Privacy notice.

Who we are

SYHNER LTD is responsible for the personal information described in this notice (the “data controller”). We are registered in England and Wales, company number 14235556. Our registered office is 128 City Road, London, United Kingdom, EC1V 2NX.

For privacy questions or requests, email privacy@syhner.com or write to our registered office.

What information we handle

• Enquiries: your name, email address, any other contact details you provide, and the contents of your messages and attachments.
• Client work: contact and business details, project correspondence and files, agreements, and billing information needed to manage our work together. A client may also give us the details of colleagues involved in a project.
• Payments and subscriptions: customer contact and billing details, invoices, payment amounts and status, transaction references, subscription details, and refund or dispute records. Stripe also handles payment method information and may collect device and technical information when you use its payment services.
• Website requests: Cloudflare processes technical information, such as IP addresses, browser and system information, and traffic data, to deliver and protect this website.

You choose what to include in an enquiry. Without the contact or project information we need, we may be unable to reply or provide our services.

Why we use it

We use personal information to reply to enquiries, discuss potential projects, deliver and manage client work, issue invoices, accept payments, manage subscriptions and refunds, keep necessary business records, and operate a reliable, secure website.

Our lawful bases under UK data protection law are:

• Contract: taking steps you request before entering a contract with us, and carrying out our contract with you.
• Legitimate interests: responding to general or business enquiries, communicating with people who represent our clients, managing business relationships and billing, preventing fraud, protecting our website, and retaining records needed to establish or defend legal claims.
• Legal obligation: keeping records required by tax, accounting or other applicable laws, and responding to legally required disclosures.

We do not use enquiry details for newsletters or marketing. We do not sell personal information or use it for profiling or automated decisions with legal or similarly significant effects.

Services we use

We use the following providers to operate our website, handle email, store records and manage payments:

• Cloudflare: domain and DNS services, website hosting through Cloudflare Pages, security and email forwarding through Email Routing.
• Proton Mail: receiving, sending and storing email correspondence.
• Apple iCloud: storing enquiry and client details and project files.
• Stripe: issuing invoices, accepting payments through payment links, and managing subscriptions, refunds and payment disputes. We share relevant customer, billing and transaction information with Stripe for these purposes.

These providers process information as needed to supply their services. We may also disclose information where legally required or where necessary to establish, exercise or defend legal claims.

Stripe also processes some information as an independent data controller, including for fraud prevention and legal compliance, and shares information with banks and payment providers as needed to complete transactions.

For information about each provider’s handling of data, see Cloudflare’s privacy policy, Proton Mail’s privacy policy, Apple’s privacy policy and Stripe’s privacy policy.

Processing outside the UK

Our providers operate internationally, so information may be processed outside the UK, including in Switzerland, the European Economic Area and the United States.

Proton Mail is based in Switzerland, which is recognised by the UK as providing adequate data protection. Cloudflare’s data processing terms include mechanisms for UK transfers, including the UK Addendum to the Standard Contractual Clauses where applicable. Apple describes its use of Standard Contractual Clauses for international transfers in its privacy policy.

Stripe may process data in the United States and other countries. Its data processing agreement and data transfers addendum describe the transfer safeguards it applies, including UK transfer terms where applicable.

Contact privacy@syhner.com for more information about the transfer arrangements relevant to your data.

How long we keep it

• Enquiries that do not become projects: up to 12 months after our last contact.
• Completed client work and subscriptions: contracts, invoices, payment records and essential correspondence for six years after the project or subscription ends. Other project data is deleted when it is no longer needed for delivery or agreed ongoing support.

We may keep relevant records longer if required by law, including applicable accounting retention periods, or while resolving a dispute or legal claim. Technical data handled by our hosting and email providers is retained under their applicable service policies. Stripe may retain information for its own legal, regulatory and fraud prevention purposes as described in its privacy policy.

Cookies and analytics

We do not use analytics, advertising trackers or marketing cookies. The website itself does not set cookies or store information in your browser’s local storage. Fonts are served from our own website.

Cloudflare may use necessary security cookies if it presents a security challenge or applies protective features. These support website security rather than advertising or audience tracking.

Stripe-hosted invoice, payment and subscription pages are separate from this website and may use cookies and similar technologies under Stripe’s cookie policy.

Links to other websites take you to services with their own privacy notices.

Your rights

Depending on the circumstances and the lawful basis we use, you can ask for access to your personal information, correction, deletion, restriction of processing or a portable copy. You can also object to processing based on legitimate interests. These rights are subject to legal conditions and exemptions.

Email privacy@syhner.com to make a request or raise a concern. We normally respond to rights requests within one month and may need to confirm your identity.

You can also complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Changes to this notice

We will update this page if our services or the way we handle personal information changes. The date above shows when it was last updated.