Privacy Policy

Data Controller

Integrated Synergy Consulting Ltd
Company Number: 17010502 (England & Wales)
Registered Address: Sleepy Meadow House, Cliburn, Penrith, Cumbria, CA10 3AL, United Kingdom

Contact: [email protected]

What Personal Data We Collect

We collect personal data in two ways:

Automatically Collected Data

• IP address — collected by Cloudflare for security and analytics purposes
• Device and browser information — browser type, operating system, device model
• Pages visited — which articles, sections, and resources you access
• Referrer data — which website or search engine brought you to us

Data You Provide Directly

• Email address — if you subscribe to our newsletter or contact form
• Name — if you submit a contact form or subscribe
• Message content — if you use our contact form to email us

Legal Basis for Processing

We process your personal data under the following legal bases under UK GDPR Article 6:

• Legitimate Interest (Article 6(1)(f)) — analytics and website security
• Consent (Article 6(1)(a)) — newsletter subscriptions
• Contract (Article 6(1)(b)) — fulfilling consulting or training engagement requests

How We Use Your Data

• Website analytics and performance improvement
• Newsletter delivery (if subscribed)
• Responding to contact form inquiries
• Security and DDoS protection (via Cloudflare)
• Compliance with legal obligations

Third-Party Data Sharing

We share your data with the following third parties:

Cloudflare

Purpose: CDN, DDoS protection, web analytics
Data Transferred: IP address, device/browser info, pages visited
Privacy: Cloudflare Web Analytics is privacy-first and does not identify individual users
Privacy Policy: cloudflare.com/privacypolicy

GitHub

Purpose: Code hosting and repository management
Data Transferred: Newsletter subscription lists (encrypted), contact submissions
Privacy Policy: github.com privacy statement

Email Service Provider

Purpose: Newsletter delivery (if applicable)
Data Transferred: Email address, name, subscription preferences
Processor Agreement: Data Protection Agreement in place

Data Retention

We retain personal data as follows:

• Analytics Data: 12 months (then automatically deleted)
• Newsletter Subscriptions: Until you unsubscribe; deleted within 30 days of unsubscription
• Contact Form Submissions: 12 months for follow-up purposes; then deleted
• Server Access Logs: 90 days (then automatically deleted)

International Data Transfers

Cloudflare and GitHub are based in the United States. Transfers of personal data to the US are covered by Standard Contractual Clauses (SCCs) as approved by the UK ICO. These provide appropriate safeguards under UK GDPR Article 46.

Your Data Rights

Under UK GDPR, you have the following rights:

• Right of Access: You can request a copy of your personal data
• Right of Rectification: You can correct inaccurate data
• Right of Erasure: You can request deletion of your data (subject to legal retention requirements)
• Right to Restrict Processing: You can limit how we use your data
• Right to Data Portability: You can request your data in a portable format
• Right to Object: You can object to our use of your data for legitimate interest purposes

To exercise any of these rights, contact: [email protected]

Right to Lodge a Complaint

If you believe we have breached your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow, Cheshire
SK9 5AF, United Kingdom
Phone: 0303 123 1113
Website: ico.org.uk

Contact Us