Privacy Policy for synccloud.test
Effective Date: [Insert Date]
- Scope and Overview
This Privacy Policy describes how [Operator Legal Name], the operator of synccloud.test (“SyncCloud,” “we,” “us,” or “our”), collects, uses, discloses, and otherwise processes personal data and personal information when you access or use our website located at https://synccloud.test (the “Website”), contact us, or otherwise interact with us. This Policy is intended to satisfy applicable requirements under data protection and privacy laws, including, as applicable, the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR and Data Protection Act 2018, the Swiss Federal Act on Data Protection (“FADP”), and U.S. state privacy laws such as the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (“CCPA/CPRA”).
If you are a business customer using any SyncCloud products or services beyond the Website, our role in relation to user content and data may be as a “processor” or “service provider” on your instructions, subject to a separate agreement and data processing addendum (DPA). This Policy addresses our processing as a “controller” or “business” with respect to the Website and our own business operations.
- Controller; Representative; Data Protection Officer
- Controller: [Operator Legal Name], [Registered Address], [Country]
- Contact: [privacy@synccloud.test] or [Postal Address]
- Data Protection Officer (if applicable): [Name/Title], [DPO Contact Email]
- EU/UK Representative (if required by law): [Representative Name and Contact Details]
- Definitions
- “Personal data” (GDPR/FADP) means any information relating to an identified or identifiable natural person.
- “Personal information” (CCPA/CPRA) means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer or household.
- “Process” or “processing” means any operation performed on personal data/personal information, including collection, storage, use, disclosure, and deletion.
- “Controller”/“Business” determines the purposes and means of processing; “Processor”/“Service Provider” processes data on behalf of the controller/business pursuant to instructions.
- Categories of Data We Collect
Depending on your interactions with the Website, we may collect and process the following categories:
- Identifiers: name, username, email address, postal address, phone number, IP address, online identifiers, and cookie identifiers.
- Account and Authentication Data: account credentials and settings (if you create an account or sign in).
- Commercial Information: records of services requested, trial enrollments, and communications related to our offerings.
- Internet or Network Activity: browsing history on the Website, log data, pages viewed, referral URLs, timestamps, session duration, and interactions with Website features.
- Device and Technical Data: device type, operating system, browser type, language preferences, network information, and approximate location (based on IP).
- Communications and Support Data: content of messages you send to us (e.g., inquiries, support requests), survey responses, and feedback.
- User-Provided Content: information you upload or submit via forms on the Website.
- Sensitive Personal Information (as defined by applicable law): we do not seek to collect sensitive personal information via the Website (e.g., government identifiers, precise geolocation, financial account credentials, health data). If you nonetheless submit such information, we will process it only as necessary for the purpose for which it was provided and consistent with applicable law.
- Sources of Personal Data
We obtain data:
- Directly from you (e.g., form submissions, account registration, correspondence).
- Automatically from your device and browser through cookies, SDKs, pixels, and similar technologies when you use the Website.
- From third parties, where lawful, such as analytics providers, referral partners, or single sign-on providers (if enabled).
- Purposes and Legal Bases (GDPR/UK GDPR/FADP)
We process personal data for the following purposes and, where applicable, under the corresponding legal bases:
- Provide and Operate the Website, create and manage accounts, and deliver requested information or services: performance of a contract or pre-contractual steps (GDPR Art. 6(1)(b)).
- Communicate with You, including responding to inquiries and providing administrative notices: performance of a contract or legitimate interests (Art. 6(1)(f)) in operating our business and responding to requests.
- Security and Fraud Prevention, including monitoring, detecting, and preventing malicious or unauthorized activity: legitimate interests (Art. 6(1)(f)) and/or compliance with legal obligations (Art. 6(1)(c)).
- Analytics, Service Improvement, and Research to understand usage, improve Website functionality, and enhance user experience: legitimate interests (Art. 6(1)(f)).
- Marketing and Promotions, including sending newsletters or updates: consent (Art. 6(1)(a)) where required; otherwise legitimate interests (Art. 6(1)(f)). You may opt out at any time.
- Compliance with Laws, Legal Process, and Enforcement of Terms: legal obligations (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)).
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
- Cookies and Similar Technologies
We use cookies and similar technologies to:
- Enable core site functionality and security.
- Perform analytics and measure Website performance.
- Remember preferences.
- If enabled, deliver or assess marketing communications.
Non-essential cookies will be used where required only with your consent. You can manage preferences through our cookie banner or your browser settings. For details, see our Cookie Policy: [Link].
- Disclosures of Personal Data
We disclose personal data to:
- Service Providers/Processors: hosting providers, analytics vendors, communication tools, customer support platforms, security and anti-fraud services, and other vendors that process data on our behalf under contractual confidentiality, security, and data protection obligations.
- Business Partners: if you engage with integrations, referrals, or co-branded offerings, we may share limited data as necessary and lawful, with appropriate disclosures.
- Corporate Transactions: in connection with mergers, acquisitions, financing, or sale of assets, subject to appropriate safeguards and continued protection of your data.
- Legal and Safety: to courts, law enforcement, regulators, or others when we believe disclosure is required or permitted by law, or necessary to protect rights, safety, and property.
We do not allow service providers to use personal data for their own independent purposes, and we require them to implement appropriate technical and organizational measures to protect it.
- International Data Transfers
If personal data is transferred outside your jurisdiction (e.g., from the EEA, UK, or Switzerland to a country not deemed to provide an adequate level of protection), we will ensure appropriate safeguards, such as:
- EU Standard Contractual Clauses (SCCs); and/or
- UK International Data Transfer Addendum (IDTA)/Addendum to the SCCs; and
- Additional safeguards as necessary under applicable law.
