Privacy policy

This policy explains how ACTIVE CRM collects and uses personal data about our websitevisitors, enquirers, customers and the people who work for them, and the rights you have.It does not cover data our customers store in their own CRM accounts; see section 2.

Last updated: 11 October 2026

1. Who we are

ACTIVE CRM is a trading name of Gary Das Ltd, also trading as Systemise & ScaleConsulting, a company registered in England and Wales under number 11072529. Ourregistered office is 4 The Capricorn Centre, Cranes Farm Road, Basildon SS14 3JJ.

We are the controller of the personal data described in this policy. We are registered withthe Information Commissioner’s Office (ICO) under registration number ZA776121.

For any privacy question or request, email support@active-crm.co.uk or write to us at theaddress above.

2. If your data is in one of our customers’ CRMs

Our customers are businesses that use ACTIVE CRM to manage their own contacts. If abusiness you deal with uses ACTIVE CRM, that business is the controller of your data andwe process it only on its instructions, as its processor.
If you want to access, correct or delete that data, or ask how it is used, please contactthat business directly. If you contact us, we will pass your request to them.

3. What we collect

Website visitors:
IP address, device and browser details, pages visited, and cookieidentifiers. We collect this from your device, through cookies and similar technologies(section 6).

Enquirers:
name, business name, email, phone number, and what you tell us about yourneeds. We collect this through forms, chat, email, phone calls and booking tools.

Customers and their staff:
name, job title, business contact details, login details,account settings, support and coaching history, and records of calls and meetings withus. You give us this when you sign up and use our Services.

Billing contacts:
name, billing address, payment status and invoice history. This comesfrom you and from our payment provider Stripe. We do not see or store your full cardnumber.

Marketing contacts:
name, email, marketing preferences, and whether you open ouremails or click links. This comes from you and from our email tools.

4. How we use your data and our lawful basis

UK data protection law requires us to have a lawful basis for each way we use your data.

Answering enquiries and arranging demos.
Lawful basis: taking steps at your requestbefore entering a contract, or our legitimate interest in responding to businessenquiries.

Setting up and running your account, and providing setup, build, support and coaching. Lawful basis: performing our contract with your business.

Taking payments, invoicing and keeping accounting records.
Lawful basis: performingour contract, and our legal obligation to keep tax records.

Sending service messages, such as changes to terms, prices and security notices.
Lawful basis: performing our contract, and our legal obligations.

Sending marketing emails about our Services.
Lawful basis: your consent, or, forexisting customers and corporate contacts, our legitimate interest in promoting ourServices, as permitted by PECR.

Measuring how our website is used.
Lawful basis: your consent where cookies requireit, or our legitimate interest in improving our website where the law permits analyticswithout consent.

Showing you our adverts on Meta platforms, using the Meta Pixel.
Lawful basis: yourconsent.

Improving our Services and training our team.
Lawful basis: our legitimate interest inrunning and improving our business.

Keeping our systems secure and preventing fraud.
Lawful basis: our legitimateinterest, and our legal obligations.

Dealing with complaints, disputes and legal claims, and responding to regulators.
Lawful basis: our legal obligations, and our legitimate interest in protecting our business.

Where we rely on legitimate interests, we have balanced our interests against your rights. You can ask us for details of that assessment.

We will tell you before we record any call or video meeting with you, and why.
We do not make decisions about you based solely on automated processing that havelegal or similarly significant effects.

5. Marketing

You can unsubscribe from marketing emails at any time using the link in every email, or byemailing support@active-crm.co.uk. We keep a record of your request so we do notcontact you again. Unsubscribing does not stop service messages about your account.
We do not sell your personal data.

6. Cookies

Cookies are small files placed on your device when you visit a website. We use essentialcookies to make our website work. We use analytics and advertising cookies only if youagree to them through our cookie banner.

Essential cookies.
Provider: our website (WordPress) and cookie banner. Purpose: keeps the website working and remembers your cookie choices. Duration: session to 12months. Consent needed: no.
Provider: Vimeo (__cf_bm). This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. 

Analytics cookies. Provider: Google Analytics (_ga, ga*). Purpose: shows how visitorsuse our website, so we can improve it. Duration: up to 2 years. Consent needed: yes.

