This notice explains how Saueglobal Limited uses personal information when we are responsible for deciding how it is used. In data protection law, that makes us the "controller". It covers our clients and their staff, people who contact us, people who receive our marketing, website visitors and our suppliers.
When we process personal information on our clients' behalf as part of our services, for example in their Microsoft 365 environment, our client is the controller and our Data Processing Agreement applies instead. Our clients' own privacy notices explain that processing.
Key points
- We use your information to provide our services, run our business and, where you agree or the law allows, to send you marketing.
- We only use analytics cookies on our website if you accept them.
- We do not sell your information.
- You can ask to see, correct or delete your information, or object to how we use it, by emailing support@saueglobal.com.
- You can complain to us, and to the Information Commission if you are not happy with our response.
1. Who we are
1.1 Saueglobal Limited is a company registered in England and Wales under company number 14104858. Our registered office is at 17 Barons Court Road, London W14 9DP.
1.2 For any question about this notice or your information, email support@saueglobal.com or write to us at our registered office, marked "Privacy".
2. Information we collect
2.1 Information you give us. This includes your name, job title, organisation, email address, phone number and postal address. It also includes what you tell us in emails, calls, meetings, support requests and forms on our website.
2.2 Account and billing information. When you buy from us, we keep records of your orders, services, invoices and payments. Card details, and bank details for Direct Debit, are collected by our payment provider, Stripe. We do not see or store full card numbers. Stripe also uses payment information for its own fraud prevention and legal obligations, as a separate controller. If you pay by bank transfer, we receive the payer's name and account details from our bank.
2.3 Information about how you use our website. If you accept analytics cookies, we collect information about your visit, such as pages viewed, time spent, clicks, the device and browser you use and your approximate location from your IP address. Section 8 explains our cookies.
2.4 Information from others. We may receive your details from your employer when it buys services from us, from people who refer you to us, from our partners and from public sources such as Companies House and professional networking sites.
2.5 Domain registrations. When we register a domain name for you, the registration details you give us are passed to the domain registrar and registry as our Domain Services Schedule explains.
2.6 You do not have to give us your information. But if you do not give us the information we need to provide a service, invoice you or meet our legal obligations, we may not be able to provide the service. Domain registries require accurate registrant details, so we cannot register a domain without them.
3. How we use your information and our lawful bases
| What we use it for | Lawful basis |
|---|---|
| Providing services you or your organisation have bought, including support, account management and domain registration | Performance of a contract with you, or our legitimate interests in serving your organisation |
| Answering enquiries and preparing proposals | Our legitimate interests in responding to and winning business, or steps you ask us to take before a contract |
| Invoicing, collecting payments and keeping accounting records | Legal obligation, and performance of a contract |
| Sending service messages, such as renewal reminders and security notices | Performance of a contract, and legal obligation where the law requires a reminder |
| Sending marketing emails about our services | Your consent, or for existing clients our legitimate interests where the law allows. You can unsubscribe at any time |
| Measuring and improving our website using analytics cookies | Your consent |
| Keeping our systems and information secure and preventing fraud | Our legitimate interests in protecting our business and our clients |
| Verifying your identity when you report a disputed domain transfer | Our legitimate interests in protecting domain holders from fraud |
| Complying with the law, responding to regulators and handling legal claims | Legal obligation, or our legitimate interests in defending our rights |
3.1 Where we rely on legitimate interests, we have balanced them against your rights and freedoms. You can ask us for details of that balance.
3.2 We do not make decisions about you using only automated processing that have legal or similarly significant effects on you.
4. Marketing
4.1 We send marketing emails using Mailchimp. We only send them to individuals who have agreed to receive them, or to existing clients about similar services where the law allows. We may also send marketing to business email addresses where the law allows.
4.2 Every marketing email includes an unsubscribe link. You can also email support@saueglobal.com to stop marketing at any time.
4.3 Our marketing emails contain tracking pixels and tracked links that show whether an email was opened and which links were clicked. We only use them if you agreed when you signed up. You can withdraw that agreement at any time by emailing support@saueglobal.com.
5. Who we share your information with
5.1 We share personal information only where we need to, with:
- Microsoft, which provides our email, documents, client records and support systems, including Microsoft 365, Dynamics 365 and Power Apps,
- Stripe, which processes our payments,
- Mailchimp, which sends our marketing emails,
- Google and Microsoft, which provide our website analytics through Google Analytics and Microsoft Clarity, if you accept analytics cookies,
- GoDaddy, Namecheap and domain registries, when we register a domain name for you,
- subcontractors who help us deliver services, under contracts that protect your information,
- our accountants, insurers, banks and professional advisers and
- regulators, courts, law enforcement and other authorities where the law requires it.
