C CRMit
Log in Book a demo
Legal

Privacy Policy

Last updated: 10 June 2026

1. Who we are

CRMit is an all-in-one CRM and business platform operated by CRMit Limited (“CRMit”, “we”, “us”). We are the data controller for personal data collected through this website. You can reach us at [email protected] or +44 3330 41 31 21.

2. Information we collect

Information you give us

  • Contact & demo enquiries — your name, business name, email, phone number and any message you send via our forms.
  • Correspondence — emails and calls you have with our team.

Information we collect automatically

  • Usage and device data — pages visited, referrer, approximate location, browser and device type.
  • Cookies and similar technologies — see our Cookie Policy.
  • Product analytics & session insights via Google Analytics (through Google Tag Manager) and Hotjar.

If you are a CRMit customer, the personal data you store inside the CRMit application about your own customers is covered by our customer agreement, where you are the controller and CRMit is the processor. This policy covers our public website.

3. How we use your information

  • To respond to your enquiries and arrange demos.
  • To provide, maintain and improve our website and services.
  • To send you service messages and, where you have consented, marketing.
  • To understand how the site is used and improve it.
  • To meet our legal and regulatory obligations.

4. Legal bases (UK GDPR)

  • Consent — analytics/marketing cookies and marketing emails.
  • Legitimate interests — running and securing our website and responding to enquiries.
  • Contract — steps taken at your request before entering an agreement.
  • Legal obligation — where the law requires us to process data.

5. Sharing your information

We never sell your personal data. We share it only with trusted service providers who process it on our behalf, including hosting, payments (Stripe, GoCardless), accounting (Xero), messaging (Twilio), email (Mailchimp), analytics (Google, Hotjar) and similar providers — and where required by law.

6. International transfers

Our website data is hosted in the UK. Some providers may process data outside the UK; where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement.

7. Data retention

We keep personal data only as long as necessary for the purposes above or as required by law, after which it is securely deleted.

8. Security

We use UK data hosting, encryption in transit, role-based access controls and audit trails to protect personal data.

9. Your rights

You have the right to access, correct, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time. To exercise any right, email [email protected]. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

10. Children

Our website and services are not directed at children, and we do not knowingly collect their data.

11. Changes

We may update this policy from time to time. The “last updated” date above reflects the latest version.

12. Contact

Questions about this policy or your data? Email [email protected] or call +44 3330 41 31 21.

This policy is provided as a clear, good-faith template and should be reviewed by your legal adviser before launch to ensure it reflects your exact data practices and obligations.