Data Controller
Integrated Synergy Consulting Ltd
Company Number: 1701050 (England & Wales)
Registered Address: Sleepy Meadow House, Cliburn, Penrith, Cumbria, CA10 3AL, United Kingdom
Contact: privacy@integratedsynergy.co.uk
What Personal Data We Collect
We collect personal data in two ways:
Automatically Collected Data
- IP address — collected by Cloudflare for security and analytics purposes
- Device and browser information — browser type, operating system, device model
- Pages visited — which articles, sections, and resources you access
- Referrer data — which website or search engine brought you to us
Data You Provide Directly
- Email address — if you subscribe to our newsletter or contact form
- Name — if you submit a contact form or subscribe
- Message content — if you use our contact form to email us
Legal Basis for Processing
We process your personal data under the following legal bases under UK GDPR Article 6:
- Legitimate Interest (Article 6(1)(f)) — analytics and website security
- Consent (Article 6(1)(a)) — newsletter subscriptions
- Contract (Article 6(1)(b)) — fulfilling consulting or training engagement requests
How We Use Your Data
- Website analytics and performance improvement
- Newsletter delivery (if subscribed)
- Responding to contact form inquiries
- Security and DDoS protection (via Cloudflare)
- Compliance with legal obligations
Third-Party Data Sharing
We share your data with the following third parties:
Cloudflare
Purpose: CDN, DDoS protection, web analytics
Data Transferred: IP address, device/browser info, pages visited
Privacy: Cloudflare Web Analytics is privacy-first and does not identify individual users
Privacy Policy: cloudflare.com/privacypolicy
GitHub
Purpose: Code hosting and repository management
Data Transferred: Newsletter subscription lists (encrypted), contact submissions
Privacy Policy: github.com privacy statement
Email Service Provider
Purpose: Newsletter delivery (if applicable)
Data Transferred: Email address, name, subscription preferences
Processor Agreement: Data Protection Agreement in place
Data Retention
We retain personal data as follows:
- Analytics Data: 12 months (then automatically deleted)
- Newsletter Subscriptions: Until you unsubscribe; deleted within 30 days of unsubscription
- Contact Form Submissions: 12 months for follow-up purposes; then deleted
- Server Access Logs: 90 days (then automatically deleted)
International Data Transfers
Cloudflare and GitHub are based in the United States. Transfers of personal data to the US are covered by Standard Contractual Clauses (SCCs) as approved by the UK ICO. These provide appropriate safeguards under UK GDPR Article 46.
Your Data Rights
Under UK GDPR, you have the following rights:
- Right of Access: You can request a copy of your personal data
- Right of Rectification: You can correct inaccurate data
- Right of Erasure: You can request deletion of your data (subject to legal retention requirements)
- Right to Restrict Processing: You can limit how we use your data
- Right to Data Portability: You can request your data in a portable format
- Right to Object: You can object to our use of your data for legitimate interest purposes
To exercise any of these rights, contact: privacy@integratedsynergy.co.uk
Right to Lodge a Complaint
If you believe we have breached your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow, Cheshire
SK9 5AF, United Kingdom
Phone: 0303 123 1113
Website: ico.org.uk
Contact Us