Privacy Policy

Data Controller

Integrated Synergy Consulting Ltd
Company Number: 1701050 (England & Wales)
Registered Address: Sleepy Meadow House, Cliburn, Penrith, Cumbria, CA10 3AL, United Kingdom

Contact: [email protected]

What Personal Data We Collect

We collect personal data in two ways:

Automatically Collected Data

• IP address — collected by Cloudflare for security and analytics purposes
• Device and browser information — browser type, operating system, device model
• Pages visited — which articles, sections, and resources you access
• Referrer data — which website or search engine brought you to us

Data You Provide Directly

• Email address — if you subscribe to our newsletter or contact form
• Name — if you submit a contact form or subscribe
• Message content — if you use our contact form to email us
• Mobile number and message content — if you choose to contact us via WhatsApp

Legal Basis for Processing

We process your personal data under the following legal bases under UK GDPR Article 6:

• Legitimate Interest (Article 6(1)(f)) — analytics and website security
• Consent (Article 6(1)(a)) — newsletter subscriptions
• Contract (Article 6(1)(b)) — fulfilling consulting or training engagement requests

How We Use Your Data

• Website analytics and performance improvement
• Newsletter delivery (if subscribed)
• Responding to contact form inquiries
• Responding to enquiries received by WhatsApp
• Security and DDoS protection (via Cloudflare)
• Compliance with legal obligations

Third-Party Data Sharing

We share your data with the following third parties:

Cloudflare

Purpose: CDN, DDoS protection, web analytics
Data Transferred: IP address, device/browser info, pages visited
Privacy: Cloudflare Web Analytics is privacy-first and does not identify individual users
Privacy Policy: cloudflare.com/privacypolicy

GitHub

Purpose: Code hosting and repository management
Data Transferred: Newsletter subscription lists (encrypted), contact submissions
Privacy Policy: github.com privacy statement

Email Service Provider

Purpose: Newsletter delivery (if applicable)
Data Transferred: Email address, name, subscription preferences
Processor Agreement: Data Protection Agreement in place

WhatsApp

Purpose: Optional contact channel offered on this website
Provider: For users in the United Kingdom, WhatsApp is provided by WhatsApp LLC, a Meta company based in the United States
Data Transferred: Your mobile number, the content of your messages, and connection metadata including device information, IP address, and the time and date of each message
Message Content: WhatsApp states that messages and calls are end-to-end encrypted, and that “no one else, not even WhatsApp, can read or listen to them”. Meta does process the surrounding metadata
Your Choice: Contacting us by WhatsApp is entirely optional. Email, telephone, and the contact form on this site reach us without involving Meta
Privacy Policy: whatsapp.com/legal/privacy-policy

Data Retention

We retain personal data as follows:

• Analytics Data: 12 months (then automatically deleted)
• Newsletter Subscriptions: Until you unsubscribe; deleted within 30 days of unsubscription
• Contact Form Submissions: 12 months for follow-up purposes; then deleted
• WhatsApp Conversations: 12 months for follow-up purposes; then deleted from our device. Meta’s own retention of message metadata is governed by its policy, not ours
• Server Access Logs: 90 days (then automatically deleted)

International Data Transfers

Cloudflare and GitHub are based in the United States. Transfers of personal data to the US are covered by Standard Contractual Clauses (SCCs) as approved by the UK ICO. These provide appropriate safeguards under UK GDPR Article 46.

WhatsApp LLC, which provides WhatsApp to users in the United Kingdom, is also based in the United States. Where you choose to contact us via WhatsApp, your message travels to us through Meta’s infrastructure under Meta’s own terms and privacy policy, rather than under an agreement between us and Meta. If you would prefer that no data reaches Meta, use email, the telephone, or the contact form instead.

Your Data Rights

Under UK GDPR, you have the following rights:

• Right of Access: You can request a copy of your personal data
• Right of Rectification: You can correct inaccurate data
• Right of Erasure: You can request deletion of your data (subject to legal retention requirements)
• Right to Restrict Processing: You can limit how we use your data
• Right to Data Portability: You can request your data in a portable format
• Right to Object: You can object to our use of your data for legitimate interest purposes

To exercise any of these rights, contact: [email protected]

Right to Lodge a Complaint

If you believe we have breached your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow, Cheshire
SK9 5AF, United Kingdom
Phone: 0303 123 1113
Website: ico.org.uk

Contact Us