Privacy Policy
Last updated: 12 August 2026
At Certi CRM Ltd., we respect your privacy and are committed to handling your personal information responsibly, securely and transparently.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, enquire about our services, work with us or otherwise interact with Certi CRM Ltd.
1. Who we are
Certi CRM Ltd. is a UK-based CRM consultancy specialising in CRM strategy, implementation, optimisation, data, automation and customer journey management.
Company: Certi CRM Ltd.
Location: Northampton, United Kingdom
Email: privacy@certi-crm.com
Website: www.certi-crm.com
For the purposes of UK data protection legislation, Certi CRM Ltd. is the data controller for personal information collected through our website and in connection with our own business activities.
2. Information we collect
The information we collect depends on how you interact with us.
This may include:
Name
Job title and professional information
Company name
Business email address
Telephone number
Information submitted through our website contact forms
Information about your organisation, CRM environment and business requirements
Details contained in enquiries, proposals and project communications
Information relating to our client and business relationships
Website usage information, including IP address, browser type, device information and pages visited
Marketing preferences and engagement information
Information you choose to provide when interacting with us through professional platforms such as LinkedIn
We collect information directly from you where you submit it to us, automatically through your use of our website, and from publicly available professional sources where appropriate.
3. How we use your information
We may use personal information to:
Respond to enquiries and requests
Discuss and provide information about our services
Prepare proposals and quotations
Deliver and manage client projects
Communicate with clients, prospects and business contacts
Manage our business relationships
Provide relevant marketing communications
Understand how people use our website
Improve our website, services and customer experience
Maintain the security and performance of our systems
Manage our business administration
Meet legal, regulatory and accounting requirements
We only use personal information for purposes that are compatible with the reason it was collected or where another lawful basis permits us to do so.
4. Our lawful bases for processing
We process personal information using the lawful basis that is appropriate to the purpose of the processing.
Contract
We may process information where it is necessary to enter into or perform a contract with you, including providing our services and managing client projects.
Legitimate interests
We may process information where it is necessary for our legitimate business interests, provided those interests are balanced against your rights and interests.
Our legitimate interests may include managing professional relationships, responding to business enquiries, improving our services, developing our business and maintaining effective business communications.
Consent
We may rely on your consent for specific activities, including certain marketing communications or the use of non-essential cookies and similar technologies.
Where we rely on consent, you can withdraw it at any time.
Legal obligation
We may process information where necessary to comply with a legal or regulatory obligation.
5. Marketing
We may use your business contact information to share relevant information about Certi CRM Ltd., our services, CRM insights, projects and related topics where permitted by applicable law.
Where consent is required, we will obtain it before sending marketing communications.
You can unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us at privacy@certi-crm.com.
6. Our technology and service providers
We use trusted technology providers to operate our website, manage our CRM activities, understand website performance and communicate with our audience.
These currently include:
Squarespace
Our website is hosted and operated using Squarespace. Squarespace may process information such as website usage information, device information and information submitted through website forms in order to provide its services.
HubSpot
We use HubSpot to manage CRM activity, enquiries, customer relationships, marketing activity and, where applicable, communications and customer journeys.
Information provided to us may therefore be stored and processed within HubSpot.
Google Analytics
We use Google Analytics to understand how visitors use our website, including information about website traffic, pages visited and general user behaviour.
Google Analytics may use cookies and similar technologies. Where consent is required, these technologies will only be activated in accordance with your cookie preferences.
We use LinkedIn for professional networking, business development and marketing activity. Where applicable, LinkedIn may process information about interactions with our content, website or advertising.
Mailchimp
We use Mailchimp to manage email marketing communications and subscriber information.
Where you subscribe to our marketing communications, relevant information such as your name, email address, subscription preferences and engagement with our emails may be processed through Mailchimp.
Each provider operates under its own privacy and data protection terms.
7. Cookies and similar technologies
Our website uses cookies and similar technologies.
Some cookies are essential for the website to operate correctly. Other technologies, including analytics and marketing technologies, may help us understand website usage, improve our services and measure marketing activity.
Where required by law, we will ask for your consent before placing or accessing non-essential cookies or similar technologies on your device.
You can manage your cookie preferences through our website's cookie controls.
The use of cookies and similar technologies is subject to our cookie settings and any separate cookie information provided on our website.
8. Who we share information with
We may share personal information with trusted organisations that help us operate our business, including:
Website and technology providers
CRM and marketing platforms
Email and communications providers
Analytics providers
Cloud storage and productivity providers
Professional advisers
Legal and financial advisers
Government, regulatory or law-enforcement bodies where required
Where another organisation processes personal information on our behalf, we take appropriate steps to ensure that suitable contractual, technical and organisational safeguards are in place.
We do not sell personal information.
9. International data transfers
Some of the technology providers we use may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is protected by suitable safeguards under applicable data protection legislation.
These safeguards may include adequacy regulations or decisions, approved contractual safeguards or other lawful transfer mechanisms.
10. How long we keep your information
We retain personal information for as long as it is reasonably required for the purpose for which it was collected.
The length of time varies depending on the type of information and our relationship with you.
For example, we may retain:
Enquiry information for as long as reasonably necessary to manage the enquiry and any resulting relationship
Client and project information for the duration of the relationship and subsequently for appropriate business, legal and accounting purposes
Marketing information while you remain subscribed or until you withdraw consent, where consent is the lawful basis
Website and analytics information in accordance with the relevant platform's retention settings
We regularly review the information we hold and securely delete or anonymise information when it reaches the end of its appropriate retention period.
11. How we protect your information
We use appropriate technical and organisational measures designed to protect personal information from unauthorised access, accidental loss, misuse, alteration or disclosure.
Access to personal information is limited to people and service providers who require it for legitimate business purposes.
12. Your data protection rights
Depending on the circumstances, you may have the right to:
Access the personal information we hold about you
Correct inaccurate or incomplete information
Request deletion of your personal information
Request restriction of certain processing
Object to certain processing, including direct marketing
Request data portability where applicable
Withdraw consent where we rely on consent
These rights are subject to certain legal conditions and exemptions.
To exercise your rights, please contact us at:
We may need to verify your identity before responding to a request.
13. Third-party websites
Our website may contain links to websites, platforms or services operated by other organisations.
Those organisations have their own privacy practices and policies. We encourage you to review their privacy information when visiting their websites.
14. Children's information
Our website and services are designed for business audiences and are not directed towards children.
We do not knowingly collect personal information from children through our website.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, services, technology or applicable legal requirements.
The latest version will always be available on our website and will include the date it was last updated.
16. Contact us
If you have any questions about this Privacy Policy, how we use your personal information or your data protection rights, please contact:
Certi CRM Ltd.
Northampton, United Kingdom
Email: privacy@certi-crm.com
17. Making a complaint
We welcome the opportunity to resolve any concerns about how we handle your personal information.
If you remain concerned about our use of your personal information, you can contact the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.
Information Commissioner's Office
Website: https://ico.org.uk/make-a-complaint/