1. Who we are
SYNECT LIMITED, trading as Tarnua ("Tarnua", "we", "us", "our"), is a private company limited by shares, registered in Ireland under the Companies Act 2014 (company number 814346; VAT number IE4734166RH). Until 17 October 2026 it traded as Synect Group; the name changed, and the company responsible for your data did not.
Registered office: The Tara Building, 11-15 Tara Street, Dublin 2, D02 RY83, Ireland.
Contact: hello@tarnua.ie
We operate tarnua.ie, the website for our software and AI automation work and for our products. We are the data controller for personal data collected through this website, in connection with the free call and a Scoping Sprint, and through our LinkedIn Page, and for LinkedIn's Page Insights we share that role with LinkedIn (section 7). Where we process personal data for a client under a Data Processing Agreement, we act as that client's processor instead (section 2). Where you use one of our products, the processing of your data there is governed by its own terms and privacy notice:
| Product | Privacy notice | Terms |
|---|---|---|
| Tarnua Visibility | www.tarnua.ai/privacy | www.tarnua.ai/terms |
2. What data we collect, and why
We collect personal data only for specific purposes. The table below explains what we collect through this website, why, and our lawful basis under the GDPR.
| Data | Purpose | Lawful basis |
|---|---|---|
| First name, email address, and phone number if you give it | To reply to an enquiry sent through our contact form | Legitimate interests (Art. 6(1)(f)) |
| Company name and website, if you give them (both optional) | To understand your enquiry and reply to it properly | Legitimate interests (Art. 6(1)(f)) |
| The content of your message, the topic you pick on the form, and our notes of the free call | To handle your enquiry, and to hold the free call and say whether a Scoping Sprint would help | Legitimate interests (Art. 6(1)(f)) |
| The names and contact details of the people we work with at your business during a Scoping Sprint or a build | To deliver the engagement and manage it | Legitimate interests (Art. 6(1)(f)); where you contract with us in your own name as a sole trader, contract (Art. 6(1)(b)) |
| Invoices and payment records | To keep the accounts the law requires | Legal obligation (Art. 6(1)(c)) |
| Website usage data, including which printed card or link brought you here (cookies, analytics) | To understand how visitors use the site and improve it | Consent (Art. 6(1)(a)) |
| IP address and browser data | Security and preventing abuse | Legitimate interests (Art. 6(1)(f)) |
Business information you give us for a Scoping Sprint or a build is mostly not personal data. Where it is, for example the names of the technicians in your records, we process it as your processor under the Data Processing Agreement signed before any such work starts (terms section 13), and your own privacy notice covers it. A demonstration uses sample data, never yours. We do not ask for special category data (Article 9 GDPR); a project that would need it is agreed expressly in that agreement first.
3. How we use your data
We use the personal data collected through this website to:
- Reply to your contact-form enquiry, and arrange and hold the free call
- Communicate with you about your enquiry or a possible working relationship
- Scope a task in a Scoping Sprint, and deliver a build once a contract is signed
- Improve our website and the information we give about our work and our products
- Comply with our legal obligations
We never sell your personal data. We never use it for marketing you did not ask for.
4. AI: how your messages are handled
Tarnua builds software that can use artificial intelligence, and makes products that do. This website is informational: it presents our work and our products and lets you get in touch.
Messages sent to hello@tarnua.ie, including messages sent through our contact form, are read and answered by a person.
- Where you sign up for or use one of our products, any AI processing is described in that product's own terms and privacy notice.
- Where something we build for you uses AI, its written scope says so, and a person checks what it produces.
- AI can produce inaccurate or incomplete results; outputs should be reviewed before you rely on them.
- We disclose our use of AI in line with the transparency principles of the EU AI Act.
