Privacy policy
Last updated 19 October 2026
This policy explains how we handle personal data when you visit this website or ask us about Claim Inbox. It covers this website only. When a firm uses the Claim Inbox platform, the firm decides what happens to its clients’ data and we handle that data for the firm under our contract with it, so it isn’t covered here.
Who we are
Sabermine Ltd (company number 15426976, registered in England) publishes Claim Inbox and is the controller of the personal data described here. We are registered with the Information Commissioner’s Office (registration ZB690993).
Questions about this policy or your data go to dpo@sabermine.ai.
We may update this policy from time to time. The date under the title shows when it last changed.
What we collect
- Demo request details: the name, firm, work email, role, claims per year and claim type you enter in the Book a demo form.
- Messages: anything you tell us when you email us.
- Technical and usage data: your IP address, browser and device type, the pages you visit, the page that sent you here and the time of each visit.
- Your cookie choice, which we store on your device so we don’t ask again straight away.
We don’t ask for special category data, such as health information, and you shouldn’t put any in the form. We will not sell your data.
This website is for people who work in law firms and claims businesses. It isn’t directed at children, and we don’t knowingly collect their data.
How we collect it
- From you, when you send the demo form or email us.
- Automatically, as you use the site: our servers log each request, and analytics tools record how pages are used. Google Analytics runs only if you accept its cookies.
How we use it and why
The law requires a legal basis for each use of personal data. These are ours.
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your demo request, arranging the demo and following up on your enquiry | Name, firm, email, role, claims per year, claim type | Legitimate interests: answering enquiries from businesses that may become customers |
| Running and securing the website: fixing faults, spotting abuse and blocking spam | Technical data | Legitimate interests: keeping the site working and secure |
| Understanding how the site is used with PostHog, which stores nothing on your device | Technical and usage data | Legitimate interests: improving the site |
| Understanding how the site is used with Google Analytics | Technical and usage data, cookie identifiers | Consent, which you can withdraw at any time in Cookie settings |
| Meeting legal duties and defending legal claims | Any of the above | Legal obligation, or legitimate interests in protecting our legal position |
We use your demo request details to deal with that request. We don’t add you to a newsletter unless you ask, and we don’t share your data with anyone for their own marketing.
Who we share it with
Service providers handle data for us only on our instructions, under contract. They are:
- Amazon Web Services: hosts and delivers the website and sends your demo request to our team by email, using its London region. The form’s server logs are kept for one month. Its access logs, which record the IP address, time and page requested, serve security and troubleshooting.
- PostHog: cookieless analytics on its EU cloud, reached through our own domain.
- Google Analytics: web analytics, only if you accept analytics cookies. We turn off Google signals and advertising features, so the data isn’t used to personalise ads.
We may also share data where the law requires it, for example with a court or regulator, with our professional advisers, or with a buyer if our business is sold.
Transfers outside the UK
Some providers handle data outside the UK. When they do, we make sure it stays protected, either because the destination has a UK adequacy decision or because the provider is bound by the UK’s International Data Transfer Agreement or its Addendum to the EU standard contractual clauses.
How long we keep it
- Demo request details: for as long as we need them to deal with your enquiry and any resulting relationship, and no longer than 26 months after we last had contact with you, unless the law or a contract requires longer.
- Access logs: only as long as security and troubleshooting need them, and no longer than 26 months.
- Google Analytics data: 14 months.
- PostHog data: no longer than 26 months.
- Cookie choice: six months, then we ask again.
We delete or anonymise data when its time is up, or sooner if you ask and we have no reason to keep it.
Keeping it safe
We protect personal data with technical and organisational measures, and only people who need it to do their job can see it. No system is perfectly secure, so if something goes wrong we will tell you and the ICO where the law requires.
Your rights
You have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate or incomplete data corrected;
- ask us to erase your data in certain circumstances;
- object to us using your data where we rely on legitimate interests;
- ask us to restrict how we use your data;
- ask for your data in a portable format, where we use it on the basis of consent or a contract;
- withdraw consent at any time, which doesn’t affect what we did before you withdrew it.
To use any of them, email dpo@sabermine.ai. We may ask you to confirm who you are first, and we don’t usually charge a fee. We aim to reply within one month, and will tell you if a complex request needs longer.
Cookies
Our cookie policy lists the cookies we use and explains how to change your choice.
Links to other websites
This site links to websites we don’t run. We aren’t responsible for their content or how they handle data, so read their policies before you share anything.
Contact and complaints
By email: dpo@sabermine.ai. By post: Sabermine Ltd, 81 Fountain Street, 2nd Floor, Manchester, England, M2 2EE.
If you’re unhappy with how we’ve handled your data, tell us and we will acknowledge your complaint within 30 days and let you know the outcome. You can also complain to the Information Commissioner’s Office at ico.org.uk, though we’d appreciate the chance to put things right first.