Privacy Policy

Last updated: 4 July 2026

Elbah Group Limited (“Elbah Group”, “we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard personal data when you visit elbah.group or otherwise interact with us as a prospective or existing client.

Our Sentinel product is operated separately at senti.solutions and has its own privacy policy governing data collected through that platform. This policy does not cover Sentinel’s data processing.

1. Who we are

Elbah Group Limited is a company registered in England & Wales, company number 15108393, with registered office at 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE. We are the data controller for the personal data described in this policy.

Contact: [email protected]

2. What data we collect

Enquiries: when you submit our contact form, we collect your name, email address, service interest, and message content.
Client and account data: if you engage us for custom SaaS development, hosting, or workflow solutions, we may collect billing details, technical/account information, and communications related to the project.
Usage data: when you browse our website, we automatically collect standard technical data such as IP address, browser type, device information, and pages visited, via cookies and analytics tools.

3. How we use your data

To respond to enquiries and provide quotes or proposals
To deliver, host, and support the SaaS platforms, websites, and workflow solutions we build for clients
To manage contracts, billing, and account administration
To maintain the security, performance, and functionality of our website and platforms
To comply with legal and regulatory obligations

4. Legal basis for processing

We process personal data under the UK GDPR on the following bases: your consent (e.g. optional cookies), performance of a contract (e.g. delivering services you’ve engaged us for), and our legitimate interests (e.g. responding to enquiries, securing our systems), and compliance with legal obligations.

5. Cookies

Our website uses cookies to support core functionality and, where enabled, analytics to understand site usage. You can control or disable cookies through your browser settings. Disabling certain cookies may affect site functionality.

6. Sharing your data

We do not sell personal data. We may share data with:

Trusted service providers who support our hosting, infrastructure, email, and analytics (bound by contractual data protection obligations)
Regulators or authorities where required by law
A successor entity in the event of a merger, acquisition, or restructuring

7. International transfers

Where any of our service providers process data outside the UK/EEA, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or adequacy regulations.

8. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or to meet legal, accounting, or reporting requirements, after which it is securely deleted or anonymised.

9. Your rights

Under UK GDPR, you have the right to access, correct, erase, or restrict use of your personal data, to data portability, and to object to certain processing. To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

10. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, consistent with the enterprise-grade security standards we build into our own platforms.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top reflects the most recent revision. Material changes will be reflected here.

12. Contact us

Elbah Group Limited
Company No. 15108393 (England & Wales)
86-90 Paul Street, London, England, United Kingdom, EC2A 4NE
Email: [email protected]