Privacy Policy

Synca Ltd is the data controller for personal data processed through the Service. You can contact us at privacy@synca.org.uk or by post at [registered address].

• Account data — name, email, password, and profile details.
• Booking data — the businesses, services, staff, dates, and notes for your appointments.
• Payment data — handled by our payment processor (Stripe). Synca never stores your full card details.
• Usage data — device, browser, IP address, and how you interact with the Service.
• Communications — messages, reviews, and support requests you send us.

We process your data on the following lawful bases:

• Contract — to create your account, take and manage bookings, and process payments.
• Legitimate interests — to operate, secure, and improve the Service and prevent fraud.
• Consent — for optional marketing, which you can withdraw at any time.
• Legal obligation — to meet tax, accounting, and other legal requirements.

We share data only as needed to run the Service, including with:

• The businesses you book with, so they can provide your appointment.
• Stripe for payment processing, and Resend for transactional email.
• Hosting and infrastructure providers that run our platform.
• Authorities or advisers where required by law.

We never sell your personal data.

We use cookies and similar technologies to keep you signed in and to understand usage. See our Cookie Policy for details.

We keep personal data only as long as necessary for the purposes above, or as required by law (for example, financial records). When no longer needed, data is securely deleted or anonymised.

Under UK GDPR you have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to certain processing.
• Request portability of data you provided.
• Withdraw consent at any time.

To exercise these rights, email privacy@synca.org.uk. You may also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Where data is processed outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or adequacy decisions.

We use technical and organisational measures — including encryption in transit and access controls — to protect your data. No system is completely secure, so we cannot guarantee absolute security.

The Service is not directed at children under 16, and we do not knowingly collect their data without appropriate consent.

We may update this policy from time to time. We will post the updated version here and change the “Last updated” date above.

Questions about this policy? Email privacy@synca.org.uk.