December 2025
Synergia Website Privacy Policy
Introduction
Welcome to Synergia commercial website. Synergia website provides information on Synergia’s customized quality and compliance solutions designed to adapt to specific workflows, and allows you to contact us, booking demos etc. (the “Website”).
This Privacy Policy (“Policy”) explains how information about you is collected through the Website and used by Synergia Compliance Systems Ltd. (“Synergia” or “we”, “us”, “our”). It does not apply to any use of our solutions.
The Website is not directed at users under the age of 18. We do not knowingly collect information or data from children under the age of 18 or knowingly allow minors under the age of 18 to use the Website.
This Policy may be amended from time to time. We will post any change to this Policy on our Website at a reasonable time in advance of the effective date of the change, and we will also make efforts to proactively notify you by email of the changes if we have your email address.
Contact us
If you have any questions, comments or concerns regarding this Policy or our processing of your personal information, please contact us at [email protected] Please note that you have the right to review and request to correct the personal information we collect and use about you.
What we collect and why
| Scenario | Purposes | Categories of information processed |
| You subscribe to our newsletters | Providing you with marketing newsletters, such as product updates newsletters, information about new features, improvements, or relevant product-related announcements. | Email address, full name. |
| When you subscribe to our service, purchase additional licenses or additional resources | Providing you with the functionality you requested, such as additional user licenses and additional resources. Please note that even if you unsubscribe from receiving marketing newsletters, we may still send you operational or transactional communications. | Email address, account username, ID number / other unique identifier, financial or payment information. We will also collect your payment status and the last four digits of your credit card number. We will not directly collect your full payment information (such as your full credit card number) – this information will be collected through a third-party service provider. |
| When you contact us with an inquiry through our email or online contact form, requesting a demo | Responding to your inquiry; Our business development | Full name, company, email address, phone number, the subject of your inquiry and the text of your message. |
| When you provide us with your feedback and reviews | Responding to your feedback and reviews; Our business development | Full name, company, email address, phone number and the feedback or review. |
| Use of cookies on the Website | Facilitate a Website feature that you specifically requested, analyze the Website usage to evaluate and improve its performance, improve user experience on the Website, inform and serve personalized ads more relevant to user interests. | IP address from which you access the Website, time and date of access, type of device and browser used, language used, links clicked via a mouse or a touch screen, and actions taken while using the Website. |
You do not have a legal obligation to provide the information that we request. You do so at your own discretion and consent. However, if you choose not to provide the information to us, we may not be able to process your purchase or feedback, respond to your inquiry and provide you with our newsletter, and you may not be able to use some of our Website functionalities.
Methods and sources for collecting your personal information
We collect the personal information from several sources:
- Directly from you when provided to us through our email or via our online contact form.
- From our service providers helping us to operate the Website.
- Through the device you use to access our Website, including through third party cookies and analytics tools.
Sharing your personal information
We will not share your information with third parties, except in the events listed below or when you provide us with your explicit and informed consent.
| Scenario | Purposes | Examples of third parties involved |
| We will share your information with our service providers who assist us with the internal operations of the Website. These companies are authorized to use your personal information in this context only as necessary to provide these services to us and not for their own promotional purposes | Operating the Website and our business. | Microsoft (Bing Ads), WordPress and GoogleSubject to the following additional Policies:https://www.microsoft.com/en-us/privacy/privacystatementhttps://wordpress.org/about/privacy/https://policies.google.com/technologies/cookies. |
| If you abused your rights to use the Website or violated any applicable law while doing business with us | Responding to, handling, and mitigating suspected violations of law in connection with our business. | Competent authorities, legal counsels, and advisors. |
| If a judicial, governmental, or regulatory authority requires us to disclose your information | Complying with a binding request from a competent authority. | Competent authorities. |
| If the operation of the Website or our business is organized within a different framework, or through another legal structure or entity | Enabling a structural change in the operation of the Website and our business. | The target entity of the merger or acquisition, legal counsels, and advisors. |
| Sharing your information with our affiliates | Demonstrations and operation of the services, performing the demo to potential customers and operation of our services. | Origami Information Systems Ltd., subject to Origami Privacy Policy available at https://origami.ms/privacy-policy/. |
Data retention and security
We retain your information for as long as needed to operate the Website, and thereafter as needed for record-keeping matters.
