Privacy Policy

Last updated: August 7, 2026

Who we are

Synergy Partners (operated by Walker Synergy Partners 367, Inc. — "Synergy Partners," "we," "us," or "our") is a company registered in the United States. Our principal place of business is 2145 Newcastle Avenue, Cardiff, CA 92007, USA.

We provide technology services and specialized technical staffing to business clients. That includes managed IT, cybersecurity, cloud and infrastructure services, and the recruitment and placement of technology professionals with organizations seeking technical talent (together, our "Services"). We also operate the website at https://synergypartners.tech/ (the "Website").

What this policy covers

This policy explains what personal data we collect, why we collect it, what we do with it, and what rights you have. It applies to personal data we collect through the Website, through job boards and application forms, by email, and in the course of providing our Services to client organizations and to candidates.

We are a California-based US company, and some of the candidates and client contacts whose data we handle may be in the European Economic Area (EEA) or the United Kingdom. Where that is the case, we follow the UK and EU General Data Protection Regulation (GDPR). We explain how we move data to the US in International data transfers below.

California residents have additional rights, which we describe in Your California privacy rights.

When we are responsible, and when our clients are

Data protection law distinguishes between a controller (who decides why and how data is used) and a processor (who handles data on someone else's instructions). Which one we are depends on the situation.

We are the controller when you give us your data directly. That includes submitting a résumé or application through the Website, registering as a candidate, emailing our recruitment team, filling in a form, or dealing with us as a client contact. We decide how that data is used, and this policy explains how.

We are the processor when a client organization gives us data as part of the Services we provide to them, or when we handle candidate lists assigned to us under a vendor management (VMS) or managed service provider (MSP) contract. In those cases we only handle the data as our client instructs us. Our client is the controller and is responsible for explaining that use to the people concerned.

If a company you deal with uses our Services and you want to understand how your data is handled, read that company's privacy policy rather than this one.

The personal data we collect

Personal data means information about a person who can be identified from it. It does not include data that has been anonymized so no one can be identified.

Where we are the controller, we collect:

Identity data. First name, last name, preferred name, username or similar identifier, title, and job title.
Contact data. Email address, telephone number, mailing or residential location, and billing address where relevant.
Professional and career data. Résumés and CVs, employment history, educational background, technical skills, certifications, portfolio and profile links (such as GitHub or LinkedIn), rate and compensation expectations, and interview notes.
Usage data. Information about how you use the Website and our Services, including job searches you run and inquiries or applications you submit.
Compliance and background data. Some roles require checks before a placement can go ahead, such as confirming your right to work, verifying a security clearance, or completing a background check. Whether any of these are needed, and who carries them out, depends on the role and on the client organization. Where we handle this information, we do so only where a role requires it, only where the law permits it, and only with your knowledge.

Sensitive and special category data

We do not ask for special category data through general Website forms. Special category data means information about racial or ethnic origin, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, or genetic and biometric data.

In staffing, candidates sometimes provide demographic information voluntarily, for example in response to an optional equal opportunity monitoring question. Where we collect this, it is voluntary, it is kept separate from your application, and it is not used to make any decision about you or shared with a client employer in a form that identifies you.

Where a role requires right-to-work, visa, or security clearance information, we handle it only for that purpose and only with your knowledge.

Where we process special category data, we do so with your explicit consent or as employment, immigration, or government contracting law requires.

We may also handle special category data on behalf of a client as their processor. In that case our client's privacy policy explains what is collected and why.

How we use your data, and our legal basis

We only use your personal data when the law allows it. That means one of the following applies: we need the data to perform a contract, we have a legitimate business interest, you have given consent, or we have a legal obligation.

If we need to use your data for a new purpose not covered here, we will tell you and explain the legal basis first. In some situations the law requires or permits us to process data without your consent.

Where we are the controller, these are the ways we use your data:

What we use it for	Data used	Our legal basis
Registering you in our candidate database and assessing your profile against current or future roles	Identity, Contact, Professional and career	Performance of a contract; our legitimate interests
Submitting your profile to a client employer and coordinating interviews, offers, and onboarding	Identity, Contact, Professional and career, Compliance and background	Performance of a contract; consent
Registering a client organization and verifying identity	Identity, Contact	Performance of a contract; consent
Delivering the technology services a client has asked for, managing accounts, payments, fees and charges, and corresponding about those services	Identity, Contact	Performance of a contract; our legitimate interests
Responding to queries, inquiries, and Website submissions	Identity, Contact, Usage	Our legitimate interests
Sending marketing, job alerts, and market and career content	Identity, Contact, Usage	Our legitimate interests; consent where the law requires it

Sometimes more than one legal basis applies. If you want to know which one we are relying on in a particular case, just ask.

