Privacy Policy

This Privacy Policy explains how Sable Desk ("we", "us") collects, uses, and shares personal information when you use this website and the services offered on it. Questions about this document can be sent to Sable Desk via Reeve <noreply@hi.mindfortress.meetreeve.com>.

Information we collect

Account information. When you create an account or sign in, we receive the information needed to operate your account, such as your name and email address, through our sign-in provider.

Transactional information. If you place an order, make a booking, or contact us, we collect the details needed to fulfil and support that transaction, such as what you ordered, booking details, and the messages you send us.

Usage information. Depending on your consent choices (see our Cookie Policy and the regional model below), we collect information about how the website is used: pages visited, actions taken, and the device and browser used. Our servers also keep short-lived technical logs (such as IP address and request details) for security and reliability.

How consent works by region

We adjust cookie and tracking behaviour to where you are visiting from.

If you visit from the European Union, the European Economic Area, or the United Kingdom, or from a location we cannot identify, we use an opt-in model: analytics and marketing technologies stay off until you grant them in the cookie banner. Only strictly necessary technologies run before that choice.

If you visit from the United States (including California), we use an opt-out model, as permitted by US state privacy laws such as the CCPA/CPRA: analytics and marketing technologies may be active by default, and you can turn them off at any time using the cookie banner's preferences ("Do Not Sell or Share My Personal Information"). We honor the Global Privacy Control (GPC) browser signal as a valid opt-out: when your browser sends it, analytics and marketing are disabled without any further action from you. Session replay (recordings of how a page is used) never runs unless you have explicitly granted the analytics category, in any region.

How we use information

We use personal information to provide and operate the services, to process transactions, to communicate with you about your account and purchases, to secure and debug the website, to comply with legal obligations, and, subject to your consent choices, to understand usage and improve the product and our marketing.

Legal bases (EU/EEA/UK visitors)

Where the GDPR or UK GDPR applies, we process personal information on these legal bases: performance of a contract (operating your account and fulfilling transactions), consent (analytics and marketing technologies, which you can withdraw at any time), legitimate interests (security, fraud prevention, and service reliability), and legal obligation (records we must keep by law).

Sharing

We share personal information with service providers who operate parts of the service on our behalf: hosting and infrastructure, authentication, payment processing where applicable, communications delivery, and the analytics and marketing providers described in the Cookie Policy. This website runs on the Reeve platform (meetreeve.com), which processes service data on our behalf as a provider. We do not sell personal information for money. Where US state law treats sharing for cross-context behavioural advertising as a "sale" or "share", the cookie banner's opt-out and the GPC signal are how you exercise your right to opt out.

International transfers

Our service providers may process personal information in countries other than yours, including the United States. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.

Retention

We keep personal information for as long as needed for the purposes above: account data for the life of the account, transactional records as required by law, and technical logs for a short rolling window. Consent records are retained as evidence of your choices.

Your rights

If you are in the EU/EEA/UK, you have the right to:

• access, correct, delete, and receive a copy of your personal information;
• restrict or object to processing;
• withdraw consent at any time;
• lodge a complaint with your supervisory authority.

If you are a resident of California or another US state with a consumer privacy law, you have the right to:

• know what personal information we collect;
• delete it and correct it;
• opt out of "sale" or "sharing" of personal information (we honor Global Privacy Control signals as an opt-out).

We do not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us using the details at the top of this policy.

Children

This website is not directed to children under 16, and we do not knowingly collect personal information from them.

Changes

When we change this policy, we publish the new version here with a new version date. Material changes may require you to re-confirm your acceptance.