Privacy Policy

1. Who is responsible for processing?

The data controller is Syntra, reachable at contact@syntra.company.

Website concerned: https://syntra.company.

2. What data do we collect?

Depending on how you use the website and our services, we may collect:

• Identification and contact data (first name, last name, email, phone number) when you contact us, fill out the Tally form, or book a call.
• Content of your messages (project brief, requirements, attachments where applicable).
• Technical browsing data (IP address, browser type, pages viewed) via server logs and, where applicable, audience measurement tools.
• Appointment-related data if you use Cal.com (selected time slot, associated email).
• Data entered in the brief form (Tally) when you describe your project in writing.

3. Why do we process your data?

We process your data for the following purposes:

• Responding to your contact requests and preparing quotes.
• Scheduling a call or video meeting (appointment booking).
• Performing a service contract (website creation, integrations, follow-up).
• Ensuring the security, proper functioning, and improvement of the website.
• Complying with our legal obligations (invoicing, accounting retention).

4. Legal bases

Depending on the case, processing is based on: your consent (forms, non-essential cookies), performance of a contract or pre-contractual measures, our legitimate interest (website security, responding to requests), or a legal obligation.

5. Recipients and subprocessors

Your data is intended for Syntra. It may be shared with technical service providers strictly necessary to the service, for example:

• Website hosting (e.g. Vercel).
• Online appointment booking (Cal.com), when you reserve a time slot.
• Online brief form (Tally), when you describe your project in writing.
• Messaging tools to communicate with you.

These providers act under their own privacy policies and, where applicable, as processors within the meaning of the GDPR. When hosting is provided by Vercel Inc., certain technical data (for example server logs or IP address) may be processed outside the European Union, including in the United States. These transfers rely on safeguards provided for under the GDPR, such as the European Commission's standard contractual clauses and/or the Data Privacy Framework, where applicable. Vercel privacy policy: https://vercel.com/legal/privacy-policy.

6. Retention period

We retain your data only for as long as necessary for the purposes above:

• Contact requests with no follow-up: up to 12 months.
• Clients / active prospects: for the duration of the relationship, then legal retention (including accounting records: 10 years).
• Technical logs: limited duration, generally a few weeks to a few months.

7. Your rights

In accordance with the GDPR and the French Data Protection Act (Loi Informatique et Libertés), you have the following rights: access, rectification, erasure, restriction, objection, portability, and withdrawal of consent where processing is based on consent.

To exercise your rights, write to us at contact@syntra.company. You may also lodge a complaint with the CNIL (www.cnil.fr).

8. Cookies and trackers

This website may use technical cookies necessary for its operation. If audience measurement or marketing cookies are added later, clear information and, where applicable, consent will be offered to you.

9. Security

We implement reasonable measures to protect your data (restricted access, secure HTTPS connections, professional hosting providers). As no system is completely infallible, we invite you to report any suspected incident to us.

10. Updates

This policy may be updated to reflect changes to the website, the law, or our practices. The update date appears at the top of the page.