We will retain your information for as long as needed to operate the Website. Thereafter, we will still retain your personal information as necessary to comply with our legal obligations, resolve disputes, establish, and defend legal claims and enforce our agreements. The overall period of retention is approximately 7 years.
We implement measures to secure your information
We implement measures to reduce the risks of damage, loss of information and unauthorized access or use of information. However, these measures do not provide absolute information security. Therefore, although efforts are made to secure your personal information, there is no guarantee that it will be immune from information security risks.
Data subject rights
You have a right to receive a copy of your personal information that we process and correct inaccurate personal information we have concerning you and to have incomplete personal information completed. To exercise these rights, please contact us at [email protected].
Additional information for individuals in the EU or UK
Controller, GDPR and UK representatives
Synergia Compliance Systems Ltd. is the data controller of the personal information collected via the Website. Synergia’s address is Atir Yeda St 14, Kfar Saba, Israel. Telephone: +972-9-8801955, [email protected].
International data transfers
To facilitate processing your information through the Service and by our service providers, we will transfer your information to countries outside the EU or the UK. We do so to countries or organizations which are recognized by the European commission as having adequate protection for personal data, or under the terms of a data transfer agreement which contains standard data protection contract clauses with adequate safeguards determined by the EU Commission and UK Information Commissioner’s Office.
Legal basis for processing your personal data
| Purpose or Scenario | Legal Basis |
| Subscribing to our newsletters | Consent. |
| When you subscribe to our service, purchase additional licenses or additional resources | Providing you with the functionality of the Website you requested, performance of our contract with you. |
| Responding to your inquiry | Responding to your inquiry, our business development. |
| When you provide us with your feedback and reviews | Our legitimate interest in developing and enhancing our business and the Website and our services, responding to your feedback or reviews. |
| Use of strictly necessary cookies | Our legitimate interest in the proper functioning of the Website. |
| Use of optional cookies | Consent. |
| Sharing your information with our affiliates for the purposes of demonstrations and operation of the services | Our legitimate interest in performing the demo to potential customers and our legitimate interest in the operation of our services. |
| Responding to, handling, and mitigating suspected violations of law in connection with our business | Legitimate interests in defending and enforcing against violations and breaches that are harmful to our business. |
| Complying with a binding request from a competent authority | Legitimate interest in complying with mandatory legal requirements imposed on us. |
| Enabling a structural change in the operation of the Website and our business | Legitimate interests in our business continuity. |
Data subject rights
If you are in the EU or the UK, you have the following rights under the GDPR:
Right to Access and receive a copy of your personal information that we process.
Right to Rectify inaccurate personal information we have concerning you and to have incomplete personal information completed.
Right to easily and at any time withdraw your consent to us processing your personal data to email you our newsletters. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal
Right to easily and at any time withdraw your consent to the use of non-essential cookies on our Website. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Right to Data Portability, that is, to receive the personal information that you provided to us, in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another person or entity. Where technically feasible, you have the right to have your personal information transmitted directly from us to the person or entity you designate.
Right to Object to our processing of your personal information based on our legitimate interest. However, we may override the objection if we demonstrate compelling legitimate grounds, or if we need to process such personal information for the establishment, exercise, or defense of legal claims.
Right to Restrict us from processing your personal information (except for storing it): (a) if you contest the accuracy of the personal information (in which case the restriction applies only for a period enabling us to determine the accuracy of the personal information); (b) if the processing is unlawful and you prefer to restrict the processing of the personal information rather than requiring the deletion of such data by us; (c) if we no longer need the personal information for the purposes outlined in this Policy, but you require the personal information to establish, exercise or defend legal claims; or (d) if you object to our processing based on our legitimate interest (in which case the restriction applies only for the period enabling us to determine whether our legitimate grounds for processing override yours).
