Privacy policy
Last updated 13 September 2026. This policy explains what we collect, why we hold it, and what you can ask us to do with it.
1. Who we are
Sendslay operates the email marketing platform at sendslay.com. For data you upload about your own subscribers, you are the data controller and we act as your processor — we handle that data on your instructions and for no other purpose.
2. What we collect
Account data
Your name, email address, hashed password, organisation name, billing details and the address you provide for inclusion in your campaigns.
Subscriber data you upload
Email addresses and any fields you choose to store against them, along with the consent record you supply on import.
Sending data
The campaigns you send and who they were sent to, the unsubscribes recorded against them, and whether a recipient opened a message or clicked a link in it. Opens are measured with a tracking pixel and clicks by routing the link through our domain. At the moment of an open or a click we inspect the recipient's IP address and browser user agent only to tell a genuine open from an automated scanner, and we store neither: what we keep is the fact of the open or click, the campaign, the subscriber and the link.
Technical data
Log data such as IP address, browser type and pages visited, plus the cookies described below.
3. Why we hold it
- To provide the service and send the campaigns you create.
- To protect deliverability — monitoring bounce and complaint rates, maintaining suppression lists, and investigating abuse.
- To bill you and keep the records tax law requires.
- To secure the platform, including detecting and preventing fraud and unauthorised access.
We do not sell personal data, and we do not use your subscriber lists for our own marketing.
4. Who we share it with
We use a small number of processors, each bound by contract to handle data only as instructed:
- Amazon Web Services — email delivery and infrastructure.
- Our database and hosting providers — application data and files.
- A payment processor, once paid plans launch. We will not store card numbers ourselves. No payments are processed today.
- Error monitoring providers — diagnostics.
We disclose data to authorities only where we are legally required to, and we tell you unless the law prevents us.
5. How long we keep it
- Account data — for as long as your account is open.
- Subscriber and campaign data — until you delete it, or 90 days after your account closes.
- Suppression records — retained indefinitely. Deleting them would let a previously unsubscribed or complaining address be mailed again.
- Billing records — as long as tax and accounting law requires.
6. Cookies
We use only the cookies necessary to keep you signed in and to keep the service secure. They cannot be turned off without breaking sign-in. We do not set advertising or analytics cookies, and there are no third-party trackers on this site.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. Write to privacy@sendslay.com and we will respond within 30 days.
If your request concerns data held by one of our customers — for example you received a campaign and want to be removed — use the unsubscribe link in that message, or contact the sender directly. We will pass your request on if you contact us instead.
8. Security
Data is encrypted in transit and at rest, passwords are hashed, and access to production systems is restricted and logged. No system is perfectly secure, but we will notify you and the relevant regulator without undue delay if a breach affects your data.
9. International transfers
Our infrastructure is hosted in the United States. Where we transfer personal data out of your region we rely on the safeguards permitted by applicable law, including standard contractual clauses.
10. Changes
We will post any change on this page and update the date above. For material changes we will email account holders before the change takes effect.
Questions: privacy@sendslay.com