A copy of applicable transfer mechanisms can be requested via the contact information below, subject to redactions for confidentiality.
- Data Retention
We retain personal data for as long as necessary to fulfill the purposes described in this Policy, including to comply with legal, accounting, or reporting requirements; resolve disputes; and enforce agreements. Retention periods vary by data category and purpose and are determined by:
- The duration of your relationship with us.
- The sensitivity of the data and potential risk of harm from unauthorized use or disclosure.
- Legal or regulatory record-keeping requirements.
We will securely delete or anonymize data when it is no longer needed for the purposes for which it was collected, subject to legal obligations.
-
Security
We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. While we strive to ensure security, no method of transmission over the Internet or method of electronic storage is fully secure.
-
Your Rights (EEA, UK, and Switzerland)
Subject to conditions and exceptions under applicable law, you may have the right to:
- Access your personal data and obtain a copy.
- Rectify inaccurate or incomplete personal data.
- Erase personal data (right to be forgotten).
- Restrict processing.
- Object to processing based on our legitimate interests, and to object to processing for direct marketing at any time.
- Data portability.
- Withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with your competent supervisory authority. To exercise rights, contact us at [privacy@synccloud.test]. We may require verification of your identity.
- U.S. State Privacy Notices (including California)
A. Notice at Collection (California)
We collect the following categories of personal information, as defined by the CCPA/CPRA, for the purposes described above and as further detailed below. We retain such information as described in Section 10.
- Identifiers: e.g., name, email address, IP address.
- Customer Records: e.g., account information, billing contact details.
- Internet/Network Information: e.g., browsing or search history on the Website, interactions with our pages.
- Geolocation Data: approximate location derived from IP address.
- Inferences: limited inferences drawn from your interactions to improve service and communications.
- Sensitive Personal Information: we do not intend to collect; if provided, we use it only as necessary for limited, disclosed purposes and do not use it to infer characteristics.
Sources include you, your devices, and service providers (e.g., analytics). We use and disclose these categories for the business purposes described in Sections 6–8.
Selling/Sharing: We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are defined by the CCPA/CPRA. If this practice changes, we will update this Policy, honor Global Privacy Control (GPC) signals as required, and provide a “Do Not Sell or Share My Personal Information” mechanism.
Use/Disclosure of Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes other than those permitted by Cal. Civ. Code § 1798.121 and regulations (e.g., service provision, security, short-term transient use).
B. California Consumer Rights
Subject to verification and exceptions, California residents may:
- Request to Know/Access the categories and specific pieces of personal information we collected about you, the sources, purposes, and categories of third parties to whom we disclosed it.
- Request Deletion of personal information we collected from you.
- Request Correction of inaccurate personal information.
- Request to Limit use and disclosure of sensitive personal information (if applicable).
- Opt Out of sale or sharing (if applicable; see above).
- Non-Discrimination: We will not discriminate against you for exercising your rights.
How to Submit a Request: Email [privacy@synccloud.test] or use [Web Form URL]. We will verify your identity using information you provide and our records. Authorized Agents may submit requests on your behalf with proof of authorization and subject to verification.
C. Other U.S. State Laws
If you are a resident of Virginia, Colorado, Connecticut, Utah, or other states with comprehensive privacy laws, you may have similar rights (access, correction, deletion, portability, and the right to opt out of targeted advertising, sale, and profiling in furtherance of decisions with legal or similarly significant effects). To exercise, contact us at [privacy@synccloud.test]. Appeals: If we deny your request, you may appeal by replying to our decision email with “Privacy Rights Appeal” in the subject line.
-
Children’s Privacy
The Website is not directed to children, and we do not knowingly collect personal data from individuals under the age of 16. If you believe a child has provided us with personal data, contact us at [privacy@synccloud.test], and we will take appropriate steps to delete such data as required by law.
-
Third-Party Links and Services
The Website may include links to third-party sites, services, or integrations. We are not responsible for the privacy practices of such third parties. We encourage you to review their privacy policies before providing personal data to them.
-
Role as Processor/Service Provider (If You Use SyncCloud Services Beyond the Website)
For customer content and data processed on behalf of enterprise or business customers within SyncCloud products, we act as a processor/service provider under applicable law, and our processing is governed by the applicable service agreement and DPA: [Link to DPA]. In such cases, the customer is the controller/business responsible for providing appropriate privacy notices to end users.
-
Changes to This Policy
We may update this Policy to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the Effective Date above and take additional steps as required by law (e.g., prominent notice or obtaining consent where necessary). Your continued use of the Website after an update signifies your acknowledgment of the revised Policy.
-
Contact Us
For questions, requests, or complaints regarding this Policy or our privacy practices, contact:
- Email: [privacy@synccloud.test]
- Mail: [Operator Legal Name], [Address], [City, State/Province, Postal Code], [Country]
- EEA/UK Data Subjects: You may also contact our DPO or EU/UK Representative (if appointed) using the details provided above and have the right to lodge a complaint with your local supervisory authority.
Important Notes
- Please customize bracketed fields (e.g., legal entity name, contact information, DPO/representative details, DPA link, cookie policy link, web form URL) and align statements about data categories, cookies, marketing, and disclosures with your actual practices before publishing.
- This Policy is intended to satisfy legal transparency requirements; it does not itself create contractual or third-party beneficiary rights unless expressly stated.
