Privacy Policy

Last updated: 27 February 2026

1. Introduction

This Privacy Policy explains how Synpix Ltd ("we", "us", "our"), the operator of SynpixCloud, collects, uses, stores, and shares your personal data when you use the SynpixCloud platform ("Service").

Synpix Ltd is the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Synpix Ltd Company No. 16786340 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

2. Data We Collect

We collect the following categories of personal data:

2.1 Account Data Information you provide when creating and managing your account, including your name, email address, and authentication credentials (such as OAuth tokens if you sign in via a third-party provider).

2.2 Payment Data Payment and billing information is processed by our third-party payment processor (currently Stripe). We do not store your full credit card number or payment credentials on our servers. We receive and retain transaction identifiers, payment amounts, and billing status from the payment processor.

2.3 Usage Data Information about how you use the Service, including instance creation and termination events, GPU type selections, billing cycle choices, session durations, and feature interactions.

2.4 Device and Browser Data Technical information collected automatically when you access the Service, including IP address, browser type and version, operating system, device type, screen resolution, and referring URL.

2.5 Communication Data Records of communications between you and our support team, including email correspondence and any information you provide in support requests.

2.6 Cookies and Similar Technologies We use cookies and similar technologies as described in Section 10 of this Policy.

3. How We Use Your Data

We use your personal data for the following purposes:

4. Lawful Basis for Processing

Under the UK GDPR, we process your personal data on the following lawful bases:

4.1 Contractual Necessity (Article 6(1)(b)). Processing necessary for the performance of our contract with you, including providing GPU instances, processing payments, and managing your account.

4.2 Legitimate Interests (Article 6(1)(f)). Processing necessary for our legitimate interests, including improving the Service, ensuring platform security, and preventing fraud. We balance these interests against your rights and do not use this basis where your interests override ours.

4.3 Legal Obligation (Article 6(1)(c)). Processing necessary to comply with legal obligations, including tax reporting, responding to lawful requests from authorities, and maintaining required financial records.

4.4 Consent (Article 6(1)(a)). Where we rely on your consent (for example, for non-essential cookies or marketing communications), you may withdraw consent at any time by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

6. Data Sharing

We do not sell your personal data. We share your data only in the following circumstances:

6.1 Payment Processors. We share necessary payment data with our payment processor (currently Stripe) to process transactions. Stripe's privacy policy governs their use of your data.

6.2 Infrastructure Providers. We use third-party hosting and infrastructure providers to operate the Service. These providers process data on our behalf under data processing agreements.

6.3 Legal Requirements. We may disclose your data where required to do so by law, regulation, legal process, or governmental request, or where we reasonably believe disclosure is necessary to protect our rights, your safety, or the safety of others.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred as part of that transaction. We will notify you of any such change.

7. International Data Transfers

Your data may be processed in countries outside the United Kingdom. Where we transfer personal data outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements. These safeguards may include:

• Transfers to countries recognised by the UK government as providing adequate data protection
• Standard contractual clauses approved by the UK Information Commissioner's Office (ICO)
• Other lawful transfer mechanisms as appropriate

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of Access. You may request a copy of the personal data we hold about you.
• Right to Rectification. You may request correction of inaccurate or incomplete personal data.
• Right to Erasure. You may request deletion of your personal data, subject to our legal retention obligations.
• Right to Restriction. You may request that we restrict processing of your personal data in certain circumstances.
• Right to Data Portability. You may request to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object. You may object to processing based on legitimate interests.
• Right to Withdraw Consent. Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month, as required by law.

Complaint to the ICO. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

9. Security Measures

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL)
• Access controls and authentication requirements for internal systems
• Regular review of data collection, storage, and processing practices

No method of electronic transmission or storage is completely secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.

10. Cookies

We use cookies and similar technologies for the following purposes:

10.1 Strictly Necessary Cookies. Required for the Service to function, including session management and authentication. These cookies cannot be disabled.

10.2 Functional Cookies. Used to remember your preferences, such as language selection and display settings.

10.3 Analytics Cookies. Used to understand how visitors interact with the Service, helping us improve functionality and user experience. Where required by law, we obtain your consent before placing analytics cookies.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.

11. Children

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete that data promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or through the Service interface. Your continued use of the Service after such changes constitutes acceptance of the revised Policy.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at:

Synpix Ltd 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom Email: [email protected]