Privacy Policy.

swiftsync.uk is operated by SwiftSync, a sole trader based in Sutton Coldfield, B76, United Kingdom. For any privacy question, contact swiftsyncltd@gmail.com. We are the data controller for any personal data we hold about you.

From the contact form: name, email, optional phone number, and the message you write. Used solely to reply to you. Stored in our email inbox.

From the quote form: name, email, optional phone and company name, plus the details of the project or service you're asking about. Used to prepare your quote and follow up.

From a SwiftSync Academy capture: email address, business name, business type, and (if you're generating a certificate) your full name. Postcode is optional and only used to inform future locally-relevant content. You may also tick a separate, unticked-by-default checkbox to opt in to occasional marketing emails. If you don't tick it, we only ever email you in response to what you actively requested (for example, your certificate).

From analytics: we use Google Analytics 4 with consent-mode and IP anonymisation. If you accept analytics cookies, we receive standard pageview and session data — never your identity. If you decline, no analytics data is sent. You can change your choice any time via the "Cookie preferences" link in our footer.

From your browser, locally: the SwiftSync Academy stores your progress, checklist ticks, audit answers, quiz scores and (if you've previously filled in a capture form) your name, email, business name and business type, all in your browser's localStorage. This data never leaves your device. You can clear it any time via the "Clear all my progress on this device" link on the Academy hub, or by clearing your browser's site data for swiftsync.uk.

We rely on the following lawful bases under UK GDPR Article 6:

• Consent — for analytics cookies, and for any marketing emails you specifically opt in to via the unticked checkbox on the Academy capture form.
• Legitimate interest — for replying to enquiries, quote requests, and delivering things you've actively asked us to deliver (your audit report PDF, your AI prompt library PDF, your certificate). We rely on this only for these direct, expected interactions.
• Contract — for any data we process while working on a paid project for you.

If you tick the marketing opt-in checkbox on an Academy capture form, we may add a tag to your email address indicating which Academy resource you engaged with (for example, academy_gbp_checklist, academy_seo_audit, academy_ai_library, academy_certified). These tags help us send relevant follow-ups — they are not behavioural profiling and we don't share them.

Every marketing email we send will have a one-click unsubscribe. You can also email us at any time to be removed.

We never email you marketing material without your explicit, unticked-by-default consent. If you only use Academy resources without ticking that box, we won't add you to any marketing list at all.

We use a small number of processors to operate the site:

• Vercel — hosts swiftsync.uk. Receives standard server request logs.
• Resend — delivers transactional email (the notification to us when a form is submitted). Sees the email content as the email's body.
• Google Analytics 4 — only if you accept analytics cookies. Anonymised pageview and session data.
• Google Workspace (Gmail) — our inbox where form submissions arrive.

We do not sell, swap, or share your personal data with anyone else.

When you complete the SwiftSync Academy assessment and choose to generate a certificate, we create a certificate ID that simply encodes your name, the date, and the certificate type. The ID is built in your browser and the PNG/PDF download happens locally. We don't hold a server-side database of issued certificates. If you share the certificate's URL publicly, anyone with that URL can see the name and date it encodes — that's the whole point, so you can post it on LinkedIn.

Form submissions (contact, quote, Academy capture) live in our email inbox indefinitely until we delete them. You can ask us to delete anything relating to you at any time. localStorage data lives on your device until you clear it.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct anything that's wrong
• Ask us to delete it
• Withdraw consent for marketing or analytics at any time
• Receive a copy in a portable format
• Complain to the Information Commissioner's Office (ico.org.uk) if you're unhappy with how we've handled your data

For any of these, email swiftsyncltd@gmail.com. We'll reply within five working days.

We use one category of cookie: analytics, via Google Analytics 4 with consent-mode and IP anonymisation. The cookie banner asks you to accept or decline before any analytics data is sent. You can change your choice at any time via the "Cookie preferences" link in the footer.

We do not use advertising cookies, tracking pixels, or any cross-site tracking.

The SwiftSync Academy uses your browser's localStorage to remember:

• Which lessons you've started or completed
• Your GBP Mastery Checklist ticks
• Your SEO Self-Audit answers
• Your quiz and assessment scores
• If you've previously submitted a capture form, the values you entered (so we don't ask you to re-type them)

localStorage data lives only on your device. It isn't a cookie, isn't sent to any server, and isn't used for tracking. You can clear it any time via the "Clear all my progress on this device" link on the Academy hub.

swiftsync.uk is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe a child has submitted data, contact us and we'll delete it.

We may update this policy. When we do, the "Last updated" date at the top will change. For substantive changes affecting how we use existing personal data, we'll notify you by email where we hold one.

SwiftSync, Sutton Coldfield, B76, United Kingdom. swiftsyncltd@gmail.com.