5.2 If we sell or reorganise our business, we may share information with the buyer or new owner, who will continue to protect it in line with this notice.
5.3 We do not sell your personal information.
6. International transfers
6.1 Some of our providers, including Microsoft, Google, Stripe, Mailchimp, GoDaddy and Namecheap, process information outside the UK, mainly in the European Economic Area and the United States.
6.2 We only transfer information outside the UK where it is protected. This is either because the UK has recognised the country as providing adequate protection, which includes US organisations certified under the UK Extension to the EU-US Data Privacy Framework, or because we use the International Data Transfer Agreement or the International Data Transfer Addendum. You can ask us for details of the protection used.
6.3 Domain registries can be anywhere in the world. Where no other protection applies, we send your registration details to them because this is necessary to register the domain you asked for.
7. How long we keep your information
| Information | How long we keep it |
|---|---|
| Client contracts, orders, invoices and payment records | 6 years after the end of the financial year in which the contract ends, to meet tax and legal requirements |
| Support requests and service records | For the life of the contract and 2 years after it ends |
| Enquiries and proposals that do not lead to a contract | 2 years from our last contact with you |
| Marketing list details | Until you unsubscribe. We then keep a suppression record so we do not contact you again |
| Website analytics from Google Analytics | Event-level data for 14 months. Google keeps reports that do not identify you for longer |
| Website analytics from Microsoft Clarity | Session recordings for 30 days, except recordings we label or save, which are kept for 9 months. Heatmap and click data for 9 months |
| Complaints | 2 years after the complaint is closed, or longer where it relates to a contract or legal claim |
| Identity documents sent with a Domain Transfer Dispute Form | Deleted within 30 days after the dispute is closed |
7.1 We may keep information for longer where we need it for a legal claim or the law requires it.
8. Cookies
8.1 Cookies are small files stored on your device when you visit a website. We use two kinds.
8.2 Essential cookies make our website work, for example by remembering your cookie choices. They do not need your consent.
8.3 Analytics cookies help us understand how visitors use our website so we can improve it. We only set them if you accept them in our cookie banner.
| Provider | Cookies | Purpose | How long |
|---|---|---|---|
| Google Analytics | _ga, _ga_ followed by an ID |
Distinguishes visitors and sessions to produce statistics about website use | 2 years |
| Microsoft Clarity | _clck |
Recognises returning visitors to our website | 1 year |
| Microsoft Clarity | _clsk |
Links page views into one session so we can see how pages are used through heatmaps and session recordings | 1 day |
| Microsoft Clarity (set on Microsoft domains) | CLID, MUID, MR, SM, ANONCHK |
Recognise your browser across sites that use Clarity and other Microsoft sites. Microsoft also uses MUID for advertising and its own operational purposes |
Up to 1 year |
Cookie durations are set by Google and Microsoft and may change.
8.4 Microsoft Clarity records how visitors move around our pages, such as clicks and scrolling. It is set up to mask text you type into forms.
8.5 You can change your cookie choices at any time using the "Cookie settings" link at the bottom of every page. You can also block or delete cookies in your browser settings.
9. Your rights
9.1 You have the right to:
- ask for a copy of your personal information,
- ask us to correct information that is wrong or incomplete,
- ask us to delete your information,
- ask us to restrict how we use your information,
- object to how we use your information, including for direct marketing,
- ask us to transfer information you gave us to another organisation, where we use it under a contract or your consent and
- withdraw your consent at any time, where we rely on consent.
9.2 Some rights only apply in certain circumstances. To use any of them, email support@saueglobal.com. We may need to confirm your identity. We will respond within one month, or tell you within that month if we need up to two further months because the request is complex or you have made several requests.
9.3 Your right to object. You can object at any time to our use of your information for direct marketing, and we will stop. You can also object where we rely on legitimate interests. We will then stop unless we have compelling grounds that override your interests or we need the information for a legal claim.
10. Complaints
10.1 If you are unhappy with how we have used your information, please tell us first at support@saueglobal.com. We will acknowledge your complaint within 30 days and respond without undue delay. Our Complaints Policy explains the process.
10.2 You also have the right to complain to the Information Commission, the UK data protection regulator, at ico.org.uk.
11. Changes to this notice
11.1 We may update this notice. The date at the top shows when it was last changed. We will tell clients about significant changes by email.