1. Introduction

JSBC Labs Ltd (“JSBC Labs”, “we”, “our”, “us”) is a Salesforce consultancy and Software-as-a-Service (SaaS) provider. We are committed to protecting the privacy of our clients, users, and visitors to our website www.jsbclabs.com.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website, consultancy services, or SaaS platforms.

We act as a data controller when providing services directly to clients and as a data processor where we manage data on behalf of our clients using our software.

2. At a Glance

This policy covers:

• What information we collect (personal and technical)

• How we use it (to deliver and improve our services)

• When we share it (only with trusted partners or where legally required)

• How we keep it secure

• Your rights under the UK GDPR and Data Protection Act 2018

By using our website or services, you agree to the practices described in this Privacy Policy.

3. What Data Do We Collect?

Depending on how you interact with JSBC Labs, we may collect:

Personal data:

• Name, email address, phone number, job title, company

• Billing and invoicing details

• Login and account details for our SaaS products

Technical data:

• IP address, browser type, device information

• Usage logs (pages visited, features used, access times)

• Cookies and tracking data (see section on Cookies)

Client project data:

• Data provided to us as part of Salesforce consultancy, configuration, or integrations (processed only for the purposes of delivering agreed services).

We do not knowingly collect data from children under the age of 16.

4. How Do We Use Your Data?

We use personal data to:

• Provide, maintain, and improve our SaaS platforms and consultancy services

• Manage client relationships and contracts

• Provide technical support and respond to enquiries

• Send service-related communications and updates

• Process payments and invoices

• Ensure security and prevent fraud

• Comply with legal and regulatory obligations

We will never use your data for unrelated purposes without your consent.

5. Legal Bases for Processing

We rely on the following legal bases under UK GDPR:

• Contractual necessity – to deliver the services you purchase from us

• Legitimate interests – to improve our services, maintain security, and communicate with clients

• Consent – for optional marketing communications

• Legal obligations – to meet financial, tax, and regulatory requirements

6. Sharing Your Data

We only share your information with:

• Technology partners (such as hosting, analytics, and payment providers)

• Subcontractors engaged to deliver specific services on our behalf

• Regulators or authorities where required by law

All third parties are bound by confidentiality and data protection agreements. We do not sell or rent your data.

7. International Transfers

Some of our partners or SaaS infrastructure providers may be located outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data.

8. Data Security

We take data security seriously and use appropriate organisational, technical, and administrative measures to protect your data against loss, misuse, unauthorised access, disclosure, alteration, and destruction.

However, no system is 100% secure. If we experience a data breach, we will notify you and the relevant regulator in accordance with legal requirements.

9. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law.

For SaaS accounts, data will be retained for the duration of the subscription. Upon termination, data will be securely deleted or returned, unless retention is required by law.

10. Your Rights

Under data protection law, you have the following rights:

• Access to the personal data we hold about you

• Request correction of inaccurate or incomplete data

• Request deletion of your data (“right to be forgotten”)

• Restrict processing of your data

• Data portability

• Object to certain types of processing (e.g., marketing)

• Withdraw consent at any time (for consent-based processing)

To exercise these rights, please email us at hello@jsbclabs.com.

11. Cookies

Like most websites, we use cookies and similar technologies to:

• Enhance your browsing experience

• Collect website analytics

• Store user preferences

You can manage cookies via your browser settings. Please note that disabling cookies may affect website functionality.

12. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites, and we encourage you to review their policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business or legal obligations. Any changes will be posted on this page with an updated “Last Updated” date.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at:

JSBC Labs Ltd
Email: hello@jsbclabs.com

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.