Where we act as a processor for a client, we use the data as that client instructs us, or as the law requires.

Automated decision-making and profiling

We use a third-party recruitment platform (JobDiva) to manage candidate records. It includes automated features that index résumés and score how closely a candidate's profile matches the requirements of a role, which helps our recruiters prioritize who to review.

A person always makes the decision. These tools help our recruiters organize and prioritize their work. They do not decide on their own whether you are put forward for a role, and we do not make decisions about you by solely automated means.

Depending on where you are, you may have the right to be told when automated processing is used, to ask for human review of a decision, to express your point of view, and to contest a decision. To exercise these rights, email hr@synergypartners.tech.

[CONFIRM before publishing: (a) that DivaMatch scoring is actually enabled in your instance, (b) that a recruiter genuinely reviews candidates rather than working only from the ranked list, and (c) whether any automated knockout filtering is switched on. See merge notes §1 — the vendor liability position needs correcting.]

Opting out of marketing and job alerts

You can stop marketing messages and job alerts at any time. Email hr@synergypartners.tech or use the unsubscribe link in any message. Opting out will not stop messages about a role you are actively interviewing for, a placement you are on, or a contract you hold with us.

Cookies and tracking

A cookie is a small file a website stores on your device. Cookies let a site recognize you when you return, remember your preferences, and see which pages people find useful.

We use cookies to:

Analyze traffic to the Website using an analytics package
Recognize whether you are signed in
Remember your preferences and streamline form submissions
Test content on the Website
Recognize when you return to the Website

Cookies do not give us access to your device or to any information about you beyond what you choose to share.

Where the law requires it, we ask for your consent before setting non-essential cookies. You can also accept or refuse cookies through your browser settings. Most browsers accept cookies automatically, and you can change that. If you refuse cookies, some parts of the Website may not work as well.

Do Not Track

Do Not Track is a browser setting that tells websites you do not want to be tracked. There is no agreed standard for how sites should respond to it, and we do not currently respond to Do Not Track signals. You can turn it on or off in your browser's settings.

Third parties, such as our analytics providers, may collect information about your activity on the Website over time. We do not permit them to use that information for their own advertising purposes. [CONFIRM this is accurate for every tag running on the site.]

Who we share your data with

We do not sell, rent, trade, or license your personal data, and we do not share it with third parties for their own marketing.

We share personal data only where we need to:

Inside Synergy Partners, with recruiters, account managers, and other employees who need it to do their jobs.
With a prospective client employer, and only after we have spoken with you and you have agreed to us submitting your profile for a specific role. We will not send your details to an employer without asking you first.
With service providers who help us run our business, including cloud hosting, our CRM (HubSpot), our applicant tracking and recruitment platform (JobDiva), and email delivery tools. [CONFIRM the full list.] They may only use the data to provide services to us and are bound by confidentiality and data protection obligations.
Where the law requires it, such as responding to a subpoena, audit, or other valid legal request, or to establish or defend legal claims.

International data transfers

We are based in the United States, so personal data you give us is stored and processed in the US. If you are in the EEA or the UK, this means your data is transferred outside your home country.

The US is not covered by a general adequacy decision, so we rely on approved safeguards. We use the European Commission's Standard Contractual Clauses, and the UK Addendum where UK data is involved. [CONFIRM: if Synergy Partners self-certifies to the EU-US Data Privacy Framework, name it here instead of or alongside the SCCs. See review notes §3.]

You can ask us for a copy of the safeguards we use by emailing hr@synergypartners.tech.

How long we keep your data

We keep personal data only as long as we need it.

Candidate data. We keep your details in our talent database so we can consider you for future roles. We keep them for [RETENTION PERIOD — commonly 12 to 24 months] after our last meaningful contact with you, unless you ask us to remove them sooner. You can ask us to delete your details at any time.
Client data. Where we are the controller, we keep it for as long as we need it for the purpose we collected it for.
Data we hold as a processor. We keep it for the period our client tells us to.
In all cases, we may keep data longer where we need it to meet legal, accounting, regulatory, or reporting requirements.

