Thrill Syndicate b.v.

Last updated: June 2026 | Effective date: January 2026

1. Who We Are (Controller)

Thrill Syndicate b.v. (“we”, “us”, or “our”) is the controller responsible for your personal data under this Privacy Policy.

We have determined that the appointment of a Data Protection Officer (DPO) is not mandatory for our organisation given the nature and scale of our processing activities. For all privacy-related queries, contact us at the details above.

2. Personal Data We Collect and Why

2.1 Website visitors

When you browse our website we automatically collect certain technical data:

• IP address, browser type and version, operating system
• Pages visited, time and date of visit, time spent on pages
• Referring URL and other diagnostic data (collectively, “Usage Data”)

Purpose: to operate, secure, and improve our website.

Legal basis: legitimate interest (Article 6(1)(f) GDPR). We have a legitimate interest in ensuring our website functions correctly and remains secure. This interest is not overridden by your interests given the limited, technical nature of the data.

2.2 Account holders and buyers

When you create an account or place an order we collect:

• Name, email address, phone number, postal address
• Order history and delivery information
• Payment status (not full card data, which is handled directly by our payment processor)

Purpose: to fulfil your order, manage your account, and send order confirmations and delivery updates.

Legal basis: performance of a contract (Article 6(1)(b) GDPR).

2.3 Quote requests and enquiries

When you submit a quote request or contact form we collect:

• Name, email address, phone number, company name
• Project details and any other information you choose to include

Purpose: to respond to your enquiry and prepare quotations.

Legal basis: pre-contractual steps at your request (Article 6(1)(b) GDPR).

2.4 Newsletter and marketing communications

If you subscribe to our newsletter we collect your name and email address. Our newsletter is self-hosted; your subscription data is stored on our own servers and not shared with a third-party email marketing platform.

Purpose: to send industry news, product updates, and promotional content.

Legal basis: consent (Article 6(1)(a) GDPR). You may withdraw consent at any time by clicking “Unsubscribe” in any email we send, or by contacting us at info@thrillsyndicate.com. Withdrawal does not affect the lawfulness of processing before withdrawal.

2.5 Transactional email

We use Zoho to send transactional emails (order confirmations, account notifications, enquiry responses).

Purpose: to deliver service communications required to fulfil your order or respond to your enquiry.

Legal basis: performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR).

2.6 Website analytics (with your consent)

With your consent we use Google Analytics to collect anonymised/pseudonymised statistics: pages viewed, session duration, and approximate location derived from your IP address.

Purpose: to understand how visitors use our website and to improve its content and navigation.

Legal basis: consent (Article 6(1)(a) GDPR). Analytics cookies are placed only after you have given consent via our cookie banner. You can withdraw consent at any time via the cookie settings link in our website footer.

3. Legal Bases for Processing — Summary

4. Cookies and Tracking Technologies

We use cookies — small text files stored on your device — and similar technologies. We use three categories:

4.1 Strictly necessary cookies

Required for the website to function (e.g. maintaining your session and shopping cart). These do not require your consent and cannot be disabled through our cookie banner.

4.2 Analytics cookies (consent required)

Used to measure website usage via Google Analytics. Only placed after you click “Accept analytics” in our cookie banner. You may also opt out of Google Analytics tracking across all websites by installing the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout

4.3 Preference cookies (consent required)

Used to remember your language and display preferences. Only placed after you give consent.

For a full list of cookies currently in use, see our Cookie Declaration (linked in the website footer). You can withdraw or change your consent at any time via the cookie settings link in the footer.

5. Who We Share Your Data With

We do not sell your personal data. We share it only where necessary with the following categories of recipients.

5.1 Service providers (processors)

All processors listed below are engaged under data processing agreements that bind them to process your data only on our documented instructions.

5.2 Legal requirements

We may disclose personal data where required by applicable law, court order, regulatory request, or to protect our legal rights and the safety of our users.

5.3 Business transfers

If Thrill Syndicate b.v. is involved in a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6. International Transfers

Thrill Syndicate b.v. is based in the Netherlands (EU). Some of our service providers are located outside the European Economic Area. Where we transfer personal data to the USA, we rely on one of the following mechanisms:

• EU-US Data Privacy Framework — adequacy decision adopted 10 July 2023 (applies to Google LLC and other DPF-certified providers), or
• Standard Contractual Clauses (SCCs) — EU Commission Implementing Decision of 4 June 2021 (applies to Zoho Corporation).

Hostinger is based in Lithuania and processes data within the EU; no international transfer occurs. We do not transfer personal data to countries outside the EEA that lack an adequacy decision without first putting appropriate safeguards in place.

7. How Long We Keep Your Data

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised.

8. Your Rights

Under GDPR you have the following rights in relation to your personal data:

• Right of access (Art. 15) — to receive a copy of the personal data we hold about you.
• Right to rectification (Art. 16) — to have inaccurate or incomplete data corrected.
• Right to erasure (Art. 17) — to have your data deleted in certain circumstances (“right to be forgotten”).
• Right to restriction of processing (Art. 18) — to limit how we use your data in certain circumstances.
• Right to data portability (Art. 20) — to receive your data in a structured, machine-readable format and transfer it to another controller, where processing is based on consent or contract.
• Right to object (Art. 21) — to object to processing based on legitimate interest, including direct marketing (we will stop immediately on receipt of such an objection).
• Right to withdraw consent — where processing is based on your consent, to withdraw it at any time without affecting the lawfulness of prior processing.
• Right not to be subject to solely automated decisions (Art. 22) — we do not make decisions about you based solely on automated processing.

To exercise any of these rights, contact us at info@thrillsyndicate.com. We will acknowledge your request promptly and respond within 30 days. Where a request is complex or we receive a high volume, we may extend this period by up to two further months and will notify you accordingly.

9. Children

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe a child has provided us with personal data without appropriate consent, please contact us at info@thrillsyndicate.com and we will delete the relevant data promptly.

10. Changes to This Policy

We review and update this Privacy Policy at least annually and whenever our practices change materially. When we make material changes we will:

• Notify you by email if we hold your email address, and
• Post a prominent notice on our website.

The “last updated” date at the top of this page always reflects the most recent version. We encourage you to review this page periodically.

11. Contact Us

For any questions about this Privacy Policy or to exercise your data subject rights: