — performance of a contract.
To issue invoices and keep accounting records — legal obligation (UK tax law requires records for at least 6 years).
To prevent fraud, secure our systems and respond to payment disputes — legitimate interests.
To send marketing — only with your consent, which you can withdraw at any time.

Only with trusted processors that help us run the business: Stripe (payments), our hosting provider, our email provider and Cloudflare (security and performance). We never sell your data.

4. International transfers

Where data is transferred outside the UK/EEA, we rely on adequacy regulations or standard contractual clauses.

5. Retention

Accounting and invoice records are kept for 6 years after the end of the financial year. Other data is kept only as long as necessary for the purposes above.

6. Your rights

You can request access, correction, deletion, restriction, portability or object to processing by emailing support@syncflowlabs.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

7. Security

We use encryption in transit (TLS), encrypted secrets, strict access controls, two-factor authentication for staff and regular backups.