Your information should be handled with clarity, care and control.

1. Who we are

Saber Intel provides a property intelligence platform that connects property, organisational, document, security, compliance, risk and operational information. Depending on the circumstances, Saber Intel may act as a data controller for information it determines how and why to process, or as a data processor when processing personal data on behalf of a client under their instructions.

Where Saber Intel acts as a processor, the relevant client remains responsible for determining the purposes and lawful basis for that processing, and the processing is governed by the applicable contractual and data-processing arrangements.

2. Information we may collect

The personal data we process depends on how you interact with Saber Intel and how our clients use the platform. It may include:

• name, job title, organisation and professional contact details;
• account, user and authentication information;
• communications with Saber Intel, including enquiries, support requests and demonstration requests;
• information associated with property, supplier, contractor, security, compliance or operational records where individuals are identified;
• documents uploaded to the platform that may contain personal data;
• technical and usage information such as IP address, browser information, device information, timestamps and security logs; and
• other information provided by users or clients in connection with the services.

We seek to collect and process only the personal data reasonably necessary for the relevant purpose.

3. How we use personal data

We may process personal data to:

• provide, administer and support the Saber Intel platform and associated services;
• create and manage user accounts and authorised access;
• respond to enquiries and arrange demonstrations;
• operate property, document, compliance, security and intelligence functionality requested by clients;
• maintain service security, investigate misuse and protect systems and users;
• maintain records necessary for contractual, administrative and legal purposes;
• improve the operation, reliability and usability of our services; and
• meet applicable legal and regulatory obligations.

4. Our lawful bases for processing

Under the UK GDPR, personal data must be processed on an appropriate lawful basis. Depending on the processing activity, Saber Intel may rely on:

• Contract - where processing is necessary to enter into or perform a contract with an individual.
• Legitimate interests - where processing is necessary for a legitimate business or operational purpose and those interests are not overridden by the rights and freedoms of the individual.
• Legal obligation - where processing is necessary to comply with applicable law.
• Consent - where consent is the appropriate lawful basis and has been freely given, specific, informed and unambiguous.

Other lawful bases may apply in specific circumstances where permitted by law. Where special category personal data is processed, an additional condition under data protection law must also apply.

5. When we share personal data

We do not sell personal data. We may share personal data where necessary with authorised service providers, infrastructure providers, professional advisers, client-authorised users or other parties needed to deliver or protect the service.

Where a supplier processes personal data on our behalf, we expect appropriate contractual, confidentiality, security and data-protection safeguards to be in place. We may also disclose information where required by law, regulation, court order or a competent authority.

6. International data transfers

Where personal data is transferred outside the United Kingdom, we take steps to ensure that an appropriate legal mechanism and safeguards are used where required by UK data protection law. These may include an applicable adequacy regulation or approved contractual safeguards.

Where relevant, further information about safeguards applying to a particular service or processing arrangement can be requested from us.

7. How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to meet contractual, legal, regulatory, security and operational requirements.

Retention periods vary according to the type of information, the purpose of processing, client instructions, contractual requirements and applicable legal obligations. When information is no longer required, it is deleted, anonymised or otherwise securely disposed of in accordance with our applicable processes.

8. Security and confidentiality

We use organisational and technical measures intended to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. Access to information is intended to be limited according to role, responsibility and legitimate operational need.

No internet-based service can guarantee absolute security. We therefore treat data protection and security as continuing operational responsibilities and review safeguards as the platform and risk environment develop.

For more information about our security approach, see our Data & Security page.

9. Your data protection rights

Depending on the circumstances and the lawful basis being relied upon, you may have rights under UK data protection law including:

• the right to be informed about how your personal data is used;
• the right to request access to your personal data;
• the right to request correction of inaccurate or incomplete data;
• the right to request erasure in certain circumstances;
• the right to request restriction of processing in certain circumstances;
• the right to object to certain processing;
• the right to data portability where applicable; and
• rights relating to certain forms of automated decision-making.

If Saber Intel is processing your information solely on behalf of one of our clients, we may need to refer your request to that client or assist them in responding.

To exercise a right, contact us at heinojheitzer@sabersecurity.london. We may need to verify your identity before responding.

10. Cookies and website technologies

Our website and services may use cookies or similar technologies for essential functionality, security, session management, preferences and, where applicable, analytics.

Where UK law requires consent for non-essential cookies or similar technologies, those technologies should not be activated until the required consent has been obtained. Browser controls may also allow you to restrict or delete cookies.

11. AI-assisted processing

Saber Intel includes AI-assisted capabilities intended to help authorised users understand connected property information and documents. The use of AI does not remove the need for appropriate access control, lawful processing, human oversight or evidence-based decision-making.

Where personal data is processed through AI-enabled functionality, the same data-protection principles apply. Processing should remain relevant to the authorised purpose, proportionate, secure and subject to the rights and safeguards required by applicable law.

12. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our services, data-processing activities, legal requirements or operational practices. The current version will be published on this page with an updated effective date where appropriate.

13. Contact us and make a complaint

If you have a question about this Privacy Policy, our use of personal data or your data protection rights, please contact:

You also have the right to raise a concern with the UK Information Commissioner's Office (ICO), the independent supervisory authority for data protection in the United Kingdom. You can find information about making a data protection complaint at ico.org.uk.