Last updated: 1 June 2026
Synthosy Marketplace Ltd ("Synthosy", "we", "us") is the data controller for personal data collected through synthosy.com. Company registration number: 17252333. ICO registration number: ZC163965. Registered address: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.
Contact for data matters: hello@synthosy.com
Account data: name, email address, password (hashed), account type, registration date.
Profile data: display name, bio, website, social handles, profile picture, store banner.
Transaction data: purchase history, payout records, dispute history. Payment card details are processed by Stripe and never stored by us.
Identity verification: for sellers, Stripe collects KYC information including identity documents. Synthosy does not have access to raw KYC documents.
Usage data: pages visited, search queries, listing views, IP address, browser type, device type, referral source.
Communications: messages sent through the platform, support enquiries, dispute correspondence.
Technical data: session tokens, login history, security event logs.
To provide the service: processing purchases, delivering digital content, managing seller payouts, handling disputes. Legal basis: contract performance.
Account management: authentication, security, 2FA. Legal basis: contract performance and legitimate interests.
Transactional emails: purchase confirmations, sale notifications, listing approvals, dispute updates. Legal basis: contract performance.
Platform improvement: analytics, error monitoring, feature development. Legal basis: legitimate interests.
Legal compliance: fraud prevention, tax records, regulatory obligations. Legal basis: legal obligation.
Marketing: we will only send marketing communications with your explicit consent, which you can withdraw at any time.
We share data with the following third parties where necessary:
We do not sell your personal data to third parties. We do not share your data with advertisers.
We retain account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it for legal or tax purposes (typically 7 years for financial records).
Transaction records are retained for 7 years in accordance with UK tax law. Usage logs are retained for 90 days.
You have the right to: access your personal data; rectify inaccurate data; erase your data (right to be forgotten); restrict processing; data portability; and object to processing based on legitimate interests.
To exercise any of these rights, email hello@synthosy.com. We will respond within 30 days. You also have the right to lodge a complaint with the ICO at ico.org.uk (ICO registration: ZC163965).
We use essential cookies for authentication and session management. With your consent we may use analytics cookies. See our Cookie Policy for full details.
We implement appropriate technical and organisational measures to protect your data including encryption in transit (TLS), hashed passwords (bcrypt), and access controls. No system is completely secure — if you believe your account has been compromised, contact us immediately.
Some of our service providers (including Stripe and Cloudflare) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place such as Standard Contractual Clauses.
We may update this policy from time to time. We will notify you of material changes by email. The current version is always available at synthosy.com/privacy.
Data controller: Synthosy Marketplace Ltd, 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.
Email: hello@synthosy.com
ICO registration number: ZC163965