Privacy Policy

1. Data Controller

Company Name: SAB Software LTD

Trading As: Ocealis

Contact Email: info@ocealis.tech

For any questions regarding this privacy policy or how we process your data, please contact us at the email address above.

2. What Information We Collect

We collect the following types of personal data:

• •Contact Information: Name, email address, phone number, company name
• •Communications: Messages and enquiries you send us through our contact forms
• •Technical Data: IP address, browser type, device information
• •Usage Data: How you interact with our website and services
• •Account Data: Username, password, and preferences (for SaaS platform users)

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• •Consent: You have given explicit consent for us to process your data (e.g., contact forms, marketing communications)
• •Contract: Processing is necessary to perform a contract with you (e.g., providing our SaaS services)
• •Legitimate Interest: Processing is necessary for our legitimate business interests (e.g., improving our services, preventing fraud)
• •Legal Obligation: Processing is necessary to comply with legal requirements

4. How We Use Your Information

We use your personal data for the following purposes:

• ✓To respond to your enquiries and provide customer support
• ✓To provide and maintain our SaaS platform services
• ✓To improve our services and develop new features
• ✓To send you service updates and technical notices
• ✓To send marketing communications (only with your consent)
• ✓To comply with legal obligations and protect our legal rights
• ✓To prevent fraud and ensure platform security

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience and understand how our website is used.

Types of Cookies We Use

• •
  Essential Cookies:Necessary for the website to function properly. These cannot be disabled.
• •
  Analytics Cookies (Google Analytics):Help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this data to improve our services.

Managing Cookies

When you first visit our website, we will ask for your consent to use non-essential cookies. You can:

• •Accept or decline cookies through our cookie consent banner
• •Change your cookie preferences at any time through your browser settings
• •Opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on

Please note that disabling certain cookies may affect the functionality and your experience on our website.

6. Sharing Your Information

We do not sell or rent your personal data to third parties. We may share your data with:

• •Service Providers: Email service providers (Resend), hosting providers, and payment processors who assist in delivering our services. These providers are contractually obligated to protect your data.
• •Legal Authorities: When required by law or to protect our legal rights
• •Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner

7. International Data Transfers

Some of our service providers may be located outside the UK and European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions by the UK government. We ensure that any international transfers comply with UK GDPR requirements.

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or disclosure. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal data for different periods depending on the purpose:

• •Contact Form Enquiries: 2 years from last contact, or upon request for deletion
• •SaaS Platform User Data: Duration of active subscription plus 6 years for accounting purposes
• •Marketing Communications: Until you unsubscribe or withdraw consent
• •Analytics Data: 26 months (default Google Analytics retention period)

After the retention period expires, we will securely delete or anonymise your data.

10. Your Data Protection Rights

Under UK GDPR, you have the following rights:

• →
  Right to Access:You can request a copy of the personal data we hold about you
• →
  Right to Rectification:You can request that we correct any inaccurate or incomplete data
• →
  Right to Erasure ("Right to be Forgotten"):You can request deletion of your personal data in certain circumstances
• →
  Right to Restrict Processing:You can request that we limit how we use your data
• →
  Right to Data Portability:You can request a copy of your data in a structured, machine-readable format
• →
  Right to Object:You can object to certain types of processing, including direct marketing
• →
  Right to Withdraw Consent:Where processing is based on consent, you can withdraw it at any time
• →
  Right to Lodge a Complaint:You can complain to the Information Commissioner's Office (ICO) if you believe we have not handled your data properly

To exercise any of these rights, please contact us at info@ocealis.tech. We will respond to your request within one month.

11. Data Breaches

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, as required by UK GDPR.

12. Children's Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. For significant changes, we may also send you an email notification. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please contact us: