SYNQ INTELLIGENCE LTD · PRIVACY & COMPLIANCE
Synq Intelligence Ltd ("SYNQ", "we", "our") builds behavioural routing and experience intelligence for physical membership venues. Our pipeline is designed to support UK GDPR and EU GDPR compliance, subject to client Data Protection Impact Assessments (DPIA) and formal legal review.
When connecting read-only with venue booking engines (e.g. Mariana Tek, Mindbody, Glofox, bsport, Gladstone), member identifiers are pseudonymized using HMAC-SHA256 cryptographic hashing with managed salt keys. Graph adjacency matrices operate strictly on pseudonymous node keys (e.g. Node_9a7b), ensuring relational calculations occur without directly referencing unencrypted personal names, email addresses, or phone numbers.
Dataset fingerprints, immutable ledger snapshots, and scientific pre-registration locks use SHA-256 cryptographic content digests to guarantee tamper-evident reproducibility across audit reporting.
Front-of-house and studio staff receive only high-level operational context required for service delivery. Frontline teams are never presented with raw social graph metrics or confidential peer connectivity maps. Contextual prompts are ephemeral and session-scoped, expiring after class check-in completion.
Outbound routing communications strictly preserve member anonymity. Recommended sessions reference timetable rhythm, class format, and room atmosphere. Communications never disclose other members' identities, personal schedules, or private attendance patterns.
Under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, the venue operator remains the Data Controller. SYNQ acts strictly as a Data Processor operating under written Data Processing Agreements (DPA) and documented Article 6(1)(f) Legitimate Interest assessments.
All compute operations occur within encrypted cloud infrastructure located within the UK and European Economic Area (EEA). Data is protected in transit using TLS 1.3 and at rest using AES-256 encryption.
Members wishing to exercise access, rectification, or erasure rights under GDPR may submit requests directly to their venue operator (Data Controller) or contact our Data Protection Officer at privacy@synq-ei.com.