Legal

Privacy Policy

Last updated: 6 June 2026

Sndora Ltd ("Sndora", "we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it.

This Policy applies to personal data collected through our website at sndora.com, our Platform, our mobile application, and any other channel through which you interact with us.

Sndora is the data controller for personal data collected through our website and Account registration. For personal data processed on behalf of our customers within the Platform (such as your contacts' WhatsApp messages), Sndora acts as a data processor — see Section 5 for details.

1. Who We Are

Sndora Ltd
19 Upper George Street, Luton, LU1 2RD, United Kingdom
Email: legal@sndora.com

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at the email address above.

2. Personal Data We Collect

2.1 Account & Registration Data

When you create an Account or sign up for a demo, we collect: your full name, business email address, company name, job title, WhatsApp number, and any other information you choose to provide.

2.2 Billing & Tax Information

When you subscribe to a paid plan, we additionally collect your company's legal name, billing address, and Tax Identification Number (e.g. VAT number) solely for the purpose of generating invoices and complying with tax obligations. We do not use tax information for any other purpose.

2.3 Service Usage Data

We collect information about how you access and use the Platform, including features used, actions taken, timestamps, and performance data. This helps us improve the Services and detect security issues.

2.4 Technical & Device Data

We automatically collect your IP address, browser type, operating system, device identifiers, referral URLs, and pages visited on our website. This information helps us maintain security, diagnose issues, and understand how visitors use our site.

2.5 Communications & Support

If you contact us with an enquiry, request, or complaint, we collect the content of that communication along with your contact details. We retain this information to resolve your query and improve our support.

2.6 Marketing & Demo Requests

If you request a demo or opt in to marketing communications, we collect the details you provide and use them to contact you about our products and services. You may opt out at any time.

2.7 Mobile App

If you use our mobile application, we may additionally collect, with your permission: device contacts (to help you quickly start conversations in the Platform), camera and media access (to allow you to share files and images in chats), and mobile analytics data (frequency of use, events, device type, OS version). We do not access your device contacts without your explicit permission.

2.8 Job Applications

If you apply for a role at Sndora, we collect the information in your CV, cover letter, and application form. This information is used only for recruitment purposes and retained for up to twelve (12) months after the conclusion of the recruitment process.

3. How & Why We Use Your Data

We process your personal data on the following legal bases under UK GDPR:

  • Performance of a contract — to create and manage your Account, process payments, and deliver the Services you have subscribed to.
  • Legitimate interests — to improve and secure the Platform, understand usage patterns, prevent fraud, and communicate with you about service updates. We have assessed that these interests are not overridden by your rights and interests.
  • Legal obligation — to comply with applicable laws, including tax, accounting, and regulatory obligations.
  • Consent — to send you marketing communications and newsletters, where you have opted in. You may withdraw consent at any time by unsubscribing or contacting us at legal@sndora.com.

4. Cookies & Tracking Technologies

We use cookies and similar tracking technologies on our website and Platform. Cookies are small text files stored on your device that help us recognise you and improve your experience.

  • Essential cookies — required for the Platform to function, including keeping you logged in and maintaining session security.
  • Analytics cookies — used to understand how visitors use our website (e.g. via Google Analytics). You may opt out of Google Analytics tracking via Google's opt-out tool.
  • Preference cookies — used to remember your settings and personalise your experience.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform.

5. Data Processed on Behalf of Our Customers (Processor Role)

When you use the Platform to manage your business contacts and send messages, the personal data of those individuals (such as names, phone numbers, and message content) is processed by Sndora on your behalf. In this context:

  • You are the data controller — you determine why and how that personal data is processed.
  • Sndora is the data processor — we process that data only on your documented instructions.

You are responsible for ensuring you have a lawful basis to contact your customers via WhatsApp, and for obtaining all required consents under applicable law (including PECR in the UK). If your contacts have questions about how their data is used by your business, please direct them to your own privacy notice.

6. WhatsApp Cloud API & Message Storage

Sndora routes messages via Meta's WhatsApp Cloud API. Messages are temporarily stored by Meta to facilitate delivery. Meta automatically deletes WhatsApp messages from its servers after thirty (30) days. For full details, please refer to Meta's privacy documentation.

Message history within the Sndora Platform is retained for the duration of your Subscription. On account termination, all stored conversations and contact data are permanently deleted unless you request otherwise.

7. Third-Party Services & Integrations

The Platform integrates with third-party services that may collect or process data. These include but are not limited to:

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

8. Sharing & Disclosure of Personal Data

Sndora does not sell, rent, or trade your personal data. We may share your data in the following circumstances:

  • Service providers — with carefully selected third-party processors (e.g. cloud hosting, database, analytics, and payment providers) who process data on our behalf under strict contractual obligations and only on our documented instructions.
  • Business transfers — in connection with a merger, acquisition, reorganisation, or sale of assets, in which case your data may be transferred to the acquiring entity subject to equivalent privacy protections.
  • Legal compliance — where required by law, court order, or regulatory authority, or to protect the rights, property, or safety of Sndora, our customers, or the public.

9. Data Retention

We retain your personal data for as long as necessary to:

  • provide the Services under your active Subscription;
  • comply with our legal and regulatory obligations (e.g. tax records for six years);
  • resolve disputes and enforce our agreements.

Account data is deleted within ninety (90) days of account termination. You may request earlier deletion — see Your Rights below.

10. International Data Transfers

Sndora is based in the United Kingdom. Some of our third-party service providers operate outside the UK. Where we transfer personal data internationally, we ensure appropriate safeguards are in place — such as UK International Data Transfer Agreements (IDTAs) or equivalent standard contractual clauses — in accordance with UK GDPR requirements.

11. Your Rights Under UK GDPR

As a data subject in the UK, you have the following rights in relation to your personal data:

  • Right of Access — to request a copy of the personal data we hold about you.
  • Right to Rectification — to request correction of inaccurate or incomplete data.
  • Right to Erasure — to request deletion of your personal data in certain circumstances (the "right to be forgotten").
  • Right to Restriction of Processing — to request that we limit how we use your data in specific situations.
  • Right to Data Portability — to receive your personal data in a structured, machine-readable format and to transfer it to another provider.
  • Right to Object — to object to processing based on our legitimate interests, or to direct marketing at any time.
  • Right to Withdraw Consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at legal@sndora.com. We will respond within one month of receiving your request. There is no charge for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

12. Children's Data

The Services are not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data without appropriate consent, please contact us at legal@sndora.com and we will promptly delete it.

13. Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These include encryption of data in transit and at rest, access controls, and regular security assessments.

While we take all reasonable precautions, no method of transmission over the internet is completely secure. We cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO and, where required, affected individuals in accordance with applicable law.

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will notify you by email or by displaying a prominent notice on the Platform before the changes take effect. We encourage you to review this Policy periodically.

15. How to Contact Us & Your Right to Complain

If you have any questions, concerns, or complaints about how we handle your personal data, please contact us:

Sndora Ltd
19 Upper George Street, Luton, LU1 2RD, United Kingdom
Email: legal@sndora.com

We will aim to respond to all queries within fourteen (14) days. If you are not satisfied with our response, or if you believe we are processing your personal data in breach of UK data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ico.org.uk/make-a-complaint
ICO helpline: 0303 123 1113