Privacy Policy

Definitions

The following definitions explain terms used in this Privacy Policy to help you understand what information we collect and how we use it.

Purposes of processing

Sorynthia processes personal information to support the operation of services, administration and legitimate business purposes. Processing is limited to purposes that are relevant and proportionate.

• Provide and manage consultations, coaching and program delivery tailored to participants' professional development needs.
• Communicate with users about appointments, program updates, administrative matters and requested information.
• Process payments, issue invoices and manage billing records through secure payment platforms.
• Maintain and improve the website, services and learning materials based on aggregated usage data and feedback.
• Conduct internal analytics and reporting to understand service performance and user engagement trends.
• Comply with legal, regulatory and contractual obligations, including record-keeping and responding to lawful requests.
• Protect against fraud, abuse and security incidents through risk detection and mitigation measures.
• Deliver promotional communications where users have consented to receive marketing materials or where permitted by applicable law.

Legal basis for processing

Where applicable, Sorynthia relies on recognized legal bases for processing personal data, which may include consent, contract performance, legitimate interests and compliance with legal obligations.

• Contractual necessity: processing required to perform agreements for services you have requested or purchased.
• Consent: where you have explicitly agreed to receive marketing communications or optional services.
• Legitimate interests: processing necessary for operational functions such as fraud prevention, service improvement and basic client administration where such interests are balanced against individual rights.
• Legal obligation: processing required to comply with court orders, statutory requirements or other legal duties.

Cookies and similar technologies

Sorynthia uses cookies and similar technologies to enable site functionality, measure performance and support optional features. You can control cookie preferences through browser settings and available consent tools on the site.

Types of technologies used include session cookies, persistent cookies, local storage and web beacons. Some are essential for site operation while others support analytics and optional personalization.

Cookies typically fall into categories such as strictly necessary (essential for site operation), preferences (remember choices), statistics/analytics (usage measurement) and marketing (targeted content across sites).

You can manage cookies by adjusting your browser settings to block or delete cookies, using built-in consent controls on the site, or using privacy tools. Blocking some cookies may affect site functionality.

Cookie Policy

Data sharing

Sorynthia shares personal data only as necessary to provide services, meet legal obligations or as authorized by the user. Shared data is limited to the minimum required for the specified purpose.

• Service providers and vendors who perform functions on our behalf, such as payment processing, hosting, analytics and customer support.
• Professional partners and referral organizations when you have given consent or when sharing is required to provide contracted services.
• Legal and regulatory authorities when required by law, court order or to respond to legal process.
• Affiliates or acquirers in the event of a reorganization, merger, sale or transfer of assets, with appropriate safeguards for personal data.
• Aggregated or anonymized data that does not identify individuals, which may be shared publicly or with partners for analysis.
• Other parties where expressly authorized by you through consent or explicit instruction.

International transfers

Sorynthia may transfer personal data to service providers or partners located outside Canada where necessary for operational purposes. Transfers occur only where appropriate safeguards are in place or other lawful mechanisms permit the transfer.

Safeguards used for international transfers may include data processing agreements, standard contractual clauses, vendor security assessments and technical controls such as encryption. Recipients are required to maintain adequate protections for personal data.

Data retention

Sorynthia retains personal data only for as long as necessary to fulfill the purposes described in this policy, to meet legal obligations and to resolve disputes. Retention periods vary by data type and purpose.

Account and client records: retained for the duration of the commercial relationship and for a defined period thereafter to meet tax, accounting and regulatory requirements.

Communications and messages: retained for a period consistent with the purpose of the communication and any applicable legal or contractual obligations.

Technical logs and analytics data: retained in aggregated or pseudonymized form where possible; raw logs are retained for a limited period to support security and troubleshooting.

Deletion requests: Sorynthia will assess valid requests to delete personal data and will delete or anonymize data where retention is no longer required and where legal obligations do not require continued storage.

Your rights

You have certain rights regarding your personal data. The availability of specific rights may vary depending on local law. To exercise rights or ask questions, contact Sorynthia as described below.

• Access: request a copy of the personal data Sorynthia holds about you and details of processing activities.
• Correction: request rectification of inaccurate or incomplete personal data.
• Deletion and restriction: request deletion or restriction of processing where applicable and not prevented by legal or contractual obligations.
• Objection and portability: object to certain processing activities including marketing, and request data portability where feasible.
• Request restriction of processing for specific purposes, for example when accuracy of data is contested or processing is unlawful but you object to erasure.
• Object to certain processing activities based on your particular situation, including profiling when it has a legal or significant effect on you.
• Withdraw consent at any time for processing activities that relied on consent, without affecting the lawfulness of prior processing.
• Lodge a complaint with a data protection authority in Canada if you believe your rights under applicable privacy laws have been breached.

Exercising your privacy rights

To exercise any privacy rights related to personal information held by Sorynthia, submit a request with a clear description of the information or action you are requesting. Requests may be sent via postal mail to our registered office at 3010 Thomas Street, Mississauga ON L5M 0R4, Canada, or by phone at +14169443695 for initial guidance. Include your full name, mailing address, and a clear description of the records or change you seek. We may require additional information to verify your identity before fulfilling a request.

[email protected]

Sorynthia will acknowledge receipt of a rights request within a reasonable period and will aim to respond substantively within 30 calendar days of verification. Complex requests may take longer; if additional time is needed we will inform you and provide an expected timeframe.