Privacy Policy

This Privacy Policy explains how Opera Engineering FZ-LLC ("SYNTHEXA™", "we", "our", or "us"), registered in Ras Al Khaimah, UAE (RAKEZ Free Zone), collects, uses, and protects personal data when you use synthexa.eu.

1. Data Controller

Opera Engineering FZ-LLC
Ras Al Khaimah Economic Zone (RAKEZ)
United Arab Emirates
Contact: via our contact page

2. Data We Collect

We may collect the following categories of personal data:

• Identity data: name, company name (if applicable)
• Contact data: email address, shipping address
• Transaction data: purchase history, payment confirmation references (payment processing is handled by Shopify — we do not store card data)
• Technical data: IP address, browser type, device type, pages visited, time on site
• Marketing data: email subscription preferences, cookie consent status

3. Legal Basis for Processing

We process your data on the following legal bases (GDPR Art. 6):

• Contract performance (Art. 6.1.b) — to process your orders and manage your account
• Legitimate interests (Art. 6.1.f) — for site security, fraud prevention, and service improvement
• Consent (Art. 6.1.a) — for marketing emails and analytics cookies (you may withdraw at any time)
• Legal obligation (Art. 6.1.c) — for tax records and regulatory compliance

4. Cookies & Analytics

We use cookies and similar tracking technologies. You are presented with a cookie consent banner on your first visit and can manage your preferences at any time.

• Strictly necessary cookies: session management, security — cannot be disabled
• Analytics cookies: Meta Pixel, TikTok Pixel — only activated after explicit consent
• Preference cookies: your research disclaimer agreement, cookie consent preferences

5. How We Use Your Data

• To process and fulfil your orders
• To send order confirmation and shipping notifications
• To respond to your enquiries
• To send you our research journal newsletter (only if you subscribe)
• To improve our website through anonymised analytics
• To comply with legal obligations (customs, tax)

6. Data Sharing

We do not sell your personal data. We share data only with:

• Shopify Inc. — payment and checkout processing
• Shipping partners — to fulfil deliveries (name and address only)
• Cloudflare Inc. — web infrastructure and CDN
• Meta Platforms / TikTok — advertising measurement (with your consent only)

7. Data Retention

We retain order and customer data for 7 years for legal/tax compliance. Newsletter subscriber data is kept until you unsubscribe. Analytics data is anonymised after 26 months.

8. Your Rights (GDPR)

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request erasure of your personal data ("right to be forgotten")
• Object to processing based on legitimate interests
• Withdraw consent for marketing at any time
• Data portability (receive your data in a machine-readable format)
• Lodge a complaint with your national data protection authority

To exercise any right, contact us. We will respond within 30 days.

9. International Transfers

Some of our service providers (Shopify, Cloudflare, Meta) may process data outside the EEA. In such cases, data transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, or other appropriate safeguards.

10. Children's Privacy

Our website is not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via our website. The "last updated" date at the top of this page indicates when the most recent changes were made.

12. Contact

For all privacy-related enquiries or to exercise your rights, please contact us.