Privacy and Cookie Policy
Effective date: 5 November 2025
Last updated: 5 November 2025
1. Introduction
Syos Aerospace UK Limited and Syos Aerospace Limited (“we”, “us”, “our”) respect your privacy. This Policy explains how we collect, use, disclose, and protect personal information when you visit syos-aerospace.com or otherwise interact with us.
This Policy complies with the following data protection frameworks:
- New Zealand Privacy Act 2020
- United Kingdom GDPR and Data Protection Act 2018
- European Union GDPR
Nothing in this Policy limits your rights under applicable law.
2. Who we are
Controllers:
Syos Aerospace UK Limited, Company No. 15308877 (United Kingdom)
Syos Aerospace Limited, Company No. 8153656 (New Zealand)
Contact for privacy matters: enquiries@syos-aerospace.com
Site: https://syos-aerospace.com
3. Information we collect
We collect personal information that you provide directly, information automatically collected from your device, and information from third parties where permitted by law.
3.1 Information you provide
- Name, email, phone, company, role, and message details submitted through website forms
- Enquiries, support requests, feedback, or complaints
3.2 Information collected automatically
- IP address, browser type, operating system, pages viewed, referring URLs, and general location derived from IP
- Cookies and similar tracking technologies (see section 10)
3.3 Information from third parties
- Analytics and advertising partners that provide aggregated or pseudonymised insights
- Public or referral sources authorised to share your information
We do not intentionally collect sensitive information or information about children. The Site is not intended for children under 16 in the UK or EU, or 13 in other regions.
4. How we use personal information and legal bases
- Provide and improve our services and the Site
- Communicate with you, respond to enquiries, and provide support
- Coordinate with our authorised distributors or partners where necessary
- Send administrative and marketing messages. You can opt out at any time
- Manage security, prevent fraud, and protect our rights
- Conduct research and statistical analysis, using anonymised data where possible
- Comply with legal and regulatory obligations
Legal bases for UK and EU users: consent, performance of a contract, legitimate interests such as improving the Site or marketing to existing customers, and legal obligations. Consent may be withdrawn at any time.
5. Disclosure of personal information
We may disclose personal information to:
- Service providers and business partners who help us operate the Site and deliver services, including:
- Hosting: Vultr (Sydney data centre)
- Tag and analytics: Google Tag Manager, Google Analytics 4
- Advertising: Google Ads, Meta Pixel
- Security: Google reCAPTCHA, Akismet Spam Protection, Solid Security Pro (SolidWP)
- Forms and communications: WPForms Pro (form collection), Brevo (email delivery via API connection)
- Email and productivity: Microsoft 365 (receives and stores form submission emails)
- Website content: Elementor Pro
- Third-party distributors, suppliers, or partners who assist with enquiries, customer support, or product delivery
- Professional advisers, insurers, auditors, or regulators where required
- Law enforcement or authorities as required by law
- Another entity in connection with a merger, sale, or business transaction
We only share information to the extent required for these purposes and require all third parties to handle it lawfully and securely.
6. International transfers
Our primary hosting is located in Australia, Vultr Sydney data centre. This means data may be transferred outside your region. We rely on Standard Contractual Clauses and comparable safeguards to ensure your information remains protected under GDPR standards.
Data handled through Microsoft 365, and the Brevo email API, may be processed on servers in Australia, Singapore, or other regions covered by their data protection frameworks and Standard Contractual Clauses. We may also access or process data in New Zealand, the UK, or other countries where our team or partners operate.
7. Retention
We retain personal information for as long as necessary for the purposes described in this Policy or as required by law. Contact form submissions and correspondence are retained while reasonably necessary for business or legal purposes. We periodically review and securely delete or anonymise data that is no longer required.
8. Security
We take reasonable steps to protect personal information from loss, unauthorised access, modification, or disclosure. Measures include encryption in transit, strong password practices, access controls, and restricted staff access. Our Site uses Solid Security Pro by SolidWP to monitor and prevent unauthorised logins or malicious activity. No system is completely secure, and we cannot guarantee absolute protection.
