Slaeb is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights — in line with GDPR, UK GDPR, and applicable regulations in France, the Caribbean, the United States, and Asia.
Slaeb is a SaaS development company registered at Immeuble EQUINOXES, 12 rue des Arts et Métiers, Lot Dillon Stade, Fort-de-France 97200, Martinique, with associated entities serving customers in France, the United Kingdom, the United States, the Caribbean and Asia.
For data protection law, Slaeb acts as a data controller for personal data we collect directly from website visitors, prospects and account holders. We act as a data processor for personal data that our customers upload into the platform about their own employees, clients or contacts.
We only collect the personal data we need to deliver our service. We never sell your data.
Account data: name, email, password (hashed), phone number, job title, company name
Billing data: billing address, VAT number, payment method (processed by our payment provider — we never store full card numbers)
Communications: messages you send through our contact forms, support tickets, demo bookings or chat
When you use Slaeb to manage HR, CRM, QHSE or business operations, your organisation may upload personal data about employees, clients or contacts (the “Customer Data”). For this data, your organisation is the controller — we process it on their behalf under our Data Processing Agreement.
We keep personal data only as long as we need it for the purpose it was collected, plus any period required by law.
| Purpose | What we use | Lawful basis |
|---|---|---|
| Create and manage your account | Account data, billing data | Contract |
| Deliver the platform and its modules | Account data, usage data | Contract |
| Process payments and invoicing | Billing data | Contract / legal obligation |
| Customer support and onboarding | Account data, communications | Contract / legitimate interest |
| Improve our product and detect bugs | Usage data, technical data | Legitimate interest |
| Send service emails (security, billing) | Account data | Contract |
| Send marketing communications | Account data | Consent (opt-in) |
| Comply with legal obligations | All categories as required | Legal obligation |
| Prevent fraud and abuse | Technical data, usage data | Legitimate interest |
Under the EU and UK GDPR, we rely on one of the following lawful bases for every processing activity:
Contract — we need your data to provide the service you signed up for
Legitimate interest — to operate, secure and improve our business (balanced against your rights)
Consent— for marketing emails and non-essential cookies (you can withdraw at any time)
Legal obligation — to comply with tax, accounting and other applicable laws
For users in California, we comply with the CCPA/CPRA. For users in the Caribbean and Asia, we apply the highest applicable local standard alongside our global baseline.
We share personal data only with vetted third parties who help us run Slaeb. Every sub-processor is contractually bound to the same data-protection standards we apply ourselves.
| Category | Examples | Location |
|---|---|---|
| Cloud hosting | Microsoft Azure (platform), GoDaddy (website) | EU |
| Payment processing | Stripe | EU / US (SCCs) |
| AI features | Microsoft Azure OpenAI for in-product AI | EU |
| Analytics | Google Analytics (website only, with your consent) | EU / US (SCCs + DPF) |
| Messaging & telephony | Twilio and/or Telnyx (where enabled) | EU / US (SCCs) |
| Customer support | EU |
We will also disclose personal data if legally required to do so (court order, regulatory request), or to protect the safety, rights or property of Slaeb, our users or the public.
An up-to-date list of sub-processors is available on request from info@slaeb.com.
Slaeb operates across five regions: Caribbean, France, the UK, the US and Asia. When we transfer personal data outside the EU/EEA or the UK, we use one of the following safeguards:
You can request a copy of the safeguards in place for any specific transfer by contacting our DPO.
We keep personal data only as long as we need it for the purpose it was collected, plus any period required by law.
We take security seriously and apply industry-standard technical and organisational measures, including:
Breach notification — If a personal data breach is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware, as required by GDPR.
Whatever country you are in, you have the following rights over your personal data. We respond to all requests within one month (sometimes extendable to three).
Get a copy of the personal data we hold about you.
Correct any data that is inaccurate or incomplete.
Ask us to delete your data ("right to be forgotten").
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interest or direct marketing.
Request human review of decisions made by AI features.
Lodge a complaint with your local data protection authority.
To exercise any of these rights, email info@slaeb.com. We may ask you to verify your identity before responding.
We use cookies to operate the platform, remember your preferences, measure performance and (with your consent) personalise marketing. For the full list of cookies we use, their purposes and how to manage them, see our Cookie Policy.
Slaeb is a B2B platform designed for business users. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this policy from time to time to reflect changes in our practice, the law, or our service. We will always post the new version on this page with an updated “Last updated” date, and notify account holders by email if the change is significant.
For any question, request or complaint relating to this policy or your personal data, our Data Protection Officer is the first point of contact.
We aim to respond to every privacy request within 30 days.
Email
