Legal
Privacy Policy
This policy explains how SaaS Group ("we", "us") handles personal information collected through saasgroup.uk, our project request form and our online agreement signing. It is written for clients and visitors in the United Kingdom and the United States.
Who we are
SaaS Group (saasgroup.uk) is the controller of the personal data described here. Contact us about privacy at [email protected].
What we collect
- Project requests: your name, work email, company, project type, timeline, budget range and project brief.
- Agreement signing: your name, job title, email, typed signature, the date and time, IP address, approximate country, browser/device details and a cryptographic fingerprint of the document you signed.
- Technical data: our hosting provider processes IP addresses and request logs to deliver and secure the site. We do not use advertising cookies, analytics trackers or third-party fonts.
Why we use it (and our lawful basis)
- To reply to your enquiry and prepare a proposal — steps taken at your request before entering a contract, and our legitimate interest in responding to business enquiries.
- To form, perform and evidence our contract with you — performance of a contract and our legal obligations.
- To protect the site from spam and abuse — our legitimate interests.
We do not sell or share personal information for cross-context behavioural advertising, and we do not use it for automated decisions with legal effects.
Who we share it with
Only service providers who help us run our business, under contract: Cloudflare (hosting, security and storage), Resend (email delivery) and, if we use one, a form-processing provider. Some providers may process data in the United States; where data leaves the UK we rely on the UK–US Data Bridge or the UK International Data Transfer Addendum.
How long we keep it
Enquiries that do not lead to work are deleted within 24 months. Signed agreements and their signature evidence are kept for the life of the contract plus 7 years, so we can meet legal, tax and evidential obligations.
Your rights
UK: you may ask to access, correct, delete, restrict or port your data, and object to processing based on legitimate interests. You can complain to the Information Commissioner's Office (ico.org.uk).
US: depending on your state (for example California, Colorado, Connecticut, Virginia or Texas), you may have rights to know, access, correct, delete and port your personal information, and to opt out of sale or targeted advertising (we do neither). We will not discriminate against you for exercising these rights. Authorised agents may submit requests on your behalf.
To make a request, email [email protected]. We respond within one month (UK) or 45 days (US), and may need to verify your identity.
Security
All traffic uses HTTPS. Forms are protected against spam and cross-site submission, and signed agreements are fingerprinted with SHA-256 so any change can be detected.
Children
Our services are for businesses and are not directed at children under 16.
Changes
We will update the date above when this policy changes. Significant changes will be highlighted on this page.