5. Who we share your data with
We share data only where it is needed to run this website and to deliver an engagement. Every provider below is bound by data processing terms.
| Recipient | Purpose | Location |
|---|---|---|
| Brevo | Delivering contact-form messages: the form's relay passes each message to Brevo's transactional email service, which delivers it to our mailbox. Our website keeps no copy | EU |
| Cloudflare, Inc. | Hosting this website, and the relay behind the contact form | A worldwide network, which serves each visitor from a location near them; US-headquartered. Covered by Standard Contractual Clauses and the EU-US Data Privacy Framework |
| Usercentrics GmbH | Cookie-consent management: recording your banner choice | EU (Germany) |
| Google Analytics 4 (Google Ireland Limited) | Website analytics, only with your consent | Data reaches Google's servers outside the EEA, including the USA, under the EU-US Data Privacy Framework and Standard Contractual Clauses |
| Google (Google Workspace) | Email hosting: messages sent to hello@tarnua.ie, including contact-form messages, are stored in this mailbox. Video calls on Google Meet for the free call, which we do not record | Google's data centres, which may be outside the EEA, under Google's data processing terms, which include Standard Contractual Clauses |
Some of these providers handle data outside the European Economic Area (EEA): Cloudflare's network, Google Analytics and Google's email storage. Each transfer is covered by Standard Contractual Clauses or the EU-US Data Privacy Framework.
A build's own providers, such as its hosting or an AI model, are named in its written scope and, where they handle personal data, in the Data Processing Agreement. By default you hold those accounts in your own name (terms section 13.6).
6. How long we keep your data
| Data | How long |
|---|---|
| Contact-form enquiries and our notes of the free call, where no engagement follows | 6 months from last contact |
| Client engagement data | The length of the engagement plus 2 years |
| Signed agreements and statements of work, and the terms that applied | 6 years after the engagement ends (Statute of Limitations 1957, s.11) |
| Financial records (invoices, payments) | 6 years (Companies Act 2014 s.285, Taxes Consolidation Act 1997 s.886, VAT Consolidation Act 2010 s.84) |
| Unsolicited CVs and job applications | 30 days, then deleted at our next monthly clear-out |
| Website analytics data | 2 months, the shortest period Google Analytics offers |
| Email communications | 24 months from last contact |
| Messages and service requests sent to our LinkedIn Page | Stored by LinkedIn, for as long as its privacy policy sets out (section 7) |
| Record of a request, cancellation, refund or complaint | 6 years from the day we close the case. We keep it even if you ask us to erase your data, because we may need it to establish or defend a legal claim (Article 17(3)(e)) |
| Emails about that request | 24 months from the day we close the case |
| A copy of your data we send you in answer to an access request | Not kept: our copy is deleted as soon as delivery is confirmed |
After these periods, data is securely deleted or anonymised.
7. Our LinkedIn Page
We run the Tarnua Page at linkedin.com/company/tarnua on LinkedIn. LinkedIn Ireland Unlimited Company decides how LinkedIn itself uses your data, as its Privacy Policy explains. This section covers what we see and do as the Page's admin.
Messages and service requests
If you message the Page, or send a request from its Services tab, we see your name, your LinkedIn profile and what you write. We use them only to answer you, based on our legitimate interest in replying to an enquiry you started (Art. 6(1)(f)). LinkedIn stores the conversation, and its Privacy Policy explains how long it is kept. If we continue by email, the rest of this notice applies.
We can also see who follows the Page, with their employer and the date they followed, and any reactions or comments on our posts. We use this only to run the Page (Art. 6(1)(f)).
Page Insights: joint controllers with LinkedIn
When you visit, follow or engage with the Page, LinkedIn uses details from your profile, such as job function, country, industry and seniority, and how you interacted with the Page, to give us Page Insights. These are aggregated statistics: LinkedIn does not give us your personal data through them, or a way to link them back to you. We use them to see how the Page is doing (legitimate interests, Art. 6(1)(f)).