When we delete personal data it cannot be recovered. If you want a copy of your data, ask for it before you ask us to delete it.

How we protect your data

We use technical and organizational security measures, including encryption in transit, role-based access controls, and access restrictions on candidate records, to prevent personal data from being lost, misused, accessed without authorization, altered, or disclosed. Access to candidate files is limited to authorized recruitment personnel.

We limit access to your data to employees, agents, contractors, and other third parties who need it for their work. They may only use it on our instructions and are under a duty of confidentiality.

We have procedures for handling suspected data breaches and will notify you and the relevant regulator where the law requires it.

No system is completely secure. We cannot guarantee the security of information you send us over the internet, and you are responsible for keeping your passwords and account details private.

Your rights

If you are in the EEA or the UK, you have the following rights over your personal data.

To be informed. You can ask why we are using your data and what data we hold.
To access your data. You can ask for a copy of the personal data we hold about you, and confirmation of how we are using it.
To correct your data. If something we hold is wrong, tell us and we will fix it.
To have your data erased. You can ask us to delete your data. There are some situations where the law lets us keep it, and we will explain if that applies.
To restrict how we use your data. You can ask us to pause our use of your data in certain circumstances.
To move your data. You can ask us to send your data to you or to another organization in a portable format.
To object. You can object where we rely on legitimate interests. You can always object to direct marketing, and we will stop.
To withdraw consent. Where we rely on your consent, you can withdraw it at any time. If consent was our only legal basis, we will stop. If another basis also applies, we may continue and will explain why.
In relation to automated decisions. See Automated decision-making and profiling above.

To exercise any of these rights, email hr@synergypartners.tech with the subject line "Data Processing Request."

Using these rights is free. We may charge a reasonable fee, or refuse, if a request is clearly unfounded, repetitive, or excessive, and we will explain if that happens. We aim to respond within one month. If your request is complex, or you have made several, it may take longer, and we will tell you and keep you updated.

If you are unhappy with how we have handled your data, you can complain to your local data protection authority. In the EEA, that is the supervisory authority in your country. In the UK, it is the Information Commissioner's Office.

Children

The Website is not intended for children. We do not knowingly collect personal data from anyone under 16. If we find that we have, we will delete it promptly.

Other websites

The Website may link to sites run by other organizations, including job boards and client career pages. We provide those links for convenience. We do not control those sites and are not responsible for their content or privacy practices. A link is not an endorsement. Please read the privacy policy of any site you visit.

Your California privacy rights

We are based in California, and this section applies to California residents.

California Civil Code Section 1798.83

Section 1798.83 lets California residents ask a business how it has shared their personal information with third parties for those third parties' direct marketing. This does not apply to us, because we do not share personal information with third parties for their direct marketing.

Your rights under the CCPA

The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives California residents these rights:

The right to know what personal information we collect, where it comes from, why we collect it, and who we disclose it to.
The right to delete the personal information we have collected about you, with some exceptions.
The right to correct inaccurate personal information we hold about you.
The right to opt out of the sale or sharing of your personal information. We do not sell personal information, and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of.
The right to limit how we use and disclose sensitive personal information. We do not use sensitive personal information beyond what is needed to provide our Services.
The right to non-discrimination. We will not treat you differently for exercising any of these rights.

These rights apply to job applicants and candidates as well as to customers.

The categories of personal information we collect are described in The personal data we collect above. What we hold about any particular person depends on which Services they use.

To make a request, email hr@synergypartners.tech. We will confirm receipt within 10 business days and explain how we will handle it, including how we verify who you are. We will respond within 45 days, and will tell you if we need more time.

We will not disclose certain information even in response to a valid request, including Social Security numbers, driver's license or other government ID numbers, financial account numbers, health insurance or medical ID numbers, and account passwords or security questions and answers. We may also decline where disclosure would create a serious risk to the security of the information, your account, or our systems.

Changes to this policy

We update this policy from time to time to reflect changes in our practices or in the law. The date at the top shows when it was last changed. If we make a significant change, we will take reasonable steps to let you know.

How to contact us

If you have questions about this policy, or want to exercise any of your rights or manage your candidate data, contact us at:

Email: hr@synergypartners.tech

Post: Walker Synergy Partners 367, Inc., 2145 Newcastle Avenue, Cardiff, CA 92007, USA