Privacy policy
Last updated: 27 August 2026
This policy explains which personal data PropelSaaS processes, why, on what legal basis, and which rights you can exercise. It applies to this website and to the business correspondence arising from it.
1. Data controller
The data controller is PROPELSAAS LTD, a company registered in England and Wales under number 17421667, whose registered office is at Office 20779, 182-184 High Street North, East Ham, London, E6 2JA, United Kingdom.
Because PROPELSAAS LTD is established in the United Kingdom while offering its services to people located in the European Union, the processing described here falls under both the UK GDPR and the EU GDPR (Article 3(2)).
For any question relating to data protection: nawfal@propelsaas.com.
2. Data processed and purposes
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email address, phone number, company, content of your message | Responding to your enquiry and managing the business relationship | Pre-contractual steps and legitimate interest in responding to business enquiries | 3 years from the last contact |
| Billing data and accounting records | Performing the contract, invoicing, accounting and tax obligations | Performance of the contract and legal obligation | Applicable statutory retention period |
| Technical server logs: IP address, timestamp, page requested, user agent | Security, abuse prevention, fault diagnosis | Legitimate interest in securing and maintaining the service | Automatic rotation, 30 days maximum |
3. Cookies and analytics
This site sets no tracking, advertising or analytics cookies. No profiling is carried out, and no consent banner is therefore required. Your language choice is stored in your browser's local storage; that information never leaves your device and is not transmitted to us.
Web fonts are loaded from Google Fonts, which transmits your IP address to Google Ireland Limited for the sole purpose of delivering the font files.
4. Recipients and sub-processors
Your data is never sold, rented or traded. It is accessible to authorised PropelSaaS personnel and to the following providers, acting as sub-processors:
- Infrastructure host — Hetzner Online GmbH (Germany), servers located in Nuremberg, in the European Union.
- Email delivery — Google Ireland Limited (Google Workspace), for receiving and sending correspondence addressed to propelsaas.com mailboxes.
- AI model providers — used only within customer applications, under agreements prohibiting training on the data submitted. The named list is disclosed to each customer before any processing begins.
5. International transfers
Our application servers and databases are located in the European Union, in Germany. As PROPELSAAS LTD is established in the United Kingdom, access to that data from the United Kingdom constitutes a transfer: it relies on the adequacy decision adopted by the European Commission in respect of the United Kingdom.
Where a sub-processor entails a transfer to another third country, that transfer is governed by the European Commission's standard contractual clauses, their UK equivalent (the ICO addendum), or an adequacy decision. Details are available on request.
6. Data processed on behalf of our customers
When we operate an application for a customer, that customer is the controller and PropelSaaS acts as a processor within the meaning of Article 28 of the EU and UK GDPR, under a written agreement. We use such data solely to provide the agreed service; it is never used to train or fine-tune a model. If you are an end user of one of these applications, please direct your requests to the organisation that gave you access.
7. Security
We apply proportionate technical and organisational measures: encrypted communications, named access limited to what is strictly necessary, daily backups with retention, access logging and environment separation. No measure guarantees absolute security; in the event of a breach posing a risk to your rights, we notify the supervisory authority and the individuals concerned within the time limits set by the GDPR.
8. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to give instructions on what happens to it after your death.
To exercise these rights, write to nawfal@propelsaas.com. We respond within one month. You may also lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom, or with the competent supervisory authority in your EU member state.
9. Changes
This policy may be updated. The date of the last update appears at the top of the page. In the event of a material change, customers under contract are informed directly.