For Page Insights, SYNECT LIMITED and LinkedIn are joint controllers under LinkedIn's Page Insights Joint Controller Addendum. LinkedIn has agreed to take responsibility for telling you about this processing, for your rights under Articles 12 to 22 GDPR, and for security and breach duties under Articles 32 to 34. You can use your rights in your LinkedIn settings or by contacting LinkedIn. If you contact us instead, we pass your request to LinkedIn straight away, and within three working days at most. The lead supervisory authority for Page Insights is the Irish Data Protection Commission.
8. Your rights under the GDPR
You have the rights below. To use any of them, contact us at hello@tarnua.ie. We reply within 30 days.
- Access: ask for a copy of the personal data we hold about you
- Rectification: ask us to correct inaccurate or incomplete data
- Erasure: ask us to delete your personal data
- Restriction: ask us to limit how we use your data
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interests
- Withdrawing consent: where we rely on consent, withdraw it at any time, without affecting what happened before
9. Cookies and consent
This website sets cookies only with your consent, apart from the record of your consent choice itself. Our Cookie Policy lists each one, what it is for and how long it lasts. You can change or withdraw your consent at any time with "Cookie settings" in the footer. We do not use advertising or cross-site tracking cookies.
10. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure, including:
- HTTPS on all web traffic
- Access controls on who can see enquiry data
- Storage only with the providers listed in section 5, each bound by data processing terms
- Regular review of how we handle data
If a personal data breach is likely to affect your rights, we will notify the Irish Data Protection Commission within 72 hours and tell the people affected without undue delay, as Articles 33 and 34 GDPR require.
11. Legal basis summary
| Processing | Legal basis |
|---|---|
| Replying to enquiries, and the free call | Legitimate interests (Art. 6(1)(f)) |
| A Scoping Sprint or a build with your business | Legitimate interests (Art. 6(1)(f)) for the people we work with at a client business; contract (Art. 6(1)(b)) for a sole trader who contracts in their own name |
| Keeping invoices and payment records, and signed agreements for six years | Legal obligation (Art. 6(1)(c)) for invoices; legitimate interests (Art. 6(1)(f)) for agreements |
| Handling security reports and press enquiries sent to us | Legitimate interests (Art. 6(1)(f)) |
| Website analytics | Consent (Art. 6(1)(a)) |
| Security and preventing abuse | Legitimate interests (Art. 6(1)(f)) |
| Running our LinkedIn Page, including answering messages and service requests | Legitimate interests (Art. 6(1)(f)) |
| Page Insights (joint controllers with LinkedIn) | Legitimate interests (Art. 6(1)(f)) |
12. Your right to complain
If you are unhappy with how we handle your personal data, you have the right to complain to the Irish Data Protection Commission:
Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland.
Website: www.dataprotection.ie · Phone: +353 (0)1 765 0100
We would appreciate the chance to put things right first, so please contact us at hello@tarnua.ie before you go to the Commission.
13. Our former products
We have stopped offering three products. They are offline, and until each one closes its own privacy notice still applies to it and its users can ask us for a copy of their data. On its closing day, its accounts and everything in them are deleted. The closing days:
- Synect AI (synect.ai and app.synect.ai): 16 October 2026
- Synecto (synecto.app and synecto.io): 16 October 2026
- Page by Page (pagebypage.io): 23 October 2026
After a product closes, we keep only these records from it:
- Payment records, if you paid for anything: six years, because Irish tax and company law require us to keep them
- Records of a personal data breach: six years from the day the incident is closed, because the GDPR requires us to document every breach (Article 33(5))
- The record of a request, cancellation, refund or complaint: as section 6 sets out
What closed, and when, is also on our closed products page. To ask about your data in one of these products, or about a record we keep, write to hello@tarnua.ie.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we change the "Last updated" date at the top of this page.
15. Contact us
For any question about this Privacy Policy or how we handle your data:
SYNECT LIMITED, trading as Tarnua, The Tara Building, 11-15 Tara Street, Dublin 2, D02 RY83, Ireland.
Email: hello@tarnua.ie · Website: tarnua.ie