Who we are
SendLab is an offering of Enform Pty Ltd (ABN 19 657 432 712). This website and the SendLab platform are operated by Enform Pty Ltd (“SendLab”, “we”, “us”). We’re bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where we process personal data of people in the European Economic Area or the United Kingdom, we also comply with the GDPR and UK GDPR.
What this policy covers
This policy explains how we handle personal information when you:
- visit sendlab.ai or contact us;
- are a customer, prospective customer or partner, or work for one; or
- use the SendLab console or API.
When our customers use SendLab to message their customers, the customer is the controller of that end-user data and we process it on their behalf as a processor, under our customer agreement and data processing terms. If you received a message sent through SendLab, please contact the business that sent it.
Information we collect
Information you give us
- Contact details such as your name, email, phone number, company website and role, and the message you send, when you fill in our contact form or email us.
- What you tell us about your business and messaging needs.
- Account, billing and support information if you become a customer.
Information collected automatically
- Technical data such as IP address, browser, device and pages visited, recorded in server logs for security and operation.
- Analytics data from Google Analytics — only if you accept analytics cookies. See our Cookie Policy.
Information from others
We may receive business contact details from partners, referrers or public sources such as company websites.
How we use it
- To respond to enquiries and provide information you ask for.
- To provide, secure, support and improve the SendLab website and platform.
- To manage customer relationships, billing and our legal obligations.
- To understand how the website is used (with your consent) and improve it.
- To send business updates you’ve asked for. You can unsubscribe at any time.
We don’t sell personal information, and we don’t use it for automated decisions that have legal effects on you.
Legal bases (GDPR)
If the GDPR or UK GDPR applies, we rely on:
- Contract — to provide services you’ve requested or signed up for;
- Legitimate interests — to run, secure and improve our business and respond to enquiries;
- Consent — for analytics cookies and certain marketing, which you can withdraw at any time;
- Legal obligation — where the law requires us to keep or disclose information.
Who we share it with
We share personal information only as needed with:
- service providers who host, operate and support our website and platform (for example cloud hosting, email, analytics and customer support tools);
- telecommunications carriers and messaging partners, to deliver messages our customers send;
- professional advisers, and regulators or law enforcement where required by law; and
- a buyer or successor if our business is sold or restructured.
Our service providers may only use personal information to provide services to us.
Overseas transfers
Some of our service providers are located outside Australia, including in the United States and the European Union. We take reasonable steps to ensure they protect personal information consistently with the Australian Privacy Principles and, where the GDPR applies, use appropriate safeguards such as Standard Contractual Clauses.
How long we keep it
We keep personal information only as long as needed for the purposes above, including to meet legal, tax and accounting requirements, then delete or de-identify it. Customers can configure retention for message content and logs within the platform.
Security
We protect personal information with technical and organisational measures including encryption, access controls and monitoring. No system is completely secure; if a data breach is likely to cause serious harm, we’ll notify affected individuals and regulators as required by law. See our Security page for more.
Your rights
You can ask to access or correct the personal information we hold about you. If the GDPR applies, you may also ask us to delete it, restrict or object to its processing, or provide it in a portable format, and you can withdraw consent at any time. Email [email protected]. We’ll respond within a reasonable time, and within any period required by law.
Complaints
If you have a concern about how we’ve handled your information, contact us first at [email protected] and we’ll work to resolve it. If you’re not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au) or, in the EEA/UK, your local data protection authority.
Changes and contact
We may update this policy from time to time and will post the new version here with a new “last updated” date. Questions? Contact Enform Pty Ltd, or email [email protected].