Last Updated: January 1, 2026
1. Introduction
Syri Li Ltd ("Syrili," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our platform. Please read this policy carefully. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.
2. Information We Collect
2.1 Information You Provide to Us
- Contact Information: Name, email address, phone number, company name, and job title when you contact us or request a demo.
- Account Information: Username, password (securely hashed), and billing information when you create an account.
- Communication Data: Messages you send us through our contact form, email, or support channels.
2.2 Information We Collect Automatically
- Usage Data: Pages visited, time spent on pages, click-through rates, and navigation patterns.
- Device Data: IP address, browser type, operating system, device identifiers, and screen resolution.
- Cookies and Tracking: We use cookies and similar technologies to enhance your browsing experience and analyze site performance.
2.3 Data We Process on Behalf of Clients
When you use our climate intelligence platform, we may process environmental data, sensor readings, satellite imagery, and analytics outputs. This data is processed solely to deliver our services to you and our clients.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, operate, and maintain our website and services.
- To process and respond to your enquiries, requests for demos, and support requests.
- To create and manage your account, process payments, and provide customer support.
- To improve, personalize, and optimize our platform and user experience.
- To analyze usage patterns and performance metrics to inform product development.
- To send you updates, newsletters, and marketing communications (only with your explicit consent).
- To comply with legal obligations and enforce our Terms of Service.
4. Legal Basis for Processing (GDPR)
As a company operating in the United Kingdom and serving clients across the European Economic Area, we process personal data under the following legal bases as defined by the UK GDPR and EU GDPR:
- Contractual Necessity: Processing required to deliver contracted services to you.
- Legitimate Interests: Processing for security, analytics, and business improvement where our interests do not override your rights.
- Consent: Processing marketing communications and certain tracking activities where you have given explicit consent.
- Legal Obligation: Processing required to comply with applicable laws and regulations.
5. Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:
- Service Providers: With trusted vendors who assist us in operating our website and delivering services (e.g., cloud hosting, payment processing, analytics). These providers are bound by data processing agreements.
- Business Transactions: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
- Legal Requirements: When required by law, regulation, subpoena, or governmental request.
- With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:
- Account and Contact Data: Retained for the duration of the business relationship plus a reasonable period thereafter.
- Usage and Analytics Data: Retained for up to 24 months from collection.
- Transaction Records: Retained for the legally required tax and accounting period (minimum 6 years in the UK).
7. Your Rights
Under applicable data protection laws, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under certain conditions.
- Right to Restrict Processing: Request that we limit how we process your data.
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at privacy@syrili.com. We will respond to your request within 30 days as required by law.
8. Data Security
We implement industry-standard technical and organizational measures to protect your data, including:
- Encryption of data in transit using TLS 1.3 and at rest using AES-256.
- Role-based access controls and least-privilege principles.
- Regular security audits, penetration testing, and vulnerability assessments.
- Employee training on data protection and mandatory NDAs.
- Compliance with ISO 27001 standards where contractually required.
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
9. Cookies Policy
Our website uses cookies for the following purposes:
- Essential Cookies: Required for core website functionality, such as navigation and security.
- Analytics Cookies: Help us understand how visitors use our site so we can improve performance.
- Preference Cookies: Remember your settings and preferences across visits.
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.
10. International Data Transfers
We are headquartered in the United Kingdom and may process data in other countries where our service providers operate. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses and adequacy decisions where applicable, in compliance with UK GDPR and EU GDPR.
11. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of such external sites. We encourage you to review the privacy policies of any third-party websites you visit.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Syrili Ltd
45 High St, Canterbury
Canterbury, Kent CT1 2SA
GB (United Kingdom)
Email: privacy@syrili.com
Phone: +44 7985 737776
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information.
Document version 1.0 - Effective January 1, 2026