eSalestab

Privacy

Privacy policy

Last updated: 10 October 2026.

This policy explains how Paramount Direct Ltd, trading as eSalestab, handles personal data in connection with our marketing website and our business software services.

1. Who we are

The controller of personal data described in this policy is:

Company
Paramount Direct Ltd, trading as eSalestab
Registration
England and Wales, company number 07482131
Privacy / support email
tech@esalestab.co.uk
Published business contact details
35 Clarke Crescent, Altrincham, WA15 8LQ
07557 768059

Our marketing website is https://esalestab.co.uk/. Customer ordering websites and apps are separate products configured for each business customer; they are not a shop on this domain.

2. What this policy covers

This policy covers:

  • Visitors to the eSalestab marketing website at esalestab.co.uk.
  • People who contact us about eSalestab (for example by email).
  • Business customers and authorised users of eSalestab software services (SaaS), at a high level.
  • Where a customer connects a Google account to an eSalestab Marketing Dashboard feature, the Google-related practices described in section 6.

It does not replace a signed customer contract, data processing agreement (DPA), or order form. If a signed agreement says something different about processing for that customer, that agreement prevails for that relationship.

3. Marketing website — what we collect

3.1 Information you send us

The contact page provides a form that opens your own email application. As implemented on this marketing site, that form addresses the message to a general enquiry mailbox used by the site’s mailto behaviour (info@esalestab.com). That address is described here only because it is how the form works; it is not our privacy or support contact. For privacy requests, use tech@esalestab.co.uk.

The form does not upload or store the enquiry on the website’s servers. If you email us, we process the content of your message and your contact details to respond.

Typical fields you may choose to include: name, email address, phone number, company name, and your message.

3.2 Technical information

Like most websites, our hosting environment may automatically process standard server logs (for example IP address, date/time, requested URL, and user agent). This marketing site does not currently run a first-party analytics product. If that changes, we will update this policy.

3.3 Third-party resources loaded by the marketing site

Pages load:

  • Google Fonts (fonts.googleapis.com / fonts.gstatic.com) to display site typography.
  • Amazon S3 (eu-west-2) to serve the eSalestab logo image.

Those providers may process technical data (such as IP address) under their own terms when your browser requests those resources.

4. Cookies and similar technologies

As of the last review of this marketing site:

  • It does not set its own analytics or advertising cookies via first-party JavaScript.
  • It does not include Google Analytics, Google Tag Manager, advertising pixels, or a cookie consent banner.
  • It uses local JavaScript only for navigation and to open a mailto enquiry.

Your browser may still store cookies or local data associated with third-party font or CDN requests. You can block or delete cookies in your browser settings; blocking third-party resources may affect how fonts or images appear.

5. SaaS product and account data (overview)

eSalestab is a cloud commerce backend for wholesale and retail businesses (B2B). When a business customer uses the product, we process personal data needed to provide the service. Depending on the modules used, that may include:

  • Account and login details for authorised users (for example name, email, and credentials).
  • Business contact details for customers, suppliers, and staff that the business customer enters into the system.
  • Order, inventory, invoicing, and related trading records the customer stores in the system.
  • Support communications with us.

For data that a business customer uploads or generates in the product about their own customers or staff, that business customer is typically the controller, and Paramount Direct Ltd acts as a processor under the customer’s instructions and contract — except where we determine purposes independently (for example our own billing, security, or marketing contacts), in which case we are a controller for that processing.

Hosting locations, sub-processors, and detailed retention schedules for SaaS customers are set out in the relevant customer contract or data processing terms where those apply.

6. eSalestab Marketing Dashboard and Google account access

If and when a customer uses an eSalestab Marketing Dashboard feature that connects to Google, the following applies:

  • Access to Google data is granted through Google’s own consent screen. We do not ask for your Google password.
  • Authorisation tokens may be stored so the connection can continue to work until it is revoked or replaced.
  • Google user data obtained through that connection is used only to provide the Marketing Dashboard features for that customer’s account.
  • We do not sell Google user data. We do not use it for advertising unrelated to providing those dashboard features. We do not use it to train general-purpose artificial intelligence models.
  • You can revoke access in your Google Account permissions. After revocation, we stop using that authorisation once the change is detected, and we no longer call Google APIs with those credentials.
  • Google’s own terms and privacy policy also apply to Google’s processing of data in Google’s systems: https://policies.google.com/privacy.

The specific Google API services and OAuth scopes requested for a given connection are shown on Google’s consent screen at the time of connection. Detailed scope lists and storage practices for the product integration are maintained with the product documentation as that integration is operated and verified. This policy does not claim that Google OAuth verification for any particular set of scopes is complete.

7. Lawful bases (UK GDPR)

Depending on the activity, we rely on one or more of:

  • Contract — to provide services a business customer has asked for.
  • Legitimate interests — for example securing our systems, operating the marketing site, and responding to business enquiries, balanced against your rights.
  • Legal obligation — where the law requires us to keep or disclose information.
  • Consent — where we ask for it (for example optional marketing emails, if offered).

8. Sharing personal data

We do not sell personal data. We may share personal data with:

  • Service providers who help us run the website or product (for example hosting, email, and infrastructure), under appropriate contracts.
  • Professional advisers where needed.
  • Authorities when required by law.
  • A buyer or successor in a business transfer, under suitable protections.

Specific sub-processor lists for SaaS customers are set out in the customer contract or DPA where those apply.

9. International transfers

Some providers used by the marketing site (for example Google Fonts requests from your browser, or Amazon S3 for the logo) may involve processing outside the UK. Where we transfer personal data internationally as controller, we use an appropriate safeguard recognised under UK data protection law. Transfers that form part of a SaaS customer relationship are addressed in that customer’s contract or DPA where applicable.

10. Retention

We keep personal data only as long as needed for the purposes described in this policy, including legal, accounting, and dispute needs. When it is no longer needed, we delete or anonymise it where practicable, subject to backups and legal retention requirements.

11. Security

We take appropriate technical and organisational measures to protect personal data, taking into account the nature of the data and the risks involved.

12. Your rights

Under UK data protection law, you may have rights to access, rectify, erase, restrict or object to certain processing, and to data portability, depending on the lawful basis and context. Where we act as a processor for a business customer, requests about that customer’s data may need to go to that customer.

To exercise rights where we are the controller, email tech@esalestab.co.uk.

You can complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/.

13. Children

Our marketing site and SaaS offerings are aimed at businesses. We do not knowingly collect personal data from children for these services.

14. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will change when we do.

15. Contact

Privacy and technical support: tech@esalestab.co.uk.

Published business contact details: 35 Clarke Crescent, Altrincham, WA15 8LQ · 07557 768059.

See also the contact page and our Terms of service.