Legal

01Information We Collect

• Account Information: Name, email address, organisation details
• Usage Data: Log data, device information, and usage analytics
• Integration Data: Data synced from Concurrent to HubSpot, as determined by your configuration
• Payment Data: Processed securely by Stripe

02How We Use Your Information

• To provide and maintain the StaySynced service
• To process payments and manage subscriptions
• To communicate with you about your account and service updates
• To improve and secure our services

03Legal Basis for Processing

We process your personal data under the following lawful bases under the UK GDPR:

Where we rely on legitimate interests, we balance those interests against your rights and freedoms. Where we rely on consent, you may withdraw it at any time.

04Data Sharing and Sub-Processors

We share data with trusted sub-processors:

We do not sell your personal data. We may share data where required by law or to protect the rights and safety of Cloudfox Group Limited, our customers, and others.

05Cookies and Tracking Technologies

We use cookies and similar tracking technologies on the StaySynced website and platform, including strictly necessary cookies for authentication and payments, and analytics cookies. For full details of the cookies we use and how to control them, see our Cookie Policy.

06International Transfers

The website, dashboard and data-transformation step run on UK-based infrastructure (Vercel functions in London; Microsoft Azure in UK South); Vercel’s deployment builds run in the US but operate on source code, not your personal data. Your account data is hosted within the EEA (Supabase, in Ireland); transfers from the UK to the EEA are covered by UK adequacy regulations. Some sub-processors are US-headquartered (such as Stripe and HubSpot); where they process or access data outside the UK and EEA, including in the United States and India, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), Standard Contractual Clauses, or the EU-US Data Privacy Framework.

07Data Subject Rights

Under the UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Erase your personal data (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at dataprotection@cloudfox.it. We will respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk. Our ICO registration number is ZA932429.

08Data Security

We implement technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

09Retention

We retain your data only as long as necessary for the purpose for which it was collected, or as required by law. Our retention periods are as follows:

10Data Controller

The data controller for your personal data is:

Cloudfox Group Limited
Company Number: 12154368 · VAT: 349380671 · ICO Registration: ZA932429
71-75 Shelton Street, London, Greater London, WC2H 9JQ, United Kingdom

Data Protection Officer: Mr Eddie Lee — dataprotection@cloudfox.it

11Children's Privacy

StaySynced is intended for use by business operators and their staff. It is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18.

12Changes to this Policy

We may update this Privacy Policy from time to time. Changes will be posted to this page with an updated effective date. Your continued use of StaySynced after changes are posted constitutes acceptance of the updated policy.

13Contact

For privacy enquiries, contact dataprotection@cloudfox.it.