Privacy Policy
The short version
- We only collect what you give us when you register interest, plus the minimum technical data needed to run and protect the website.
- We only email you if you've ticked the box to say we can, and every email tells you how to unsubscribe.
- We don't use advertising or tracking cookies, and we don't sell or share your data for marketing.
- You can ask to see, correct or delete your data at any time by emailing support@centrecrm.com.
1. Who we are
This website, centrecrm.com, is run by Centre CRM Limited, a company registered in England and Wales with company number 07801751. Our registered office is 82a James Carter Road, Mildenhall, Bury St. Edmunds, Suffolk, IP28 7DE.
Centre CRM Limited is the controller of the personal data described in this policy. This means we decide how and why it is used, and we're responsible for protecting it. We are registered with the Information Commissioner's Office (ICO) under registration number A1052727.
If you have any questions about this policy or how we use your data, contact us at support@centrecrm.com or write to us at our registered office.
2. What this policy covers
This policy covers personal data we collect through the centrecrm.com website, including the register-interest and early-access forms, and the emails we send you as a result.
It does not cover the CentreCRM application. If your firm uses CentreCRM, including the existing application at app.centrecrm.com, the data your firm stores in it is covered by your firm's agreement with us, including our data processing terms. In that relationship your firm is the controller and we act as its processor. If your firm is a customer of the existing application, see our Terms and Conditions, our GDPR and data processing page and our customer privacy policy.
3. The personal data we collect
Information you give us
When you register interest or apply for early access, we collect:
- your email address
- your name and firm name, if you complete the early-access form
- your firm's size and, if you choose to tell us, the software you currently use
- a record of your consent to receive emails: the date and time, the wording you agreed to, and the form you used
- how you found us, if the link you followed included a campaign tag (for example, that you came from a particular email or social media post)
If you email us, we'll also hold your email and our reply.
Information collected automatically
- Security and server data. When you visit the site, our hosting and security provider processes your IP address, browser type and the pages you request. This is used to deliver the site, protect it from attacks, and stop automated spam on our forms.
- Website statistics. We use Cloudflare Web Analytics to count visits and see which pages are used. It does not use cookies, does not store your IP address and does not fingerprint your device. We only see totals.
We don't collect special category data (such as health information) and ask you not to send us any.
4. How we use your data and our legal basis
UK data protection law requires us to have a lawful basis for each way we use your data.
| What we do | Lawful basis |
|---|---|
| Email you news about the CentreCRM launch and invitations to early access | Consent. You can withdraw it at any time by clicking "unsubscribe" or emailing us. |
| Contact you about early access and arrange demos if you apply for it | Consent, given when you submit the early-access form |
| Keep a record of your consent and of any unsubscribe request | Legal obligation, to show we have consent and to make sure we don't email you after you opt out |
| Understand which firms are interested and how they found us, to plan the launch | Legitimate interests, in developing our product and marketing in a way you'd reasonably expect |
| Reply to emails you send us | Legitimate interests, in responding to enquiries |
| Keep the website secure and block spam and abuse | Legitimate interests, in protecting our website and the people who use it |
Our emails do not contain tracking pixels, so we don't record whether you open them.
We do not make decisions about you using solely automated processing, and we do not use your data for profiling.
5. Who we share your data with
We never sell your data or share it with other organisations for their own marketing. We use a small number of trusted service providers, who act as our processors. They can only use your data on our instructions and must keep it secure.
| Provider | What they do for us | Where data is processed |
|---|---|---|
| Stores our sign-up list and handles our email | Global, including the United States | |
| Cloudflare | Hosting, security, spam protection on our forms (Turnstile) and anonymous website statistics (Web Analytics) | Global network, including the United States |
| Resend | Sends our emails to you | European Union (Ireland), with the provider based in the United States |
We may also share data if the law requires us to, for example in response to a valid request from a regulator or court, or to protect our rights. If our business is sold or restructured, your data may transfer to the new owner, who must use it in line with this policy.
6. International transfers
Some of our providers process data outside the UK. Where data goes to the European Union, the UK government has confirmed that EU data protection law gives adequate protection. Where it goes to the United States, we rely on the UK Extension to the EU–US Data Privacy Framework for providers certified under it. For any other transfer, we use the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for more detail about these safeguards.
7. How long we keep your data
- Mailing list data: until you unsubscribe or ask us to delete it, or 12 months after CentreCRM's public launch if you haven't become a customer, whichever is sooner.
- Unsubscribe records: we keep your email address on a suppression list after you unsubscribe, for as long as we send marketing emails, so that we never email you by mistake.
- Consent records: for as long as we hold your data, and up to two years afterwards, so we can show your consent was valid.
- Emails you send us: up to two years after our last contact, unless they lead to a customer relationship.
- Security logs: for up to 30 days.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you
- correct data that is wrong or incomplete
- delete your data
- restrict how we use your data
- object to us using your data on the basis of legitimate interests. You can object to direct marketing at any time, and we will always stop.
- data portability: receive the data you gave us in a common electronic format
- withdraw consent at any time. This doesn't affect anything we did before you withdrew it.
To use any of these rights, email support@centrecrm.com. It's free, and we'll respond within one month. We may need to confirm your identity first.
9. Cookies
We don't use advertising, analytics or other non-essential cookies, so you won't see a cookie banner. Our security provider, Cloudflare, may set cookies that are strictly necessary to protect the site and our forms from bots. These don't track you across other websites and don't require consent.
10. Keeping your data secure
All data sent to and from this website is encrypted. Access to our mailing list is limited to the people who need it and protected by multi-factor authentication. Our providers are required to keep your data secure.
11. Children
This website is for businesses and professionals. It isn't intended for anyone under 18, and we don't knowingly collect their data.
12. Complaints
If you're unhappy with how we've handled your data, please contact us first at support@centrecrm.com and we'll try to put it right.
You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.
13. Changes to this policy
We'll update this policy when the way we use data changes, for example when CentreCRM launches. The date at the top shows when it last changed. If a change materially affects how we use your data, we'll tell you by email before it takes effect.