Privacy Notice

Last updated: January 2025

Introduction

SYNVRA TECHNOLOGIES W.L.L (تقنيات سينفرا ذ.م.م) ("Synvra," "we," "us," or "our") is committed to protecting your privacy. This Privacy Notice explains how we collect, use, disclose, and safeguard your information when you visit our website www.synvra-technologies.com and use our services.

Please read this Privacy Notice carefully. By accessing or using our services, you acknowledge that you have read and understood this Privacy Notice.

1. Information We Collect

Personal Information

When you use our platform, we may collect:

• Contact Information: Name, email address, phone number, company name
• Account Information: Username, password, profile details
• Professional Information: Skills, experience, portfolio, work history, certifications
• Payment Information: Billing address, payment method details (processed securely through third-party payment processors)
• Communication Data: Messages, feedback, support inquiries
• Project Data: Project requirements, contracts, deliverables, reviews

Technical Information

We automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, clicks, navigation patterns
• Cookies and Tracking: See our Cookie Policy section below
• Location Data: General geographic location based on IP address

Information from Third Parties

We may receive information from:

• Social media platforms (if you connect your account)
• Payment processors
• Background verification services (for talent vetting)
• Public professional profiles (LinkedIn, GitHub, portfolios)

2. How We Use Your Information

Service Delivery

• Matching clients with suitable talent
• Facilitating project agreements and contracts
• Processing payments and transactions
• Providing customer support
• Managing user accounts

Platform Improvement

• Analyzing usage patterns and trends
• Improving platform functionality and user experience
• Developing new features and services
• Conducting research and analytics

Communication

• Sending service updates and notifications
• Responding to inquiries and support requests
• Marketing communications (with your consent)
• Important policy or terms updates

Legal and Security

• Preventing fraud and unauthorized access
• Enforcing our Terms of Service
• Complying with legal obligations
• Protecting our rights and those of our users
• Resolving disputes

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data based on:

• Contract Performance: Processing necessary to provide our services
• Legitimate Interests: Improving our platform, fraud prevention, security
• Legal Obligation: Compliance with applicable laws and regulations
• Consent: Marketing communications and optional features (you may withdraw consent anytime)

4. How We Share Your Information

Service Providers

• Payment processors (Stripe, PayPal, etc.)
• Cloud hosting providers (AWS, Google Cloud, etc.)
• Email service providers
• Analytics services (Google Analytics)
• Customer support tools

Platform Participants

• Clients can view talent profiles, portfolios, and reviews
• Talent can view client project requirements and company information
• Both parties access communication and project details

Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity.

Legal Requirements

We may disclose information when required by:

• Court orders or legal processes
• Government or regulatory authorities
• Law enforcement agencies
• Protection of our legal rights

5. International Data Transfers

Synvra operates globally. Your information may be transferred to and processed in countries outside Bahrain, including cloud servers in the United States, Europe, or Asia.

We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by relevant authorities
• Certified frameworks (Privacy Shield successors where applicable)

6. Data Retention

We retain your personal information for as long as:

• Your account remains active
• Necessary to provide our services
• Required for legal, accounting, or regulatory purposes
• Needed to resolve disputes or enforce our agreements

Typical retention periods:

• Active accounts: Duration of account plus 3 years
• Project data: 7 years (for legal and tax compliance)
• Marketing data: Until you unsubscribe or withdraw consent
• Technical logs: 12-24 months

7. Your Privacy Rights

Access and Portability

• Request a copy of your personal data
• Receive your data in a structured, machine-readable format

Correction

• Update or correct inaccurate information
• Complete incomplete data

Deletion ("Right to be Forgotten")

• Request deletion of your personal data
• Subject to legal retention requirements

Restriction and Objection

• Restrict processing of your data
• Object to processing based on legitimate interests
• Opt-out of marketing communications

Withdraw Consent

• Withdraw consent for optional data processing
• Does not affect lawfulness of prior processing

To exercise your rights: Contact privacy@synvra-technologies.com

We will respond to requests within 30 days.

8. Cookies and Tracking Technologies

What We Use

• Essential Cookies: Required for platform functionality (login, security)
• Analytics Cookies: Google Analytics, usage tracking (anonymized where possible)
• Functional Cookies: Remember preferences, language settings
• Marketing Cookies: Track ad performance, retargeting (with consent)

Your Choices

• Browser Settings: Most browsers allow you to refuse cookies
• Opt-Out Tools: Google Analytics Opt-out, Do Not Track signals
• Cookie Preferences: Manage settings through our cookie banner

Note: Disabling essential cookies may affect platform functionality.

9. Data Security

Technical Safeguards

• SSL/TLS encryption for data transmission
• Encrypted data storage
• Secure authentication protocols
• Regular security audits and penetration testing
• Firewall and intrusion detection systems

Organizational Measures

• Access controls and authorization
• Employee training on data protection
• Confidentiality agreements
• Incident response procedures

However: No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

10. Third-Party Links

Our platform may contain links to third-party websites, services, or social media. We are not responsible for the privacy practices of external sites. Please review their privacy policies before providing personal information.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover we have collected data from a child, we will delete it promptly.

Parents/Guardians: If you believe your child has provided us with personal information, contact us at privacy@synvra-technologies.com.

12. Marketing Communications

Opt-In

We only send marketing emails with your consent.

Opt-Out

You may unsubscribe anytime via:

• Unsubscribe link in emails
• Account settings
• Email to: privacy@synvra-technologies.com

Note: You cannot opt-out of essential service communications (account notifications, security alerts, legal updates).

13. Changes to This Privacy Notice

We may update this Privacy Notice periodically to reflect changes in our practices, legal or regulatory requirements, or new features and services.

Material changes will be communicated via:

• Email notification
• Prominent website notice
• In-platform alerts

Effective date of changes will be updated at the top of this notice. Continued use after changes constitutes acceptance.

14. Contact Us

Data Protection Contact:

Email: privacy@synvra-technologies.com
Subject: Privacy Inquiry - [Your Topic]

General Contact:

Email: hello@synvra-technologies.com
Website: www.synvra-technologies.com

Company Details:

Response Time: We aim to respond to privacy inquiries within 5-10 business days.

15. Supervisory Authority

If you are located in the EEA and believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.