Privacy Policy - GatherCRM

Privacy Policy

Privacy Policy: GatherCRM

Last Updated: April 27, 2026 Operated by: Giraffe LTD (“we”, “us”, “our”)


1. Introduction

GatherCRM is a service provided by Giraffe LTD. We provide a CRM platform for businesses to manage their client and entity data. We are committed to protecting the privacy of both our direct customers (the “User”) and the individuals whose data is stored within the platform (the “End Data”).


2. Data We Collect

  • Account Data: Name, business email, billing address, and payment information (processed securely via Stripe/GoCardless).

  • Operational Data: IP addresses, login timestamps, and browser types for security and troubleshooting.

  • Entity Data: Information you input about your clients and their associated entities. We act as a Data Processor for this information; you remain the Data Controller.


3. How We Use Your Data

We use your data to:

  • Provide and maintain the GatherCRM service.

  • Process payments and issue VAT invoices via Xero.

  • Communicate system updates or support responses.

  • Monitor for fraudulent activity or security breaches.


4. Legal Basis for Processing

Under the UK GDPR and the Data (Use and Access) Act 2025/26, we rely on:

  • Contractual Necessity: To provide the service you’ve paid for.

  • Legal Obligation: For tax and accounting purposes (via Giraffe LTD).

  • Legitimate Interests: To secure our platform and improve our software features.


5. Data Sharing and Third Parties

We do not sell your data. We only share data with essential “Sub-processors” to run the service:

  • Infrastructure: UK/EU based nodes.

  • Payments: Stripe and GoCardless.

  • Accounting: Xero.

  • Communications: [Postmark/SendGrid/Mailgun] for transactional emails.

6. Data Retention

  • Account Data: Kept for the duration of your subscription plus 7 years for UK tax compliance.

  • Entity Data: Deleted within 30 days of account cancellation, or immediately upon your request.

7. Your Rights & Complaints

You have the right to access, correct, or delete your personal data. Complaints: As per 2026 ICO guidance, we have a formal process for data complaints. Please email support@gathercrm.co.uk and we will acknowledge your request within 30 days. You also have the right to complain to the Information Commissioner’s Office (ICO).

8. Contact Us

Giraffe LTD Registered Office: Unit 14, MK Business Centre, MK14 6GD, Email: support@gathercrm.co.uk