Privacy Policy.

This Privacy Policy applies to personal information collected by SYNE Ratings through our websites (including this site), our rating and data products, our recruitment process, and any other interaction you have with us - including submitting a contact form, being contacted as part of a rating engagement, or applying for a role.

It does not apply to information we process on behalf of a client as part of a commissioned rating where that client is itself the data controller - in those cases, the client's own privacy notice governs, and this policy applies only to SYNE's role as a processor under our engagement terms with that client.

Website visitors

When you browse our websites, we automatically collect technical information such as your IP address, browser type, device information, pages visited, and referring URL, typically through cookies and similar technologies described in Section 10.

Contact forms and enquiries

When you submit a form on our site - including the Contact Us form - we collect the information you provide, such as your name, work email, company, the nature of your enquiry, and any message content.

Rated entities and their representatives

Where we rate a company, project, supplier or government, we collect business contact information for the individuals involved in that engagement, including names, job titles, and business email addresses, along with the disclosure information submitted as part of the rating process.

Job applicants

When you apply for a role through our Careers pages, we collect the information included in your application - such as your name, contact details, CV or resume, and any information you choose to share during an interview process.

Event and webinar registrants

When you register for a webinar or event, we collect your name, email address, and any information provided as part of registration or during a live Q&A session.

Where UK GDPR, EU GDPR, or an equivalent regime applies, we rely on one or more of the following legal bases for each processing activity described in Section 4:

• Consent - for marketing communications and non-essential cookies, which you can withdraw at any time
• Contract - to perform a rating, data licensing, or advisory engagement you or your organisation has commissioned
• Legitimate interests - to respond to enquiries, maintain website security, and improve our services, balanced against your rights
• Legal obligation - to comply with regulatory requirements applicable to SYNE as a ratings provider

As a group operating across the United Kingdom, Australia, New Zealand, India, Canada and the United States, personal information may be transferred between these jurisdictions in the course of delivering our services. Where a transfer is made from a jurisdiction with data transfer restrictions to one without an adequacy decision, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or an equivalent mechanism recognised in the relevant jurisdiction.

• Access - request a copy of the personal information we hold about you
• Rectification - ask us to correct inaccurate or incomplete information
• Erasure - ask us to delete your personal information, subject to certain legal exceptions
• Restriction - ask us to limit how we use your information while a request is resolved
• Portability - request your information in a structured, machine-readable format
• Objection - object to processing based on legitimate interests, including for direct marketing
• Withdraw consent - withdraw previously given consent at any time, without affecting processing already carried out

To exercise any of these rights, contact us using the details in Section 14. We will respond within the timeframe required by applicable law, typically within one month of a verified request.

We maintain technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, or destruction, including encryption in transit, access controls, and regular review of our security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will post the updated policy on this page with a revised "Last updated" date, and where changes are material, we will provide more prominent notice.