Privacy notice

1. Who is responsible

SSABEL LLC (“SSABEL”, “we”, “us”) is registered in Iowa, United States and is responsible for the personal information described in this notice. This notice covers this website, business enquiries and related follow-up. A separate service agreement or privacy notice may explain additional processing for a particular engagement; it does not remove your mandatory legal rights.

2. Information we collect

• Information you provide: your name, email address, organisation, selected service and message, together with any optional phone number, country, sector or other business details you choose to supply.
• Enquiry records: a reference, submission time, request status, permission to respond and the privacy-notice version associated with the enquiry. We also use a fingerprint of the submitted details to recognise duplicate requests.
• Security and delivery information: our hosting and verification providers may process network addresses, browser or device characteristics, request logs and interaction signals. Our enquiry service uses short-lived, keyed hashes of network and email identifiers for rate limiting; it does not add your raw IP address to the enquiry record.

Please provide only information needed for your enquiry. Do not submit passwords, payment card details, identity documents, health information or other sensitive personal data. If you provide somebody else’s details, make sure you have authority to do so and let them know about this notice.

3. How we use information

We use information to assess and answer enquiries, arrange requested introductions or proposals, maintain business communications, protect the website against abuse, resolve disputes and meet legal obligations. We will limit collection and use to information reasonably needed for those purposes.

We do not sell personal information submitted through this website or share it for targeted advertising. Sending an enquiry does not subscribe you to a marketing list. We will obtain separate permission before sending optional promotional communications where permission is required, and provide a straightforward way to stop them.

Anti-abuse checks can automatically reject a submission. We do not use enquiry information for solely automated decisions that produce legal or similarly significant effects on you.

4. Permission and lawful grounds

Where applicable law requires a legal basis, we rely on responding to steps you request before a contract, performing an agreed engagement, legitimate interests in operating and securing our business where those interests do not override your rights, legal obligations, or consent where required. You can withdraw consent for optional processing at any time. Withdrawal does not affect earlier lawful processing or information we must retain on another lawful basis. We will not make unrelated marketing consent a condition of answering a business enquiry.

5. Who may receive information

Access is limited to authorised people handling your request and providers supporting hosting, storage, security and business communications. We use Google Firebase for website hosting, backend processing and enquiry storage, and Cloudflare Turnstile for security verification. If enquiry-notification email is enabled, the configured delivery provider and authorised recipient also process the notification.

We will require appropriate confidentiality, security and data-use protections from providers handling information on our behalf. We share enquiry details with prospective business partners only where needed for an introduction or activity you request or approve. Other disclosures may be necessary to comply with law, protect legal rights, prevent fraud or support a business reorganisation with appropriate safeguards and notices.

Providers may also process technical information for their own lawful security or service purposes as explained in their notices. See Google/Firebase privacy information and Cloudflare’s Privacy Policy.

6. International processing

Our website enquiry database is hosted in the United States. Our operations, communications and providers may involve processing in other countries whose laws differ from yours. Where the law requires transfer safeguards, we will use appropriate contractual or other recognised protections rather than treating use of the website as a blanket waiver of your rights. You may ask us about the safeguards relevant to your information.

7. Security commitments

We will apply reasonable technical and organisational safeguards proportionate to the information and risks involved. These include encrypted transmission, protected cloud storage, access limited to people who need it, appropriate authentication, confidentiality obligations, access reviews and guidance for people handling enquiries.

We will investigate suspected security incidents, take appropriate containment and recovery steps, and notify affected people or authorities when required by applicable law. No internet service can guarantee absolute security. Please do not use this form to send credentials or highly sensitive documents.

8. Retention and deletion

Our policy is to delete or anonymise inactive enquiry information within 24 months after the last substantive contact, unless it remains necessary for an active engagement, compliance obligation, dispute, legal claim or justified security purpose. We will review retained information regularly, document reasons for longer retention and restrict its use to the reason it is being kept.

Abuse-prevention counters have short expiry periods and are scheduled for cleanup; provider processing means physical deletion may occur later than expiry. Technical logs and any backup copies follow the relevant provider lifecycle and applicable obligations. Where a deletion request applies, we will remove information from active use and protect any remaining copies until their permitted retention ends.

9. Browser storage and security tools

This website does not initialise Firebase Analytics, advertising trackers or a marketing profile. Form drafts remain in the current page’s memory rather than browser local storage. Cloudflare Turnstile processes technical signals to check submissions and may use browser capabilities needed for verification. Your browser settings can limit storage or scripts, but doing so may prevent the enquiry form from working. We will provide any notice and choices required before introducing optional analytics, advertising or other non-essential tracking.

10. Your choices and privacy requests

We will provide a practical way to request access to your personal information, a copy of it, correction of inaccuracies, deletion, or an end to optional communications. You may also ask us to restrict or stop particular processing or provide a portable copy; we will honour applicable rights and explain any lawful limits. Additional rights may apply in your location, and nothing in this notice takes them away.

• Use our privacy request form. Describe what you would like us to do and include an enquiry reference if you have one.
• We may request proportionate information to verify identity or an authorised representative’s authority. Do not upload identity documents through the general form.
• We will respond within 30 days, or sooner where the law requires. If a lawful extension is necessary, we will explain the reason and revised deadline within the initial response period.
• If we cannot fulfil a request, we will explain the reason, any applicable exception and how to ask for review. We will not penalise you for exercising privacy rights.

To appeal our response, use the same form and begin your message with “Privacy appeal”. We will review the decision and explain the outcome. You may also complain to a competent privacy or consumer-protection authority, including the Iowa Attorney General where applicable; you do not have to abandon that right to contact us first.

11. Children’s information

This is a business-facing website, not a service directed to children. The enquiry form is intended for adults acting for themselves or an organisation. Please do not submit a child’s personal information. If you believe we have received it, contact us through the privacy request form so we can investigate and delete it where appropriate or required by law.

12. Changes and accountability

We will publish policy changes with a revised version identifier and provide additional notice or seek fresh consent where the law requires. We will not treat a later revision as permission to disregard earlier commitments or use information for an incompatible new purpose. Questions about this notice, our handling of information or these commitments can be sent through the privacy request form.