Privacy Policy

Last updated: 12 August 2026

1. Scope and our role

This policy applies when you visit this website, request a quotation, contact us, approve work, make a payment or receive our WordPress and digital services. SAL SABEEL LTD is normally the controller of information used to manage our own enquiries, customers and business records. When we access or process personal data inside a client’s website, shop, advertising account or other system solely on the client’s instructions, the client normally remains the controller and we act as its processor under the service agreement and, where required, a data processing agreement.

2. Information we collect

• Website and security data: IP address, browser or device details, requested URLs, date and time, and technical or security logs needed to operate and protect the website.
• Enquiry and quotation data: name, email address, business or organisation, optional phone number and website, preferred contact method, timescale, service selections, budget or price information, project notes and any supporting files you choose to send.
• Order and billing data: billing name and address, payment email, services ordered, amount, order status and payment transaction reference. We do not receive or store your full card details or PayPal login details.
• Project data: correspondence, briefs, content, media, approvals and account access shared through an agreed secure method so we can deliver and support the work.
• Business records: contracts, invoices, payments, support history and records needed for tax, accounting, dispute prevention and legal compliance.

Please do not put passwords, card details or unnecessary sensitive personal information in website forms. We will agree a safer method where access credentials are genuinely required.

3. How we obtain information

We receive information directly from you or an authorised contact at your organisation, automatically through normal website and security operation, and from payment providers when they confirm the status of a transaction.

4. Why we use information and our lawful bases

• To answer enquiries, prepare and review quotations, and take requested steps before a contract — contractual necessity.
• To deliver, manage, support and charge for agreed services — contractual necessity.
• To protect the website, prevent abuse, maintain service quality and keep appropriate business records — our legitimate interests, balanced against your rights.
• To maintain tax, accounting and regulatory records or respond to lawful requests — legal obligation.
• To send optional marketing or use optional tracking technologies, if introduced — consent where the law requires it. You may withdraw consent at any time.

5. Who we share information with

We share only what is reasonably necessary with service providers supporting website hosting, email delivery, security, backups, WordPress/WooCommerce operation, accounting and professional advice. Secure payments are processed by the provider you choose, currently Square (including eligible Google Pay payments) or PayPal, under that provider’s own privacy terms. We may also share information with an approved subcontractor working under confidentiality and data-protection obligations, or with regulators, courts and law-enforcement bodies where legally required. We do not sell personal information.

6. International transfers

Some suppliers may process information outside the United Kingdom. Where UK data-protection law requires it, we use an approved transfer mechanism or rely on another lawful safeguard and assess the protection available.

7. How long we keep information

• Unsuccessful enquiries and quotations are normally retained for up to 24 months after the last meaningful contact.
• Customer, contract, order, payment and accounting records are normally retained for up to six years after the relevant relationship or accounting period, or longer where the law requires.
• Project and support records are kept for as long as reasonably needed to deliver the work, maintain continuity and handle claims.
• Security and diagnostic logs are normally kept for no longer than 12 months unless an incident requires longer investigation. Backups are overwritten on the applicable backup cycle.

We delete or anonymise information earlier where it is no longer needed and no legal or operational reason requires us to retain it.

8. Cookies and similar technologies

See our Cookie Policy for current information about essential website, WooCommerce and payment technologies. We do not currently use advertising or analytics cookies on this website. If optional tracking is added later, we will update the notice and request consent where required.

9. Working in client systems

Where a service involves personal data in a client-controlled system, we use it only to provide the agreed service, apply reasonable access controls, limit access to authorised people and return or delete it as the agreement and law require. Clients remain responsible for the lawfulness of the data and instructions they give us.

10. Your data-protection rights

Depending on the circumstances, UK law may give you rights to access, correct, erase or restrict personal information, receive certain information in a portable format, and object to processing based on legitimate interests or direct marketing. You may withdraw consent at any time without affecting earlier lawful processing. To exercise a right, email hello@salsabeel.ltd. We may need to verify your identity.

You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concern first.

11. Automated decisions

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects. Quotations are reviewed and approved by a person before a payment link is issued.

12. Security

We use proportionate technical and organisational measures including access controls, updates, security monitoring and backups. No online service can promise absolute security, so please notify us promptly if you suspect a problem.

13. Children

Our services are intended for businesses and are not directed at children. Please do not submit information about a child unless it is necessary, lawful and agreed with us in advance.

14. Changes and contact

We may update this policy when our services, suppliers or legal duties change. The current version and date will remain on this page. Questions or requests can be sent to hello@salsabeel.ltd or through our contact page.