Privacy Policy

Last updated: April 2026

Syx Agency (“Syx”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website at syxagency.com or interact with our services, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Portuguese data protection legislation.

1. Data Controller

The data controller responsible for your personal data is:

Syx Agency
Email: info@syxagency.com
Website: syxagency.com

If you have any questions or concerns about how we handle your personal data, you may contact us at the email address above.

2. What Personal Data We Collect

We collect personal data that you voluntarily provide to us through the following channels:

a) Booking Inquiry Form

When you submit a booking inquiry through our Contact page, we collect: your first name, last name, email address, phone number (including country prefix), country of residence, inquiry topic, business role, and the content of your message.

b) Newsletter Sign-Up

When you subscribe to our newsletter, we collect: your email address (required), and optionally your first name and phone number (including country prefix).

c) Automatically Collected Data

When you visit our website, certain technical data may be collected automatically, including your IP address, browser type and version, operating system, referring URL, pages visited, and the date and time of your visit. This data is collected through cookies and similar technologies (see Section 6 below).

3. How We Use Your Data

We process your personal data for the following purposes and legal bases:

To respond to booking inquiries — We use the information you provide in our contact form to respond to your enquiry, facilitate artist bookings, and manage our professional relationship with you. Legal basis: legitimate interest and, where applicable, performance of a contract.
To send newsletter communications — If you subscribe to our newsletter, we use your email address (and optional name/phone) to send you updates about electronic music events, artist news, and Syx Agency services. Legal basis: your explicit consent, which you may withdraw at any time.
To improve our website — We use technical data to analyse website traffic, optimise performance, and ensure security. Legal basis: legitimate interest.
To comply with legal obligations — We may process your data as required by applicable law. Legal basis: legal obligation.

4. Data Sharing and Third-Party Processors

We do not sell, rent, or trade your personal data. However, we share your data with the following trusted third-party service providers who process it on our behalf:

Brevo (formerly Sendinblue) — Our email marketing and CRM platform, used to store contact information and send newsletter communications. Brevo processes data in accordance with GDPR and maintains appropriate security measures. Brevo Privacy Policy.
NitroPack — Our website performance optimisation service, which may process certain technical data for caching purposes. NitroPack Privacy Policy.
Hosting Provider — Our web hosting provider stores and serves our website content and may process technical data related to your visit.

All third-party processors are contractually obligated to process your data only as instructed by us and to implement appropriate technical and organisational security measures.

5. International Data Transfers

Some of our third-party service providers may process your data outside the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and optimise performance. Cookies are small text files stored on your device when you visit our site.

We use the following types of cookies:

Strictly necessary cookies — Essential for the website to function correctly (e.g., session management, security).
Performance and analytics cookies — Help us understand how visitors interact with our website by collecting anonymous usage data.
Functionality cookies — Used by our optimisation tools (such as NitroPack) to deliver cached content and improve loading speed.

You can manage your cookie preferences at any time by clicking “Cookie Preferences” in the footer of our website, or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Booking inquiry data — Retained for the duration of any resulting business relationship, plus an additional period as required by applicable law (typically up to 5 years for contractual records).
Newsletter subscriber data — Retained until you unsubscribe or request deletion of your data.
Technical/analytics data — Typically retained for up to 12 months.

When data is no longer needed, it is securely deleted or anonymised.

8. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

Right of access — You may request a copy of the personal data we hold about you.
Right to rectification — You may ask us to correct any inaccurate or incomplete data.
Right to erasure (“right to be forgotten”) — You may request the deletion of your personal data, subject to any legal obligations we may have to retain it.
Right to restrict processing — You may ask us to limit how we use your data in certain circumstances.
Right to data portability — You may request your data in a structured, commonly used, machine-readable format.
Right to object — You may object to the processing of your data based on legitimate interests or for direct marketing purposes.
Right to withdraw consent — Where processing is based on your consent (e.g., newsletter), you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@syxagency.com. We will respond to your request within 30 days, as required by GDPR.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), secure storage, access controls, and regular security reviews.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining the highest practicable standards.

10. Children’s Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete it.

11. Links to Third-Party Websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any third-party websites you visit.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically to stay informed about how we protect your data.

13. Supervisory Authority

If you are not satisfied with how we handle your personal data or your data protection request, you have the right to lodge a complaint with the Portuguese Data Protection Authority:

Comissão Nacional de Proteção de Dados (CNPD)
Website: www.cnpd.pt

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Syx Agency
Email: info@syxagency.com