Privacy Policy

We collect almost nothing. This website sets no cookies, runs no analytics, and embeds no third-party trackers, advertising pixels, or social media widgets.

The only personal data we collect through this site is what you type into the contact form and send to us deliberately. We use it to reply to you, and for nothing else. We do not sell it, we do not share it with advertisers, and we do not add you to a mailing list.

Everything below is the same statement in the detail the law requires.

BinarySync is the data controller for personal data collected through this website. [TO CONFIRM: registered entity name, registered address, and a data protection contact address before launch.]

Where we process personal data inside a system we have built or operate for a client, we act as a processor on that client instructions, not as a controller. That processing is governed by our contract with that client, not by this policy.

You can contact us about anything in this policy using the details in the footer of this site.

Through the contact form, and only when you choose to submit it, we collect the name, work email address, company name, the service area you selected, and the message you wrote.

We use this on the basis of our legitimate interest in responding to a business enquiry you sent us, and, where the enquiry leads to a proposal, on the basis of taking steps at your request before entering into a contract. We use it to read your enquiry, reply to it, and continue the conversation. We do not use it for marketing, we do not enrich it with data bought from anywhere else, and we do not profile you.

Our hosting provider keeps standard server logs, which will typically include the IP address a request came from, the time, the page requested, and the browser user-agent string. These exist so the site can be operated and defended against abuse, they are not used to identify or track individual visitors, and they are retained on the provider default schedule.

This website sets no cookies. There is no analytics cookie, no advertising cookie, no session cookie, and no third-party cookie of any kind, which is why you have not been shown a consent banner: there is nothing here to consent to.

The site uses one item of browser local storage, under the key binarysync-theme. It records whether you chose the light or the dark version of the site so that your choice is still in effect the next time you visit. It holds the single word "light", "dark", or "system". It never leaves your browser, it is never sent to us or to anyone else, and it identifies nothing about you.

That storage is strictly necessary to provide a feature you explicitly requested by using the theme toggle, and is exempt from consent requirements on that basis. You can clear it at any time through your browser settings for this site, with no effect other than the theme reverting to your operating system preference.

If we ever add analytics or any third-party embed, this section will be updated before it goes live and a consent mechanism will be added that blocks the script until you have made a choice.

We do not sell personal data, and we do not share it for advertising or for anyone else marketing.

A small number of service providers necessarily process data on our behalf in order for the site and our email to function: our hosting provider, our email provider, and the provider that delivers contact form submissions to our inbox. Each acts on our instructions under a contract, and each is chosen on the basis that it can meet the standards in this policy.

We will disclose personal data where we are legally required to, or where it is necessary to establish, exercise, or defend a legal claim. If we are ever compelled to disclose your data, we will tell you unless we are legally prohibited from doing so.

Data submitted through this site is stored on infrastructure operated by our hosting and email providers. Where a provider processes data outside the European Economic Area, that transfer is covered by an adequacy decision or by Standard Contractual Clauses.

[TO CONFIRM: name the hosting provider and its processing region. Briefs submitted through the contact form are delivered by email over SMTP to a Microsoft 365 mailbox; see app/api/contact/route.ts and lib/mail.ts.]

We keep contact form enquiries for as long as the conversation is live, and for up to 24 months afterwards so that we can pick up a thread you started earlier. After that they are deleted.

Where an enquiry becomes an engagement, the relevant records are kept for as long as the contract requires and for as long afterwards as tax and limitation law requires, and then deleted.

You can ask us to delete your enquiry sooner and we will, unless we are required to keep it.

If you are in the UK, the EEA, or another jurisdiction with equivalent law, you have the right to:

The site is served over HTTPS. Access to enquiries is limited to the people who need it to reply to you.

We build security systems for a living and we hold our own to the same standard we would recommend to a client: least privilege, multi-factor authentication on every account that supports it, and patching as a routine rather than an incident.

If a breach affects your personal data and is likely to present a risk to you, we will tell you and the relevant authority without undue delay, and in any case within 72 hours of becoming aware of it.

This is a business-to-business website and it is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.

If we change this policy we will change the date at the top of this page. Where a change is significant, such as a new category of data, a new purpose, a new recipient, or the introduction of any cookie, we will make it prominent rather than relying on you to notice a date.