Privacy Policy

At SynergyStrat Consulting LLC (“SynergyStrat”, “we”, “us” or “our”), we are committed to protecting your privacy and ensuring transparency in how we collect, use, and safeguard your personal information. This Privacy Policy explains our practices regarding information collected through our website synergystrat.com and our business consultancy services.

This policy complies with the Saudi Arabia Personal Data Protection Law (PDPL), the EU General Data Protection Regulation (GDPR), and applicable international data protection regulations.

1. Information We Collect

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you:

• Contact Forms: Name, email address, phone number, company name, and message content
• Newsletter Subscription: Email address and preferences
• Consultation Bookings: Business details, requirements, and contact information
• Service Inquiries: Industry, business size, specific consulting needs
• Email Communications: Content of emails sent to info@synergystrat.com
• WhatsApp Communications: Messages sent via our WhatsApp business line

1.2 Information Collected Automatically

When you visit our website, we automatically collect:

• Technical Information: IP address, browser type and version, operating system, device type
• Usage Data: Pages visited, time spent on site, navigation paths, click patterns
• Location Data: Country and city (approximated from IP address)
• Referral Sources: Search engines, websites, or campaigns that brought you to us
• Cookies and Tracking: See Section 6 for detailed information

2. How We Use Your Information

We use collected information for legitimate business purposes:

• Service Delivery: Provide business consultancy, financial advisory, ZATCA VAT compliance, ERP implementation, and other professional services
• Communication: Respond to inquiries, send service updates, and provide customer support
• Marketing: Send relevant business insights, blog updates, and promotional materials (with your consent)
• Analytics: Improve our website performance, understand user behaviour, and optimize content
• Legal Compliance: Meet regulatory requirements in Saudi Arabia, GCC, and other jurisdictions
• Security: Protect against fraud, unauthorized access, and security threats
• Business Operations: Manage client relationships, billing, and contract administration

3. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: When you opt-in to communications or services
• Contract: To deliver services you have requested
• Legal Obligation: To comply with applicable laws and regulations
• Legitimate Interest: To improve services and protect our business

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share data only in these circumstances:

4.1 Service Providers

Trusted third parties who assist our operations under strict confidentiality:

• Google (Analytics, Search Console, Business Profile, Tag Manager)
• WordPress and Elementor (website infrastructure)
• Hostinger (web hosting and security)
• Email service providers
• Payment processors (for billing purposes only)

4.2 Legal Requirements

We may disclose information when required by:

• Saudi Arabian law enforcement or regulatory bodies (ZATCA, MOC, etc.)
• Court orders or legal processes
• Government tax authorities for compliance purposes
• Protection of our legal rights, property, or safety

4.3 Business Transfers

In case of merger, acquisition, or business transfer, personal data may be transferred to the new entity with appropriate safeguards.

5. Data Retention

We retain your information only as long as necessary:

• Contact Form Submissions: 3 years from last interaction
• Client Service Records: 7 years (regulatory requirement for tax/consulting)
• Marketing Subscriptions: Until you unsubscribe
• Website Analytics: 26 months (Google Analytics standard)
• Financial Records: Per ZATCA and Saudi tax law requirements

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience:

6.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality (cannot be disabled)
• Analytics Cookies: Google Analytics to understand site usage
• Functional Cookies: Remember your preferences
• Marketing Cookies: Used for relevant advertising (with consent)

6.2 Third-Party Services

We use these third-party services that may set cookies:

• Google Analytics — Website usage analytics
• Google Tag Manager — Tag management
• Google Search Console — Search performance
• Joinchat — WhatsApp integration
• Contact Form 7 — Form submissions

6.3 Managing Cookies

You can control cookies through your browser settings. Disabling cookies may affect website functionality. For detailed control of Google services, visit Google’s Cookie Policy.

7. Your Rights

Depending on your location, you have the following rights regarding your personal data:

7.1 Saudi Arabia (PDPL Rights)

• Right to know what data we collect
• Right to access your personal data
• Right to correct inaccurate data
• Right to delete your data (with exceptions)
• Right to withdraw consent
• Right to data portability

7.2 GDPR Rights (EU Visitors)

• Right to access, rectify, or erase data
• Right to restrict or object to processing
• Right to data portability
• Right to lodge complaint with supervisory authority
• Right to withdraw consent at any time

7.3 Exercising Your Rights

To exercise any of these rights, contact us at info@synergystrat.com. We will respond within 30 days. We may verify your identity before processing requests.

8. Data Security

We implement robust security measures to protect your information:

• SSL/TLS encryption for all data transmission
• Secure hosting infrastructure (Hostinger Premium Web Hosting)
• Regular security scans and malware monitoring (Wordfence)
• Restricted access to personal data (need-to-know basis)
• Strong password policies and two-factor authentication
• Regular security updates and patches
• Encrypted database backups

Despite these measures, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security but commit to following industry best practices.

9. International Data Transfers

Your information may be transferred to and processed in countries outside Saudi Arabia, including:

• India (where our Kochi office is located)
• United States (Google services, hosting infrastructure)
• European Union (some service providers)

We ensure appropriate safeguards including:

• Standard Contractual Clauses with service providers
• Compliance with applicable data transfer regulations
• Adequate protection standards

10. Children’s Privacy

Our services are intended for businesses and adults. We do not knowingly collect personal information from individuals under 18 years of age. If you believe a minor has provided us with information, please contact us immediately for removal.

11. Third-Party Links

Our website may contain links to external sites including:

• ZATCA government portal (zatca.gov.sa)
• Saudi Vision 2030 (vision2030.gov.sa)
• Educational and reference sources (Investopedia, SCORE, etc.)
• Social media platforms (LinkedIn, Instagram)

We are not responsible for the privacy practices of these external websites. Please review their respective privacy policies.

12. Marketing Communications

We send marketing communications (newsletters, blog updates, service offers) only with your explicit consent. You can:

• Unsubscribe via the link in every marketing email
• Email info@synergystrat.com with “Unsubscribe” in subject
• Change preferences in your account settings

Service-related communications (consultation responses, billing) will continue regardless of marketing preferences.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• Changes in our services or practices
• New legal or regulatory requirements
• Improvements in data protection

Material changes will be communicated via:

• Prominent notice on our website
• Email notification to subscribers
• Updated “Last Updated” date at the top of this policy

Continued use of our website after changes constitutes acceptance of the updated policy.

14. Data Controller Information

The data controller responsible for your personal information is:

15. Complaints and Disputes

If you have concerns about our privacy practices:

15.1 Contact Us First

Email info@synergystrat.com with subject “Privacy Concern”. We will respond within 30 days.

15.2 Regulatory Authorities

If unsatisfied with our response, you may contact:

• Saudi Arabia: Saudi Data and Artificial Intelligence Authority (SDAIA)
• EU: Your local Data Protection Authority
• India: Data Protection Board of India

16. Governing Law

This Privacy Policy is governed by the laws of:

• Primary: Kingdom of Saudi Arabia
• Secondary: Republic of India (for our India operations)

Any disputes will be resolved in the courts of Saudi Arabia or through mutual agreement on alternative dispute resolution.

17. Acknowledgement

By using synergystrat.com or engaging our services, you acknowledge that you have read, understood, and agree to this Privacy Policy.