Right to be Forgotten. Under certain circumstances, such as when you object to our processing of your personal information based on our legitimate interest and there are no overriding legitimate grounds for the processing, you have the right to ask us to erase your personal information. However, notwithstanding such request, we may still process your personal information if it is necessary to comply with our legal obligations, or for the establishment, exercise, or defense of legal claims. If you wish to exercise any of these rights, please contact us through the channels listed in this Policy.
When you contact us, we reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide you with information that you have asked for, we will explain the reason.
Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, then according to Article 77 of the GDPR, you can lodge a complaint to the supervisory authority, in the Member State of your residence, place of work or place of alleged infringement of the GDPR. For a list of supervisory authorities in the EU, click here.
If you are in the UK, you can lodge a complaint to the Information Commissioner’s Office (ICO) pursuant to the instructions provided here.
Additional information for individuals in California and Texas
If you are an individual residing in California or Texas, we provide you with the following information pursuant to the privacy law in California (CPRA) and Texas (TDPSA). This is also the information we have collected in the past 12 months.
Personal Information We Collect
| Categories of personal information | Specific types of personal information collected | Source of Information |
| Identifiers | Real Name, IP address, email address. | The consumer themselves. |
| Other personal information that identifies, relates to, describes, or is capable of being associated with, a particular individual | Phone number, 4 digits of the credit card number. | The consumer themselves. |
| Consumer Commercial information | Services considered. | The consumer themselves. |
| Employment Information | Your organization. | The consumer themselves. |
| Internet or other electronic network activity information | Internet or other electronic network activity information. | The consumer’s device. |
Business Purposes for Which the Personal Information is Used
The following are the business or commercial purposes for which we use each category of personal information. Details about the information we collect for each category are provided on the table above. More details about the business or commercial purposes are provided in the privacy policy’s section titled ‘What we collect and why‘.
| Categories of personal information | Business Purposes for which the information is used |
| Identifiers | Helping to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes.Debugging to identify and repair errors that impair existing intended functionality.Maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business.Undertaking internal research for technological development and demonstration.Undertaking activities to verify or maintain the quality or safety of a service or device, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. |
| Other personal information that identifies, relates to, describes, or is capable of being associated with, a particular individual | |
| Consumer Commercial information | |
| Internet or other electronic network activity information | |
| Employment Information | |
| Internet or other electronic network activity information |
Sharing, Selling and Disclosing to third parties
We do not share your personal information for behavioral-targeted ads and do not sell it. The chart below explains about the personal information we disclosed in the preceding 12 months. Other than this, we have not disclosed your personal information for a business purpose in the preceding 12 months
| Categories of personal information | Categories of third parties to whom we disclose your information and the specific business purpose for the disclosure |
| IdentifiersOther personal information that identifies, relates to, describes, or is capable of being associated with, a particular individualConsumer Commercial informationInternet or other electronic network activity informationEmployment Information Inferences | Competent authorities, legal counsels, and advisors if you abused your rights to use the Website or violated any applicable law in the course of doing business with us.Judicial, governmental, or regulatory authority if they require us to disclose your information.Target entity of the merger or acquisition, legal counsels, and advisors If the operation of the Website or our business is organized within a different framework, or through another legal structure or entity.Our affiliates, for the purposes of demonstrations and operation of the services, performing the demo to potential customers and operation of our services. |
Your rights if you are a resident of California or Texas
Knowing the personal information we collect about you and to obtain the personal data in a readable format
You have the right to know:
- The categories of personal information we have collected about you.
- The categories of sources from which the personal information is collected.
- Our business or commercial purpose is for collecting personal information.
- The categories of third parties with whom we share personal information, if any.
- The specific pieces of personal information we have collected about you.