9. Marketing communications
We may send marketing communications about our services if permitted by law or where you have requested them. You can opt out at any time by using the unsubscribe link or contacting enquiries@syos-aerospace.com.
10. Cookies and tracking technologies
We use cookies and similar technologies to operate the Site, remember preferences, analyse traffic, and measure advertising effectiveness. We use the WP Consent API to manage consent and cookie preferences.
10.1 Cookie categories
- Strictly necessary: required for core functionality and security
- Functional: improve usability or personalisation
- Analytics: help us understand visitor use, for example Google Analytics 4
- Marketing: measure and improve advertising, for example Google Ads and Meta Pixel
10.2 Consent model
- UK and EU: non essential cookies are not set until you give consent through the cookie banner. You may withdraw consent at any time
- Other regions: implied consent model. You can control cookies through your browser or Site settings
10.3 Tools we use
Google Tag Manager, Google Analytics 4, Google Ads, Meta Pixel, Google reCAPTCHA, WPForms Pro, Elementor Pro, Akismet Spam Protection, Microsoft 365, and Solid Security Pro by SolidWP.
Note: Brevo is used only as an email delivery provider through a secure API connection. It does not set cookies or track visitors on the Site.
10.4 Managing cookies
- Use the Site cookie banner or settings link to update your choices
- Adjust your browser settings to block or delete cookies. This may affect functionality
11. Cookie Table
| Cookie / Tool | Purpose | Type / Category | Typical Duration | Provider / Notes |
|---|---|---|---|---|
| _ga, ga* | Distinguish users for analytics | Analytics | 13 months | Google Analytics 4 |
| _gid | Track pageviews | Analytics | 24 hours | Google Analytics 4 |
| gat_gtag_UA* | Throttle analytics requests | Functional | 1 minute | Google Analytics 4 |
| _fbp | Measure advertising effectiveness | Marketing | 3 months | Meta Pixel |
| fr | Ad delivery and retargeting | Marketing | 3 months | Meta |
| _gcl_au | Store ad conversion data | Marketing | 3 months | Google Ads |
| _GRECAPTCHA | Prevent spam and abuse | Strictly Necessary | 6 months | Google reCAPTCHA |
| wpforms_* | Manage contact form submissions | Functional | Session or 1 year | WPForms Pro |
| ak_bmsc, bm_sv | Detect and filter spam | Security or Functional | 2 hours to 2 days | Akismet Spam Protection |
| elementor | Maintain website layout state | Functional | Persistent | Elementor Pro |
| Solid Security Pro | Detect and block malicious activity, log IPs for security | Strictly Necessary or Security | 7 to 30 days | SolidWP |
| Microsoft 365 session cookies | Secure email and document access | Strictly Necessary | Session | Microsoft 365 |
| cookie_consent_status | Record user consent | Strictly Necessary | 12 months | WP Consent API |
12. Your privacy rights
Your rights depend on your location.
- New Zealand: Access and request correction of your readily retrievable personal information under the Privacy Act 2020
- United Kingdom and European Union: Under UK or EU GDPR you may have rights to access, rectify, erase, restrict, or object to processing, and to request data portability. Consent can be withdrawn at any time
- Other regions: You may have similar rights under local laws
13. How to exercise your rights
To make a privacy request or enquiry, contact enquiries@syos-aerospace.com. We may need to verify your identity before acting on your request. If we cannot fulfil a request, we will explain why.
14. Third-party sites and services
Our Site may contain links to third-party websites or services. Their privacy practices are not covered by this Policy. We recommend reviewing their privacy statements before providing personal information.
15. Complaints and regulators
If you have concerns about how we handle personal information, please contact enquiries@syos-aerospace.com first. You may also contact your regional privacy regulator:
- New Zealand: Office of the Privacy Commissioner — privacy.org.nz
- United Kingdom: Information Commissioner’s Office (ICO) — ico.org.uk
- European Union or Ireland: Data Protection Commission (DPC) — dataprotection.ie
16. Changes to this Policy
We may update this Policy periodically by posting a new version on our Site. Changes take effect when published.
17. Contact us
Privacy Contact: enquiries@syos-aerospace.com
Business hours: Monday to Friday