Privacy Policy

Last updated: 28 October 2026

Who we are

This website is run by BHIK Studios Ltd, trading as SYNF. We are registered in Scotland, company number SC670511, and our registered office is 1 Cambuslang Court, Cambuslang, Glasgow, G32 8FH.

We are the data controller for the personal information described here. If you have any questions, or you want to exercise any of the rights below, email [email protected].

What we collect, and why

When you contact us or ask for a quote. Your name, email address, phone number if you give it, how you heard about us, and whatever you tell us about your business. We also keep the page you sent the form from, the page you were on before that, and any campaign or advert tag in the web address (for example from our Google profile or an email), so we know which of our pages and channels bring enquiries in. Your enquiry goes into our customer system so we can reply. We use it to reply to you and to prepare a quote. Our lawful basis is legitimate interests, specifically responding to someone who has asked us to get in touch. If it turns into work, we then process it to perform our contract with you.

When you use the Website Health Check. The website address you enter and the email address you give us so we can send the report. We use it to run the check and send you the result. Our lawful basis is legitimate interests, namely providing a tool you have actively asked us to run.

When you use our other free tools. The savings calculator works in your browser and we keep nothing from it. The scorecard, the playbooks and the AI opportunity finder keep your email address, your name if you give it and your answers, so we can email you the result. Same basis as above.

When you book a call. Your name, email and the time you pick. Bookings run through Google Calendar appointment scheduling.

When you browse the site. Google Analytics gives us totals such as pages viewed, roughly where in the world visitors are, and what device and browser they use. It runs unless you turn it off, which you can do for your browser on our cookie policy page. Google’s advertising features and data sharing are switched off and it is not linked to any adverts. UK law allows analytics like this without asking first, because it only produces statistics we use to improve the site and you can object at any time. Our lawful basis is legitimate interests, namely understanding how the site is used so we can improve it.

We do not ask for special category data such as health, ethnicity or beliefs. We do not carry out automated decision-making that has a legal effect on you. We do not sell your data to anyone.

Business prospecting

We sometimes email businesses we think we could help with their website or their online payments. We only do this for limited companies, and only at a business email address they publish on their own website.

What we use. The company’s name, its website address, the contact email published on its site, its Companies House record (including the figures in its filed accounts), and what any visitor can see on the site, such as an expired security certificate, an out-of-date version of WordPress or which card payment provider its checkout uses. We never log in, fill in forms or look at anything that isn’t public.

Where it comes from. The business’s own website, Companies House and public business listings such as Google Maps.

Why we use it. Our legitimate interest in letting businesses know about a service that may help them. We send one email and, if there’s no reply, one follow-up a week later, and then we stop.

Worldpay. SYNF is a Worldpay partner. We may share a business’s name, website, published contact details and what we have seen about its checkout with Worldpay, so they can offer card payment services. If you’d rather we didn’t, tell us and we won’t.

How long we keep it. If you don’t reply, we keep these details for 12 months so we don’t contact you twice, then delete them. If you ask us not to contact you, we keep only your web address on a do-not-contact list so we never email you again.

Your rights. You can object at any time by replying “no thanks” or emailing [email protected], and we’ll stop straight away. You can also ask what we hold about you, ask us to correct or delete it, or complain to the Information Commissioner’s Office at ico.org.uk.

Who we share it with

We use a small number of suppliers who handle data on our behalf, under contract and only on our instructions:

• our website host, for running this site
• Cloudflare, for site performance and security
• Google, for analytics, calendar bookings and some of the fonts this site uses
• Odoo, the customer system where we handle enquiries
• our email provider, for sending and receiving mail

Some of these are based outside the UK. Where they are, the transfer is covered by UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework, or by the ICO’s standard transfer clauses.

We will also share information where the law requires it.

How long we keep it

Enquiries that do not turn into work: two years from your last contact. Client records: for the length of the engagement and six years after, to meet our tax and legal obligations. Analytics data: as set in Google Analytics, currently 14 months.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or send it to someone else. You can object to us processing it on the basis of legitimate interests, and where we rely on consent you can withdraw that consent at any time. Email [email protected] and we will respond within one month.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes

If we change this policy we will update the date at the top.

Counting visits and enquiries