Privacy Policy

Last Updated: 08 June 2025

1. Introduction

Welcome to Synapto AI. We are committed to protecting and respecting your privacy. This policy explains how I collect, use, and protect the personal data you provide to me when you use my website synaptoai.co.uk and my AI chatbot and related services.

This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purpose of the UK GDPR, the data controller is Aaron Nettle, trading as Synapto AI.

2. Data I Collect About You

I may collect, use, store, and transfer different kinds of personal data about you, which I have grouped together as follows:

Identity Data: Includes first name, last name, username, or similar identifier.
Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
Financial Data: Includes bank account and payment card details, collected via my secure payment processor. I do not store your full financial data on my servers.
Transaction Data: Includes details about payments to and from you and other details of Services you have purchased from me.
Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Website.
Usage Data: Includes information about how you use my Website and Services.
Client Data: Information and data you provide when using my AI Services, which may include text, documents, or other materials. I will only process this data in accordance with our service agreement.
Marketing and Communications Data: Includes your preferences in receiving marketing from me and your communication preferences.

3. How I Use Your Personal Data

I will only use your personal data when the law allows me to. Most commonly, I will use your personal data in the following circumstances:

To perform the contract I am about to enter into or have entered into with you.
To process and deliver your order, including managing payments and collecting money owed to me.
To manage my relationship with you, including notifying you about changes to my terms or privacy policy.
To improve my Website, Services, marketing, and customer relationships.
Where it is necessary for my legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Where I need to comply with a legal or regulatory obligation.

Lawful Basis for Processing: I will only use your personal data for the purposes for which I collected it, unless I reasonably consider that I need to use it for another reason and that reason is compatible with the original purpose. The lawful basis for processing your data is typically performance of a contract, my legitimate interests, and compliance with legal obligations.

4. Data Security

I have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. Access to your personal data is limited to me and any necessary third-party service providers (e.g., payment processors) who have a business need to know.

5. Data Retention

I will only retain your personal data for as long as reasonably necessary to fulfil the purposes I collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

6. Your Legal Rights

Under the UK GDPR, you have rights including:

Right to access: You can request a copy of the personal data I hold about you.
Right to rectification: You can request that I correct any inaccurate or incomplete data.
Right to erasure: You can ask me to delete your personal data in certain circumstances.
Right to restrict processing: You can ask me to suspend the processing of your personal data in certain circumstances.
Right to data portability: You can request the transfer of your personal data to you or a third party.
Right to object: You can object to the processing of your data where I am relying on a legitimate interest.

To exercise any of these rights, please contact me at admin@synaptoai.co.uk.

7. Third-Party Links

This Website may include links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. I do not control these third-party websites and am not responsible for their privacy statements.

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk).