SyndewOS SyndewOS
  • Platform ↓
    Suite
    SyndewOSPlatform shell · Admin · Billing
    Oluṣọ IdentityAuth kernel · SSO · MFA · Passkeys
    Syndew360 Modules
    TribeHR & Recruiting
    VaultAccounting & Finance
    PulseCRM & Sales
     
    CampusFacilities & Assets
    RelayApprovals & Workflows
    BazaareCommerce & Commerce
  • Solutions ↓
    By Sector
    UniversitiesTertiary education institutions
    HospitalsTeaching & specialist hospitals
    GovernmentAgencies & public bodies
    By Need
    Financial ServicesBanks, community banks & fintechs
    DevelopersBuild on SyndewOS APIs
  • Partners
  • Docs
  • About
Sign in Contact Sales
Platform SyndewOS Tribe — HR Vault — Finance Pulse — CRM Campus — Facilities Relay — Approvals Bazaar — Commerce Solutions Universities Hospitals Government Financial Services Company Partners Docs About Contact Changelog
Sign in Contact Sales

Privacy Policy

Last updated: 1 April 2026

Syndew Technology Ltd ("Syndew", "we", "us") operates the SyndewOS platform, including SyndewOS, Syndew360 modules (Tribe, Vault, Pulse, Campus, Relay, Bazaar), Oluṣọ Identity, and the syndewos.com website. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our products and services.

We are committed to protecting your privacy and handling your data transparently. We do not sell personal data. We do not serve advertising. We do not track users across third-party sites.

1. Who we are

Data Controller: Syndew Technology Ltd, registered in England & Wales.

Contact: privacy@syndewos.com

For self-hosted deployments, the organisation operating SyndewOS is the data controller for their users' data. Syndew Technology Ltd acts as a data processor only when providing cloud-hosted or managed services.

2. What data we collect

2.1 Website visitors (syndewos.com)

  • Contact form submissions: name, email, organisation, phone (optional), message content
  • Analytics: we use privacy-respecting analytics that do not use cookies and do not track individuals. We collect aggregate page views, referral sources, and country-level location only.
  • Technical data: IP address (anonymised), browser type, operating system — for security and abuse prevention only

We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts on our website.

2.2 Cloud-hosted platform users

When your organisation uses a Syndew-managed cloud instance of SyndewOS, we process the following on behalf of your organisation:

  • Account data: name, email, role, organisation membership
  • Authentication data: hashed passwords, MFA enrolment, passkey credentials, session tokens
  • Operational data: employee records, financial records, CRM data, facility data, approval workflows — as entered by your organisation into the Syndew360 modules
  • Audit logs: timestamps, user IDs, and actions taken within the platform

Your organisation is the data controller for all operational data. We are the data processor. We process this data only to provide the service, maintain uptime, and perform backups.

2.3 Self-hosted deployments

When you self-host SyndewOS, no data is transmitted to Syndew Technology Ltd. The platform validates licenses offline using cryptographic keys. We do not receive telemetry, usage data, or any personal data from self-hosted instances unless you explicitly configure an integration (e.g., support ticket submission).

2.4 Partner and sales contacts

  • Business contact information provided during partner onboarding, sales discussions, or event registration
  • Communication records (emails, meeting notes) related to the business relationship

3. How we use your data

PurposeLegal basis (UK GDPR)
Providing and maintaining the SyndewOS platformPerformance of contract (Art. 6(1)(b))
Responding to contact form enquiriesLegitimate interest (Art. 6(1)(f))
Sending product updates to existing customersLegitimate interest (Art. 6(1)(f)) with opt-out
Security monitoring and abuse preventionLegitimate interest (Art. 6(1)(f))
Licence management and billingPerformance of contract (Art. 6(1)(b))
Legal compliance and regulatory obligationsLegal obligation (Art. 6(1)(c))

We do not use personal data for profiling, automated decision-making, or marketing without explicit consent.

4. Data sharing

We do not sell, rent, or trade personal data. We share data only in these limited circumstances:

  • Infrastructure providers: cloud hosting (Hetzner, Azure) for cloud-managed instances — these providers act as sub-processors under data processing agreements
  • Payment processors: for billing — they receive only the data necessary to process payments
  • Legal requirements: when required by law, regulation, or valid legal process
  • Business transfer: in the event of a merger or acquisition, with prior notice to affected users

We do not share data with advertising networks, data brokers, or social media platforms.

5. Data retention

  • Contact form submissions: 24 months, then deleted
  • Cloud platform data: retained for the duration of the customer contract, then deleted within 90 days of termination. Customers may request earlier deletion or data export at any time.
  • Backups: encrypted backups are retained for 30 days after deletion from the live system
  • Audit logs: retained for the minimum period required by applicable regulations (typically 7 years for financial records)
  • Self-hosted data: controlled entirely by the self-hosting organisation

6. Data security

We implement the following security measures:

  • Encryption in transit: TLS 1.3 for all connections
  • Encryption at rest: AES-256 for database storage and backups
  • Authentication: Oluṣọ Identity provides OAuth 2.0, OIDC, MFA, and FIDO2/WebAuthn passkey support
  • Access control: role-based access with principle of least privilege across all internal systems
  • Key management: signing keys stored in Azure Key Vault with HSM backing
  • Infrastructure: dedicated instances for cloud customers (not shared multi-tenant SaaS)
  • Monitoring: automated alerting for unauthorised access attempts and anomalous activity
  • Penetration testing: annual third-party security assessments

7. International transfers

For cloud-hosted instances, you choose your data residency region at deployment. Data does not leave your selected region unless you explicitly configure cross-region replication.

For self-hosted instances, data residency is entirely under your control.

Where transfers outside the UK/EEA are necessary for infrastructure operations, we rely on UK International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses (SCCs) as appropriate.

8. Your rights

Under the UK GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data (right to be forgotten)
  • Restrict processing
  • Data portability — receive your data in a structured, machine-readable format
  • Object to processing based on legitimate interest
  • Withdraw consent at any time, where consent is the legal basis

To exercise any of these rights, contact privacy@syndewos.com. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

The syndewos.com website uses one cookie:

  • syndewos-theme: stores your light/dark theme preference (localStorage, not a tracking cookie)

We do not use advertising cookies, analytics cookies, or third-party cookies of any kind.

10. Children's privacy

SyndewOS is designed for institutional and enterprise use. We do not knowingly collect personal data from children under 16. If you believe a child's data has been submitted, contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email to registered customers and posted on this page with a revised "last updated" date.

12. Contact

For privacy-related enquiries:

  • Email: privacy@syndewos.com
  • Post: Syndew Technology Ltd, registered in England & Wales
SyndewOS

One platform for every part of your organisation.

Platform

  • SyndewOS
  • Oluṣọ Identity
  • Syndew360
  • Bazaar

Solutions

  • Universities
  • Hospitals
  • Government
  • Financial Services

Company

  • About
  • Partners
  • Docs
  • Changelog
  • Contact

© 2026 Syndew Technology Ltd. Registered in England & Wales.

Privacy · Terms