Privacy Policy

1. Introduction

Synthara ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring you have a positive experience on our website and when working with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and other applicable laws.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services.

2. What Personal Data We Collect

We may collect and process the following personal data:

• Contact Information: Your name, email address, phone number, company name, and business address when you submit a contact form or request information.
• Communication Data: Records of your interactions with us, including emails and messages about our services.
• Website Usage Data: Information about how you use our website, including IP address, browser type, pages visited, and time spent (via analytics cookies).
• Project Data: During engagements, we collect data specifically related to your project scope, deliverables, and project documentation. Your datasets remain your property.

3. Legal Basis for Processing

Under the PDPO and GDPR (where applicable), we process your data on the following legal bases:

• Consent: You have explicitly consented to the processing (e.g., subscribing to our newsletter or contacting us via forms).
• Contract: Processing is necessary to fulfill an engagement or service agreement with you.
• Legitimate Interest: Processing serves our legitimate business interests, such as maintaining security and improving our services.
• Legal Obligation: Processing is required by law or regulation, such as regulatory compliance or tax purposes.

4. How We Use Your Data

We use the personal data we collect for the following purposes:

• Responding to your inquiries and providing customer support
• Delivering services and completing projects you engage us for
• Sending communications about our services and updates
• Improving our website, services, and customer experience
• Ensuring website security and preventing fraud
• Complying with legal and regulatory obligations
• Analytics and measuring the effectiveness of our marketing

5. Data Sharing

Your personal data will not be sold, traded, or shared with third parties without your explicit consent, except as follows:

• Service Providers: We may share data with trusted third parties who assist us (e.g., email service providers, analytics platforms) under strict confidentiality agreements.
• Legal Requirements: We may disclose data if required by law, court order, or to protect our rights and security.
• Project-Specific Data: During engagements, your datasets remain under your control. We process them only as instructed and per your engagement agreement.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law:

• Contact Information: Retained for 3 years after your last interaction or until you request deletion.
• Project Data: Retained for the duration of the engagement plus 2 years for record-keeping and compliance purposes, then securely deleted unless otherwise agreed.
• Analytics Data: Retained for 24 months or as per cookie settings.

7. Your Rights Under PDPO

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the following rights:

• Right of Access: You may request access to personal data we hold about you.
• Right of Correction: You may request correction of inaccurate personal data.
• Right of Erasure: You may request deletion of personal data in certain circumstances.
• Right to Object: You may object to processing of your personal data for certain purposes.
• Right to Withdraw Consent: You may withdraw consent for processing at any time, though this will not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at [email protected].

8. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Encrypted data transmission (SSL/TLS)
• Secure data storage with access controls
• Regular security audits and assessments
• Employee confidentiality agreements and training
• Breach notification procedures

9. Cookies and Tracking

Our website uses cookies to enhance your experience. Cookies are small data files stored on your device. We use:

• Essential Cookies: Required for site functionality and security (always active).
• Analytics Cookies: Track site usage and performance (optional, controlled by you).
• Preference Cookies: Remember your settings and choices (optional).

You can manage cookie preferences on our Cookie Policy page.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. We recommend reviewing their privacy policies before providing any personal data.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete such information and terminate the child's use of our services.

12. Governing Law

This Privacy Policy is governed by the laws of Hong Kong, including the Personal Data (Privacy) Ordinance (Cap. 486). Any disputes arising under this policy shall be subject to the jurisdiction of Hong Kong courts.

13. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated via email or prominently posted on our website. Your continued use of our services constitutes acceptance of the updated policy.