Privacy Policy

Your privacy is our priority

Last updated: 15 September 2025

Introduction

At SyncRefine, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and safeguard your information when you visit our website or use our services. This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller

SyncRefine B.V. Address: [Your Business Address] Email: privacy@syncrefine.com Phone: [Your Phone Number]

Information We Collect

We collect information in the following ways: **Information you provide directly:** • Account registration details (name, email address, company information) • Contact form submissions and support requests • Payment information (processed securely through third-party providers) • Communication preferences **Information collected automatically:** • Website usage data (pages visited, time spent, browser type) • Technical information (IP address, device information, cookies) • Analytics data to improve our services **Information from third parties:** • Social media login information (if you choose to use social login) • Business information from public sources for B2B services

Legal Basis for Processing

We process your personal data based on: • **Consent**: For marketing communications and non-essential cookies • **Contract Performance**: To provide our services and fulfill our obligations • **Legitimate Interest**: For website analytics, security, and business operations • **Legal Obligation**: To comply with applicable laws and regulations

How We Use Your Information

We use your information to: • Provide and maintain our data integration services • Process your requests and provide customer support • Send important service notifications and updates • Improve our website and services through analytics • Personalize your experience and recommendations • Comply with legal obligations and prevent fraud • Send marketing communications (with your consent)

Data Sharing and Disclosure

We may share your information with: **Service Providers**: Trusted third parties who assist with our operations (hosting, analytics, payment processing, customer support) **Business Partners**: When necessary to provide integrated services (with your consent) **Legal Requirements**: When required by law, court order, or to protect our rights and safety **Business Transfers**: In connection with mergers, acquisitions, or asset sales We never sell your personal data to third parties for marketing purposes.

Data Retention

We retain your personal data for as long as necessary to: • Provide our services to you • Comply with legal obligations (typically 7 years for business records) • Resolve disputes and enforce our agreements **Account Data**: Retained while your account is active and for 2 years after deactivation **Website Analytics**: Anonymized after 26 months **Marketing Data**: Until you withdraw consent or 3 years of inactivity

Your Rights

Under GDPR, you have the right to: • **Access**: Request a copy of your personal data • **Rectification**: Correct inaccurate or incomplete data • **Erasure**: Request deletion of your data ("right to be forgotten") • **Restriction**: Limit how we use your data • **Portability**: Receive your data in a structured format • **Objection**: Object to processing based on legitimate interest • **Withdraw Consent**: For consent-based processing To exercise these rights, contact us at privacy@syncrefine.com

Data Security

We implement appropriate technical and organizational security measures: • Encryption of data in transit and at rest • Regular security assessments and updates • Access controls and employee training • Incident response procedures • Secure data centers and infrastructure While we strive to protect your data, no method of transmission over the internet is 100% secure.

International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we do so, we ensure adequate protection through: • Adequacy decisions by the European Commission • Standard Contractual Clauses (SCCs) • Binding Corporate Rules • Your explicit consent All transfers comply with GDPR requirements for international data transfers.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience. For detailed information about our use of cookies, please see our Cookie Policy. You can control cookie preferences through our consent banner and your browser settings.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by: • Email notification to registered users • Prominent notice on our website • Updated "last modified" date Your continued use of our services after changes constitutes acceptance of the updated policy.

Contact Information

For questions about this Privacy Policy or our data practices: **Privacy Officer**: privacy@syncrefine.com **General Support**: support@syncrefine.com **Data Protection Officer**: dpo@syncrefine.com **Supervisory Authority**: You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data properly.