Effective 3 September 2026 · Applies to syde.to and app.syde.to
This Privacy Policy explains how Syde Ltd(“Syde”, “we”, “us”) collects, uses, and shares your personal data when you use the Syde platform.
By creating an account or continuing to use Syde, you acknowledge that you’ve read and understood this policy.
Syde Ltd is the data controller responsible for your personal data when you use the Syde platform.
Syde Ltd — Privacy Team
11 St Nicholas Street, Suite 201, Weymouth, Dorset, DT4 8AA
Company number: 17231998
Email: privacy@syde.to
If you’re a member of a Network on Syde, the organisation running that Network (the “Network Owner”) is also an independent data controller for the data you share with them directly — check their own privacy notice for how they handle it.
Where we act as a data processor for a Network Owner, we process your data only in line with their instructions and the data processing terms in our Terms of Service.
We collect the following categories of personal data:
| Category | Examples | How collected |
|---|---|---|
| Account data | Name, email address, password (hashed), profile photo, role, date of birth | Provided by you on registration |
| Payment data | Subscription tier, billing history, last four digits of card. Full card details are held by Stripe and never stored by us. | Generated when you subscribe or pay |
| Network & usage data | Networks joined or managed, posts, events, documents, messages, feature interactions | Generated as you use the platform |
| Technical data | IP address, browser type, device type, pages visited, session timestamps | Collected automatically via server logs and strictly-necessary cookies |
| AI interaction data | Prompts and input you submit to AI-assisted features; the resulting output | Provided by you when using an AI feature (see Section 6) |
| Communications | Messages sent to our support team, enquiry forms | Provided by you |
We collect date of birth to confirm you meet our minimum age requirement (see Section 11). We don’t knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, please contact us at privacy@syde.toand we’ll delete it promptly.
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Creating and maintaining your account | Contract (Art. 6(1)(b)) — necessary to provide the service |
| Processing subscription and purchase payments | Contract (Art. 6(1)(b)) |
| Enabling Network features (posts, events, messaging) | Contract (Art. 6(1)(b)) |
| Sending transactional emails (receipts, account notices) | Contract (Art. 6(1)(b)) |
| Preventing fraud and keeping the platform secure | Legitimate interests (Art. 6(1)(f)) — protecting the platform and its users |
| Understanding platform usage to improve the product | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations (e.g. tax records) | Legal obligation (Art. 6(1)(c)) |
| Marketing communications, if you opt in | Consent (Art. 6(1)(a)) |
| Data type | Retention period | Reason |
|---|---|---|
| Account data | Duration of your account, plus a short window after a deletion request to complete it | To provide the service, and as a safety margin for account recovery |
| Payment records | 7 years from the transaction date | HMRC tax and accounting obligations |
| Usage and activity logs | Kept only as long as needed for security monitoring and fraud prevention, then deleted or anonymised | Security |
| Support correspondence | Up to 3 years | Resolving disputes and improving support |
| AI interaction data | Up to 30 days, then deleted | See Section 6 |
| Backup copies | Up to 90 days after deletion from live systems | Disaster recovery |
When we no longer need your data, we delete or anonymise it.
We don’t sell your personal data. We share it only in the following circumstances:
Syde includes optional, clearly-labelled AI-assisted features to help with things like drafting an event or Network description. When you use them:
AI features are always optional — you can use the rest of Syde without them.
Network Owners are independent data controllers in their own right for their members’ personal data. This means:
Where Syde processes member data on a Network Owner’s behalf (for example, storing membership records or sending communications for them), Syde acts as a data processor. The data processing terms in our Terms of Service, Section 6.5, form the written agreement required under UK GDPR Article 28 between us.
Syde remains the data controller for any data we process about Network Owners themselves — account data, billing records, and platform usage logs.
Syde is based in the UK. Some of our service providers — including Stripe and our AI provider, both listed at syde.to/legal/sub-processors — may process personal data outside the UK, mainly in the United States.
Where we transfer personal data outside the UK, we put appropriate safeguards in place, such as:
You can ask for details of the specific safeguard used for any particular transfer by emailing privacy@syde.to.
Syde doesn’t use any analytics, marketing, or advertising cookies. Every cookie we set is strictly necessary to run the product — keeping you signed in, remembering your light/dark preference, and supporting a feature you’ve explicitly used (such as an embedded single-network view, or resuming an action you started before verifying your email). None of these track you across other sites, and none require your consent under UK cookie law (PECR) because they’re all strictly necessary.
Because of that, the cookie notice you see on first visiting Syde is a simple acknowledgement rather than an accept/reject choice — there’s nothing non-essential to opt in or out of. If that ever changes, we’ll update this section and the notice first.
Under UK data protection law, you have the following rights over your personal data:
To know how and why we use your personal data — this policy is how we tell you.
To get a copy of the personal data we hold about you.
To have inaccurate data corrected, or incomplete data completed.
To ask us to delete your personal data where there's no good reason to keep it.
To ask us to pause processing your data in certain circumstances.
To get your data in a structured, machine-readable format and take it elsewhere.
To object to processing based on legitimate interests or direct marketing.
Not to be subject to solely automated decisions with significant legal or similar effects. We don't currently make any.
To exercise any of these rights, go to Profile → Preferences and submit a data export or deletion request, or email privacy@syde.to. We review and respond to requests within one calendar month, and don’t charge a fee for a standard request.
If you’re unhappy with our response, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Syde is intended for people aged 16 and over — this is our minimum age for creating an account, whether as a member or a Network Owner. We collect date of birth at registration to check this.
If you’re a parent or guardian and believe your child has created an account despite this, please contact us at privacy@syde.to and we’ll look into it promptly, and delete the account and its personal data where appropriate.
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or damage, including:
No system is ever completely secure. You’re responsible for keeping your account credentials confidential and for any activity under your account. If you suspect unauthorised access, contact us straight away at privacy@syde.to.
We may update this Privacy Policy from time to time. When we make a material change, we’ll notify you by email and by showing a notice on the platform, at least 14 days before it takes effect.
The date at the top of this page shows when it was last revised. Continuing to use Syde after a change takes effect means you accept the update.
Questions about this policy or how we handle your data? Get in touch:
Syde Ltd — Privacy Team
11 St Nicholas Street, Suite 201, Weymouth, Dorset, DT4 8AA
Company number: 17231998
Email: privacy@syde.to