Last updated: June 17, 2026
This page describes the rights available to visitors in the European Union and the United Kingdom under the GDPR and the UK GDPR. It should be read together with our main Privacy Policy.
1. Data controller
The controller for personal data collected through this site is the operator, 054 SYNDICATE INC, 250 STONE HILL RD JERICHO, VT 05465. Contact details appear on the contact page.
2. Lawful bases for processing
We process personal data on the following bases:
- Contract — to accept and fulfil your order.
- Consent — for marketing email and non-essential cookies, which you may withdraw at any time.
- Legitimate interests — to operate, secure, and improve the site, balanced against your rights.
- Legal obligation — to satisfy tax, accounting, and related duties.
3. Your rights
- Access — to obtain a copy of the personal data we hold about you.
- Rectification — to correct inaccurate or incomplete data.
- Erasure — to have data deleted where no overriding reason requires its retention.
- Restriction and objection — to limit or object to certain processing, including direct marketing.
- Portability — to receive a machine-readable copy of data you provided.
- Withdrawal of consent — at any time, without affecting prior lawful processing.
4. International transfers
Where data is transferred outside the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses with the parties concerned.
5. Retention
We retain personal data only for as long as the purposes set out in our Privacy Policy and legal requirements demand, after which it is deleted or anonymised.
6. Exercising your rights
Email the privacy address on our contact page. We respond within one month and may request confirmation of your identity before acting on a request.
7. Supervisory authority
If you believe we have mishandled your data, you may lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner's Office (ICO); in the EU, your national data protection authority.