Syndral privacy notice: what we collect, why, and for how long

Syndral is the AI visibility practice of Suzaku Productions Co., Ltd. The company, not the brand, is the data controller for everything described here.

Suzaku Productions Co., Ltd., Head Office, 139 Blue Chips Building, Room S-607, 6th Floor, Soi Sukhumvit 63 (Thong Lor 10), Sukhumvit Road, Khlong Tan Nuea Subdistrict, Wattana District, Bangkok 10110, Thailand. Tax ID 0105557120962.

For any question about your data, or to exercise any of the rights below, write to privacy@syndral.co.

Nothing is collected about you until you choose to send it. You can read every page on this site without telling us who you are.

When you use the contact form we receive:

• Your name, your email address, your message, and your company if you fill that optional field.
• Which page you were on when you wrote.

When you complete the AI Visibility ScoreCard we receive:

• Your email address, name, company and website.
• Your answers to the eleven questions, and the score calculated from them.
• Your company size, your role, and whether you are an agency.
• Campaign parameters from the link you arrived through, if there were any.

We do not store your IP address. It is passed to Cloudflare so it can check that a submission comes from a person rather than a script, and it is not written to our records.

We do not ask for, and do not want, any sensitive category of data: no health, no ethnicity, no beliefs, no financial details. Please do not send any in the message field.

Contact form: to answer you. The basis is your consent, given by sending the message, and our legitimate interest in replying to a business enquiry.

ScoreCard: to calculate your score, send it to you, and follow up about it if you asked us to. The basis is your consent, which you give explicitly with the checkbox on the form.

Site security and abuse prevention: our legitimate interest in keeping the forms usable and free of automated abuse.

We do not sell your data. We do not use it to train any model. We do not add you to a mailing list because you filled a form, because that is a different purpose from the one you consented to.

Three service providers process data on our behalf. They may not use it for anything but the service they provide us.

• Cloudflare: hosts and delivers this site, runs the bot check on both forms, and provides cookieless traffic statistics.
• Sanity: stores the content of this site and the submissions from both forms.
• Resend: delivers the notification email that tells us a form has been submitted. That email contains what you wrote.

Nobody else. No advertising network, no data broker, no third party buying access to our records.

Form submissions are stored by Sanity in the European Union, on infrastructure in Belgium. Notification emails are delivered by Resend, a United States provider. Cloudflare operates a global network and will process requests at whichever location is nearest to the visitor.

This means your data leaves Thailand. Storage in the European Union sits under the GDPR, which the PDPA recognises as an adequate standard of protection.

Three years from our last contact with you, then deletion.

Three years because a business enquiry can reasonably become a conversation again within that time. If you would rather we did not wait that long, ask and we will delete it sooner.

This site keeps no other record of you. There is no profile, no history, no behavioural file.

This site sets one cookie, named NEXT_LOCALE. It remembers which language you are reading in, and nothing else. It is strictly necessary for the site to work as you asked it to, which is why there is no consent banner asking you about it.

Traffic statistics come from Cloudflare Web Analytics. It sets no cookie, builds no profile and does not follow you to other sites. It counts page views and where visitors arrived from.

There is no Google Analytics on this site, no advertising pixel and no tracker of any kind. If that changes, this section changes with it and a consent mechanism will be in place before anything non-essential loads.

Under the PDPA, and under the GDPR if you are in Europe, you may ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything that is wrong.
• Delete it.
• Restrict or suspend what we do with it.
• Object to a particular use.
• Send it to you, or to someone else, in a portable form.
• Withdraw a consent you gave, at any time, without needing a reason.

Write to privacy@syndral.co. We will answer within 30 days. To protect you, we may ask you to confirm the email address the data was submitted from before we act, so that nobody can request your data by pretending to be you.

If you believe we have handled your data badly, you may complain to Thailand's Personal Data Protection Committee, or to your national supervisory authority if you are in Europe.

This is a service sold to businesses and it is not directed at children. We do not knowingly collect data from anyone under the age at which they can consent for themselves. If you believe a child has sent us something, write to privacy@syndral.co and we will delete it.

Both forms are protected against automated abuse, and submissions travel over an encrypted connection. Access to the stored submissions is limited to the people who need it to reply to you.

No site can promise perfect security. If a breach ever affected your data and put you at real risk, we would tell you and the regulator, rather than wait to be found out.

If this notice changes materially, the date below changes and the change is described here rather than slipped in quietly. We will not start using data you already sent us for a purpose you did not agree to.

Last updated 6 August 2026.