Privacy Policy.

01Who We Are

Syro Global Limited is the data controller for personal information collected through this website and our trade account platform. We are a company registered in England and Wales with our principal place of business in Birmingham, United Kingdom.

02What Personal Data We Collect

We collect only the data necessary to operate our business and serve our trade customers well. We never collect more than we need.

03How We Use Your Data

• To operate your trade account — process orders, deliver goods, manage credit terms.
• To communicate with you — order confirmations, delivery updates, customer service.
• To improve our service — analyse usage patterns, fix bugs, enhance the platform.
• For marketing — only with your explicit consent, and you can unsubscribe instantly at any time.
• To meet legal obligations — tax records, food traceability, anti-money-laundering checks where required.

04Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Contract — to fulfil our agreement with you to supply goods.
• Legal obligation — to comply with tax, customs, and food safety regulations.
• Legitimate interest — to run our business effectively (e.g., fraud prevention, service improvement).
• Consent — for marketing communications, which you can withdraw at any time.

05Who We Share Data With

We do not sell your personal data. Ever. We share it only with carefully selected partners who help us deliver our service:

• Couriers — name, delivery address, contact number (DPD, DHL, our own logistics).
• Payment processors — for processing card payments and direct debits (PCI-DSS compliant).
• Accounting software — for invoicing and statutory record-keeping.
• Government bodies — only where legally required (HMRC, FSA, ICO).

All processors are bound by data processing agreements and act only on our instruction.

06Cookies & Tracking

We use cookies for essential website functionality (session, cart, security) and with your consent, for analytics and marketing.

You can manage cookies in your browser settings at any time. Disabling essential cookies will affect site functionality.

07How Long We Keep Data

• Trade account & transaction records — 6 years after account closure (HMRC requirement).
• Marketing preferences — until you unsubscribe.
• Website analytics — anonymised after 14 months.
• Customer service correspondence — 2 years from last contact.

08Your Rights Under UK GDPR

You have the following rights over your personal data, exercisable free of charge:

• Access — request a copy of the data we hold about you.
• Rectification — correct any inaccurate data.
• Erasure — request deletion (subject to legal retention requirements).
• Restriction — pause processing of your data while a query is resolved.
• Portability — receive your data in a machine-readable format.
• Objection — opt out of marketing or legitimate-interest processing.
• Withdraw consent — at any time, for any consent-based processing.

To exercise any right, email info@syroglobal.co.site. We respond within 30 days.

09Data Security

We protect your data with industry-standard measures including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits. Payment data is handled exclusively by PCI-DSS Level 1 certified processors and never touches our servers.

In the unlikely event of a data breach affecting personal data, we will notify the ICO within 72 hours and inform affected individuals without undue delay.

10Contact & Complaints

For any privacy-related question, email our Data Protection Lead at info@syroglobal.co.site.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk — but please contact us first, we always try to resolve issues directly.