Last updated: 13/06/2026
This Privacy Policy explains how ConsonaSync (“we”, “us”, “our”) collects, uses, and protects your personal information when you use our website (www.consonasync.com) and services.
1. Who Is Responsible For Your Data
Consona (“Consona”, “we”, “us”, “our”), provides business-scanning and workflow services for businesses. This Privacy Notice explains how we handle personal data when you visit our website, create a Consona account, connect a business application, or use a Consona Business Scan.
Consona is the controller of personal data we collect about website visitors and Consona account holders.
Our contact details are:
The Haven, Plassey St, Penarth, CF64 1EP, United Kingdom
Email: info@consonasync.com
2. Our read-only-first approach
Consona is designed to help businesses understand routine work before any automation is enabled.
When you connect an application for a Business Scan, Consona requests only the minimum access and fields needed for the specific scan. We do not use scan access to make changes to your connected application unless you later choose and approve an operational workflow.
For example, a Shopify scan may use limited operational metadata such as order timing, payment status and fulfilment status to calculate aggregate findings. We do not intentionally request customer names, email addresses, phone numbers, delivery addresses, payment-card details or product-line content for that scan.
3. Data We Process
Depending on how you use Consona, we may process:
- account information, such as your name, work email address, organisation and login details;
- connected-app information, such as the name of the application, connection status and securely stored authorisation tokens;
- limited operational metadata obtained during an authorised scan;
- aggregate scan findings, calculations and recommendations;
- configuration, support and security information, including audit events and technical logs; and
- website and communications information you provide to us.
4. What Happens During A Business Scan
A Business Scan is read-only.
Consona processes provider responses transiently to calculate non-identifying, aggregate findings. Raw provider responses are not retained as part of the scan result. We retain only the scan findings, the underlying aggregate calculations, and the information needed to explain those findings to you.
Consona does not sell personal data. Consona does not use Business Scan data for advertising, profiling consumers, or decisions that produce legal or similarly significant effects on individuals.
5. Why We Use Personal Data
We use personal data to:
- provide, secure and support Consona;
- authenticate users and manage accounts;
- connect applications that you authorise;
- perform the Business Scan you request;
- provide aggregate findings and product functionality;
- prevent fraud, abuse and unauthorised access;
- communicate with you about the service; and
- meet legal obligations.
Our legal bases may include performance of a contract with you, our legitimate interests in operating and securing Consona, compliance with legal obligations, and consent where required.
6. Sharing and Service Providers
We share data only where necessary to operate Consona, comply with law, or protect our rights and users.
We may use carefully selected service providers for hosting, encrypted secrets management, identity management, email delivery, error monitoring and customer support. These providers process data only on our documented instructions and subject to appropriate contractual and security safeguards.
A current list of material subprocessors is available at: [subprocessor page URL].
7. International Transfers
Where personal data is transferred outside the United Kingdom, European Economic Area or another applicable jurisdiction, we will use appropriate safeguards required by applicable law, such as approved contractual clauses.
8. Security
We use proportionate technical and organisational safeguards designed to protect data. These include encrypted transmission, access controls, credential protection, audit logging and data minimisation.
No system is completely secure. If we become aware of a security incident that creates a material risk to you or affected individuals, we will take appropriate action and provide required notifications.
9. Your Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also have the right to complain to your local data-protection authority.
To exercise a right, contact us at info@consonasync.com.
10. Changes To This Notice
We may update this Privacy Notice as Consona develops. We will post the updated version on this page and change the “Last updated” date.
11. Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): www.ico.org.uk.
12. Contact Us
If you have any questions about this Privacy Policy, contact us at:
info@consonasync.com
The Haven, Plassey St, Penarth, CF64 1EP, United Kingdom
