Privacy notice · EquiSync Partners

This notice explains how EquiSync Partners uses personal information about the business contacts we research, email and work with. It's written to meet the UK General Data Protection Regulation (UK GDPR), including Article 14, which applies when we collect your details from somewhere other than you.

Who we are

EquiSync Partners is the trading name of Kiran Woochit, a sole trader in the United Kingdom. Kiran is the controller of your personal data.

Address: 60 Westerham Avenue, Edmonton, London N9 9BS, United Kingdom
Email: privacy@equisyncpartners.com
ICO registration number: ZC181139

What we do

We track public regulatory records that show when a business has a specific need (for example, a building repair deadline or a well-plugging obligation). We then introduce that business to specialist firms with the capacity to help, where both sides agree the fit is right. To do this we contact people in their business role, mainly by email.

What information we hold

Business contact details: name, job title, company, business email address, business phone number, business postal address.
Company and public-record facts: company name and website, licence or permit details, and the public record that prompted contact (for example a filing date or case type).
Correspondence: emails we exchange, and whether you have asked us not to contact you.
If you book or join a call: booking details, and with your agreement a recording and transcript of the call.
If you become a client: contract, invoicing and payment records.

We don't collect special-category data (such as health or ethnicity) and don't seek information about individuals' private lives.

Where we get your details

If we haven't heard from you directly, your details came from one or more of these sources:

New York City (NYC Open Data, published by city agencies)

NYC Department of Housing Preservation and Development (HPD): Housing Litigations; Buildings Selected for the Alternative Enforcement Program; Registration Contacts and Multiple Dwelling Registrations; Buildings Subject to HPD Jurisdiction
NYC Department of Buildings (DOB): License Info (licensed trades); DOB NOW Safety: Facades Compliance Filings; DOB NOW Build: Approved Permits

Texas (Railroad Commission of Texas)

Inactive Well Aging Report
P-5 Organization file
List of approved cementers for well plugging

Other sources

Company websites and other publicly available business directories
Business email-finding and email-verification services, which suggest or check a business email address for a named company

Why we use it, and our lawful basis

Purpose	Lawful basis (UK GDPR)
Researching businesses with a relevant need, and contacting them by email about introductions to suitable firms	Legitimate interests (Art. 6(1)(f)): our interest in offering a relevant business service, and the recipient's interest in hearing about help with a live regulatory or operational issue. We have written a legitimate interest assessment, which balances this against your rights. We contact businesses only in their business capacity, keep messages relevant, and stop as soon as you ask.
Keeping a record of people who have asked not to be contacted	Legitimate interests: so we can honour your objection and comply with UK (PECR) and US (CAN-SPAM) email rules by never contacting you again
Arranging and recording calls	Legitimate interests. Recordings are made only after we tell you and you agree to continue
Contracts, invoices and payments with clients	Contract (Art. 6(1)(b)) and legal obligation (tax records)

We don't make decisions about you using solely automated processing that has legal or similarly significant effects.

Who we share it with

We don't sell personal data. We share it only:

With the other party to an introduction, where you have agreed to that introduction;
With service providers who process it on our behalf (processors), under contracts that require them to protect it (listed below);
Where the law requires it, for example to HM Revenue & Customs.

Provider	What they do
Google (Google Workspace, Google Sheets)	Business email; contact and client records
Microsoft (Microsoft 365) and our inbox provider (ScaledMail)	Outreach mailboxes
Instantly	Sending and managing outreach email
Email-finding and verification services (e.g. AnyMailFinder, MillionVerifier, Prospeo, Exa)	Finding and checking business email addresses and company domains
Cal.com	Call booking
Fathom	Call recording and transcription (only when you agree)
Wise (and later Stripe)	Payments and invoicing for clients
Our website host	Serving this website
Google Fonts	Serving this website's typefaces (your browser requests them from Google, which sees your IP address)

International transfers

Several of these providers are based in, or store data in, the United States. Where personal data leaves the UK, we rely on:

the UK Extension to the EU–US Data Privacy Framework ("UK–US data bridge"), for providers certified under it; or
the ICO International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

If you're in the US, your data is stored mainly with US-based providers.

How long we keep it

Prospects we contact but don't work with: up to 12 months after our last contact, then deleted.
Opt-outs: the minimum needed (your email address or company domain and the date) is kept on a suppression list indefinitely, so we can make sure we never contact you again.
Clients: for as long as UK tax law requires: at least 5 years after the 31 January Self Assessment deadline for the tax year concerned.
Call recordings: up to 12 months, or less if the engagement ends sooner.

Your rights

Under UK GDPR you have the right to:

object to our use of your data for direct marketing, at any time; we will stop;
object to processing based on legitimate interests;
access a copy of your data;
have inaccurate data corrected;
have your data erased (subject to the suppression-list point above);
restrict our use of it;
data portability, where it applies.

Email privacy@equisyncpartners.com. We reply within one month.

How to stop hearing from us

Reply "no thanks" to any of our emails, or email privacy@equisyncpartners.com. We'll remove you from all our outreach, across every market we work in, and add you to our suppression list. For US recipients, we honour opt-outs within 10 business days as required by the CAN-SPAM Act, and in practice usually within one business day.

Complaints

Please contact us first at privacy@equisyncpartners.com so we can put things right. You can also complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.

Changes

We update this notice when our sources or tools change. The date at the top shows the latest version.