Right to delete personal data provided by or obtained about you
Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:
- Delete your personal information from our records; and
- Direct any service providers to delete your personal information from their records.
Please note that we may not delete your personal information if it is necessary to:
- Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us.
- Help to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for those purposes.
- Debug to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
- Comply with the applicable privacy act.
- Engage in public or peer-reviewed scientific, historical, or statistical research that conforms or adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the ability to complete such research, provided we have obtained your informed consent.
- Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us and compatible with the context in which you provided the information.
or
- Comply with an existing legal obligation.
We also will deny your request to delete if it proves impossible or involves disproportionate effort, or if another exception to the CPRA or the TDPSA applies. We will provide you a detailed explanation that includes enough facts to give you a meaningful understanding as to why we cannot comply with the request to delete your information.
Right to correct inaccurate personal information, taking into account the nature of the data and the purposes for processing the data
If we receive a verifiable request from you to correct your information and we determine the accuracy of the corrected information you provide, we will correct inaccurate personal information that we maintain about you.
In determining the accuracy of the personal information that is the subject of your request to correct, we will consider the totality of the circumstances relating to the contested personal information.
We also may require that you provide documentation if we believe it is necessary to rebut our own documentation that the personal information is accurate.
We may deny your request to correct in the following cases:
- We have a good-faith, reasonable, and documented belief that your request to correct is fraudulent or abusive.
- We determine that the contested personal information is more likely than not accurate based on the totality of the circumstances.
- Conflict with federal or state law.
- Other exception to the CPRA or the TDPSA.
- Inadequacy in the required documentation
- Compliance proves impossible or involves disproportionate effort.
We will provide you a detailed explanation that includes enough facts to give you a meaningful understanding as to why we cannot comply with the request to correct your information
Protection against discrimination for exercising these rights
You have the right to not be discriminated by us for exercising the rights granted to you under applicable law. If you exercise your rights, we cannot:
- Deny you of services.
- Charge different prices or fees for services, also through discounts, benefits, or fines.
- Provide you with a different level or quality of services.
- Propose that you receive different prices or tariffs for services.
Please note that we may charge a different fee or provide a different level or quality of services, if the difference is reasonably related to the value we gain from your personal information.
Exercising your rights by yourself or through an authorized agent
If you would like to exercise any of your rights as described in this Policy, please contact us by e-mail at: [email protected].
We will ask you for additional information to confirm your identity and for security purposes, before disclosing the personal data you requested, by using a two or three points of data verification process, depending on the type of information you require and the nature of your request.
We may ask you for additional information to confirm your identity and for security purposes, before disclosing the personal data requested to you, by using a two or three points of data verification process, depending on the type of information you require.
You may also designate an authorized agent to make a request on your behalf. To do so, you need to provide the authorized agent with written permission to do so and the agent will need to submit to us proof that they have been authorized by you. We will also require that you verify your own identity, as explained below.
Our response to your requests
We will respond to your requests within 45 days (or within 90 days, where the law permits and we determine it necessary considering the complexity and number of the requests you have filed). If we take longer than 45 days, we will inform you of the extension within the initial forty-five-day response period, together with the reason for the extension.
We may deny your request in the following cases:
- If we believe in good faith, based on reasons which are documented in writing, that your request is fraudulent or is an abuse of your rights under applicable law.
- If we conclude that the request is irrelevant, based on all the circumstances at issue (e.g., if you requested to correct your personal information, and we find that it is likely to be accurate).
- If it is contrary to federal or state law.
- Due to discrepancy in the required documentation.
- If the fulfilment of your request turns out to be impossible or involves disproportionate effort.
We will provide you with a detailed explanation including sufficient facts, to enable you to meaningfully understand why we cannot fulfil your request.
Do Not Track
Our Do Not Track Notice. We do not currently respond or take any action with respect to web browser “do not track” signals or other mechanisms that provide consumers the ability to exercise choice regarding the collection of Personal Data about a User’s online activities over time and across third-party web sites or online services.