Advertising cookies. Provider: Meta Pixel (_fbp). Purpose: measures our adverts andlets us show adverts to people who have visited our website. Duration: up to 3 months. Consent needed: yes.

You can change your choices at any time using the “Cookie settings” link at the bottom ofevery page. You can also block or delete cookies in your browser settings, but parts of thewebsite may not work.

Google and Meta also use data collected through their cookies for their own purposes, asdescribed in their own privacy policies.

7. Who we share your data with

We share personal data only where needed for the purposes in section 4:

  • HighLevel LLC: hosts the platform we use to run ACTIVE CRM, including our ownrecords of enquiries and customers.
  • Stripe: processes subscription payments.
  • Xero: accounting and invoicing.
  • Microsoft (Microsoft 365, Teams):
    email, file storage and video meetings.
  • Zoom: video meetings for support and coaching.
  • Google: website analytics, if you consent.
  • Meta: advertising measurement, if you consent.
  • Professional advisers: our accountants, lawyers and insurers, where needed.
  • Regulators, law enforcement and courts:
    where the law requires it, or to protect ourrights.
  • A buyer of our business:
    if we sell all or part of our business, under a duty ofconfidentiality.

Our service providers may only use your data on our instructions and must keep it secure.

8. International transfers

Some of our service providers, including HighLevel, Stripe, Zoom, Google and Meta,process data in the United States. HighLevel may also give its affiliates and service providers in India access to data. Where data is transferred outside the UK, we rely on oneof the following safeguards:

  • UK adequacy regulations, including the UK Extension to the EU-U.S. Data PrivacyFramework for providers certified under it; or
  • the UK International Data Transfer Agreement or the UK Addendum to the EU StandardContractual Clauses.

Contact us for more information about the safeguard used for a particular provider.

9. How long we keep your data

  • Enquiries that do not lead to a contract: 2 years after our last contact.
  • Customer account, contract and support records: 6 years after the contract ends, incase of legal claims.
  • Billing and accounting records: 6 years after the end of the financial year they relateto, as tax law requires.
  • Marketing records: until you unsubscribe or 2 years after your last engagement, whichever is sooner. We keep a suppression record after you unsubscribe so we do not contact you again.
  • Call and meeting recordings: 12 months, unless needed for a complaint or dispute.
  • Analytics data: 14 months in Google Analytics.

We then delete or anonymise the data.

10. Security

We use appropriate technical and organisational measures to protect your data, includingseparate logins for each team member, confidentiality obligations for our staff, and accesslimited to staff who need it. Our platform provider HighLevel encrypts data in transit andat rest. No system is completely secure, and if a breach occurs that is likely to put you atrisk, we will tell you and the ICO as the law requires.

11. Your rights

  • You have the right to: access the personal data we hold about you;
  • correct data that is inaccurate or incomplete;
  • delete your data in some circumstances;
  • restrict how we use your data in some circumstances;
  • object to our use of your data where we rely on legitimate interests, and to direct marketing at any time;
  • data portability, to receive data you gave us in a commonly used format; and
  • withdraw consent at any time where we rely on consent. This does not affect anything we did before you withdrew it.

To make a request, email support@active-crm.co.uk. We may need to confirm youridentity. We will respond within one month, which may be extended by up to two furthermonths for complex requests; if so, we will tell you why. Requests are free unless they areclearly unfounded or excessive.

12. Complaints

If you are unhappy with how we have handled your personal data, please tell us first so wecan put it right:

1. Email support@active-crm.co.uk with the subject “Data protection complaint”, or writeto us at our registered office.
2. We will acknowledge your complaint within 30 days of receiving it.
3. We will investigate without undue delay and keep you informed of our progress.
4. We will tell you the outcome without undue delay. You also have the right to complain to the Information Commissioner’s Office at
ico.org.uk/make-a-complaint or by calling 0303 123 1113. The ICO will usually expect you tohave raised your complaint with us first.

13. Children

Our website and Services are for businesses and are not aimed at anyone under 18. We do not knowingly collect children’s data.

14. Links to other websites

Our website may link to other websites. We are not responsible for their privacy practices, so please read their privacy policies.

15. Changes to this policy

We may update this policy from time to time. We will post the updated version on thispage with a new “last updated” date and, where changes are significant, tell our customers by email.

This policy was last updated on 11 October 2026.