Privacy policy.

Who we are

Cynnau Ltd is the controller for personal information processed through this website.

Company number: 17199107. Registered office: 128 City Road, London, EC1V 2NX, United Kingdom. Registered in: England & Wales.

You can contact us at hello@cynnau.com.

Information we collect

• Enquiries: if you email us, we receive your email address, message, and any information you choose to include.
• Website logs: our hosting and security providers may process technical information such as IP address, browser information, requested pages, timestamps, and security events.
• Third-party links: if you follow links to our apps or social profiles, those websites handle your information under their own policies.

How we use information

• To reply to enquiries and manage business relationships.
• To operate, secure, maintain, and improve the website.
• To keep basic records where needed for legal, accounting, or administrative purposes.

Our usual lawful basis is legitimate interests: running Cynnau, responding to people who contact us, and keeping the website secure. If we need to rely on another lawful basis for a specific purpose, we will explain that at the time.

Cookies and analytics

This website does not currently use non-essential cookies and does not currently run analytics. Because of that, we do not show a cookie banner.

If we add analytics or other non-essential tracking later, we will update this policy and, where required, ask for consent before setting those technologies.

Service providers

We use Cloudflare Pages to host and secure this website. We may also use email and business administration providers to receive, store, and respond to enquiries. These providers process information for us under their own security and privacy commitments.

How long we keep information

We keep enquiry emails only for as long as needed to respond and maintain appropriate business records. As a guide, routine enquiries are usually kept for up to 24 months, unless we need to keep them longer for legal, tax, contractual, or dispute-related reasons.

Technical logs are generally retained by our providers for limited operational and security periods.

Your rights

You may have rights to access, correct, delete, restrict, or object to how we use your personal information. You may also have the right to data portability in some circumstances.

Your right to object: where we rely on legitimate interests, you can object to that processing by contacting us.

You can raise a concern with the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

Changes

We may update this policy as the website or our services change. The latest version will always be available on this page.

Last updated: 26 June 2026.