Privacy Policy

Introduction

This Privacy Policy explains how crmexamp Ltd ("we", "us", or "our") collects, uses, and protects your personal information when you visit our website or use our services. We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Data Controller Information

crmexamp Ltd is the data controller for the personal information we collect. Our company is registered in England and Wales with registration number 12345678. Our registered office is located at 99 Manor Road, London EC5E 9RG, Greater London, GB.

Data Collection

We collect personal data that you provide to us directly and information that is automatically collected when you use our website. The data we collect includes:

• Contact Information: Name, email address, phone number, postal address, and company details when you contact us or request our services.
• Communication Data: Information contained in any communications you send to us, including the content of your messages and associated metadata.
• Technical Data: IP address, browser type and version, operating system, referral source, length of visit, page views, and website navigation paths.
• Usage Data: Information about how you use our website, products, and services.
• Marketing Data: Your preferences for receiving marketing communications and your communication preferences.

How We Use Your Information

We use the personal data we collect for the following purposes, based on our legitimate business interests and with your consent where required:

• Service Provision: To provide, operate, and maintain our broker services, respond to your enquiries, and fulfil our contractual obligations.
• Communication: To communicate with you about our services, send administrative information, and respond to your requests and questions.
• Business Development: To understand your needs and interests, improve our services, and develop new products and services.
• Marketing: To send you promotional communications about our services, industry insights, and relevant business opportunities, where you have consented to receive such communications.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Security: To protect our website, services, and users from security threats and fraudulent activities.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: Processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as providing and improving our services, marketing, and ensuring security.
• Consent: Where you have given your explicit consent for specific processing activities, such as marketing communications.
• Legal Obligation: Processing is necessary to comply with our legal obligations.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing

We may share your personal data with the following categories of recipients:

• Service Providers: Third-party companies that provide services on our behalf, such as IT support, payment processing, and marketing services.
• Professional Advisers: Lawyers, accountants, auditors, and other professional advisers who assist us in carrying out our business activities.
• Regulatory Authorities: Government agencies, regulatory bodies, and law enforcement agencies when required by law.
• Business Partners: In connection with potential or actual business transactions, such as mergers, acquisitions, or asset sales.

We ensure that all third parties who process your personal data on our behalf are bound by appropriate confidentiality and security obligations.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer your data to third countries, we ensure that appropriate safeguards are in place to protect your data, such as adequacy decisions, standard contractual clauses, or other approved transfer mechanisms.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention periods depend on the type of data and the purpose for processing:

• Contact and Communication Data: Retained for 7 years after the last contact or end of business relationship.
• Marketing Data: Retained until you withdraw consent or for 3 years from the last engagement.
• Technical and Usage Data: Retained for 2 years for security and analytics purposes.
• Financial and Contract Data: Retained for 7 years to comply with legal and regulatory requirements.

Your Rights

Under the GDPR and UK data protection laws, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to Erasure: You can request that we delete your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we limit the processing of your personal data.
• Right to Data Portability: You can request that we provide your personal data in a structured, commonly used format.
• Right to Object: You can object to the processing of your personal data for direct marketing purposes or based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection.

Children's Privacy

Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

• Email: privacy@crmexamp.com
• Phone: +44 2010096241
• Post: crmexamp Ltd, 99 Manor Road, London EC5E 9RG, Greater London, GB

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters, if you believe that our processing of your personal data violates applicable data protection laws.

Supervisory Authority

If you have concerns about how we handle your personal data, you can contact the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF