Skip to content

    Privacy Notice

    Who we are

    We are Synthace Ltd, based at WestWorks, 195 Wood Lane, London W12 7FQ.

    We are registered with the ICO as a data controller/fee payer under number ZA297709.

    Our role

    For the most part, Synthace Ltd acts as a Processor only for our clients’ data. That means when we process personal data, we are doing so purely on the instruction of another company (the Controller).

    Synthace Ltd, does on occasion, act as a Controller. This is only for the data that we process for our day-to-day internal business operations. It is a small amount of data, and we keep to a minimum the information we hold about you.

    This privacy notice refers to the data we process as a Controller only.

    Your rights

    You have rights in respect of our processing of your personal data. The relevant rights are:

    • Right of access: You can request access to a copy of the personal data which we hold about you, as well as details about why and how we use it;
    • Right to rectification: You can ask us to change or complete any personal data we hold about you which is inaccurate or incomplete;
    • Right to be forgotten/erased: You have a right, under certain circumstances, to ask us to delete any personal data we hold about you. Please note that there may be situations where we must retain your personal data after a request for erasure where we have a lawful basis for doing so;
    • Right of restriction: You can ask us to restrict (i.e. prevent) the processing of your personal data where you have objected to our use of it and we have no lawful basis to continue processing your personal data;
    • Right of data portability: In certain circumstances, you can ask us to transfer the data we hold about you to another service. This would be sent in a structured, commonly used, electronic form;
    • Right to object: You can object to us using your personal data for particular purposes; and
    • Automated decision making: You have a right not to be subjected to automated decision making and profiling in certain circumstances.

    If you want to exercise any of these rights, please call us on at +44 (0) 20 3976 7676 or send an email to

    You also have the right to lodge a complaint about our processing with a supervisory authority—in the UK that is the ICO whose details are here:

    Data sharing and transfer

    We have a number of processors (such as cloud service providers) who act on our behalf. We have Data Processing Agreements in place with all of these processors to ensure that your data is processed in compliance with the law and only upon our instruction. We never sell your data.

    Transfer of your data outside the UK or EEA

    We only transfer data outside of the UK or EEA if it is to a country or organisation that is deemed by the UK or EU to have adequate protection of data, or if appropriate safeguards have been put in place, for example EU Standard Contractual Clauses or the UK International Data Transfer Agreement/Addendum. When we rely on these, we also carry out due diligence and transfer impact assessments to ensure they provide enough protection within the local legal framework.

    Automated decision making

    We do not use your personal data in any automated processes to make decisions about you.

    Technical and operational security

    At Synthace all our employees are trained in data privacy on a regular basis. All our devices are encrypted. We maintain up to date anti-virus and anti-malware protection. We have a strong password policy and utilise Active Directory to control access. Our premises are protected by CCTV, external security services and security badge access.

    What happens if our business changes hands?

    We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, depending on the lawful basis, be permitted to use that data only for the same purposes for which it was originally collected by us.

    In the event that any of your data is to be transferred in such a manner, you will be contacted in advance and informed of the changes.

    Changes to our Privacy Policy

    We may change this Privacy Policy from time to time (for example, if the law changes). We recommend that you check this page regularly to keep up-to-date.

    If we make any material changes to the manner in which we process and use your personal data, we will contact you to let you know about the change.

    Contact us

    If you want to talk to us about this, please call the Data Privacy Lead on +44 (0) 20 3976 7676 or send an email to

    Tell me more...

    To see more about how we use your personal data, read the notice or notices below which apply best to your relationship with us: