Privacy policy
This policy explains what personal data Sendhaus collects, why, how long it is kept, and what rights you have over it. It covers this website and project correspondence.
Who we are
Sendhaus, Kemp House, 152–160 City Road, London EC1V 2NX, United Kingdom. For any privacy question, contact [email protected].
What we collect
When you contact us we collect what you send: your name, contact handle or address, and the description of your setup. If a project proceeds, we collect the operational details needed to deliver it — bot configuration, channel identifiers and campaign data.
Our web server records standard request logs: IP address, user agent, requested URL, referrer and timestamp, used to operate and secure the site.
What we do not want. Do not send bot tokens, API keys, login codes or passwords in a first message. If credentials are needed later we request them through an appropriate channel and explain exactly what they are used for.
Your subscribers' data
Where we operate a messaging programme on your behalf, your subscribers' data is processed on your instructions and remains yours. We do not reuse it for any other client, we do not build cross-client datasets from it, and we do not retain it after an engagement ends beyond what is needed to hand it back or delete it verifiably.
Why we process it
- To prepare the audit and deliver the work — performance of a contract, or steps taken at your request before one.
- To operate and secure the site — our legitimate interest in keeping it available and free of abuse.
- To meet legal obligations — including retention of records where required.
Who we share it with
Only where it is required to do the work: the platforms an engagement runs on, and service providers who host our systems under contract. We do not sell personal data and do not share it for advertising.
How long we keep it
- Enquiries that do not become projects: deleted within 12 months.
- Project records: retained for 24 months after an engagement closes, for support and dispute resolution.
- Credentials: revoked and deleted as soon as the work requiring them is complete.
- Server logs: 90 days.
Cookies
This site sets no advertising or analytics cookies and runs no third-party trackers. Nothing is stored in your browser beyond what is required to serve the page.
Your rights
Depending on where you live you may have the right to access the data we hold about you, to have it corrected or deleted, to restrict or object to processing, and to receive a portable copy. Email [email protected]; we respond within 30 days.
Changes
Material changes are reflected in the date above, and where a change affects how existing project data is handled we notify affected clients directly rather than relying on this page being re-read.