Privacy Policy
Last Updated: 25 June 2025
Welcome to Spotty Elephant CRM (www.spottyelephantcrm.com). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our CRM services.
We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
1. Who We Are
Spotty Elephant CRM is a customer relationship management platform provided by Lean 4 Sales Ltd t/as Spotty Elephant CRM. Lean 4 Sales Ltd, registered in England and Wales 10516689 . Our goal is to support small and medium-sized businesses with smart, simple tools to manage their contacts, sales processes, and marketing campaigns.
2. Information We Collect
We may collect and process the following types of personal data:
Information You Provide:
-Name, email address, phone number
-Business name and job title
-Billing details (if applicable)
-Messages or emails you send to us
-Login and user account information if you use our CRM
Information We Automatically Collect:
-IP address and browser type
-Usage data (e.g. page views, clicks, session times)
-Device identifiers
-Cookies and similar tracking technologies (see our Cookie Policy)
CRM Customer Data:
If you use Spotty Elephant CRM to store information about your own customers (contacts, leads, etc.), you are the data controller of that information, and we act as the data processor under UK GDPR.
3. How We Use Your Information
We use your information to:
-Provide and manage the CRM platform
-Communicate with you about your account or enquiries
-Send updates, offers, and marketing (if you opt-in)
-Improve our website and services
-Ensure the security and integrity of our platform
-Comply with legal obligations
4. Legal Basis for Processing
We rely on the following legal bases:
-Consent – for optional marketing emails and cookies
-Contract – when providing our CRM platform to registered users
-Legitimate interests – for business analysis, support, and security
-Legal obligation – for compliance with the law and tax regulations
5. Who We Share Your Data With
We do not sell your data. However, we may share personal data with:
-Service providers (e.g. hosting, billing, email systems)
-CRM platform infrastructure (hosted by GoHighLevel)
-Legal or regulatory authorities if required
-Business partners if you give explicit permission
-All third-party processors are subject to contracts that require them to protect your data and act only under our instruction.
6. International Transfers
Spotty Elephant CRM is powered by GoHighLevel, whose infrastructure may include servers located outside the UK (e.g. USA). Where applicable, data is transferred using Standard Contractual Clauses (SCCs) or other approved safeguards.
7. How Long We Keep Your Data
We only keep your data for as long as necessary:
-CRM users: as long as your account remains active
-Enquiries: typically up to 12 months
-Marketing subscribers: until you unsubscribe
We review and securely delete inactive data on a regular basis.
8. Your Rights
You have the following rights under UK GDPR:
-Right to access your personal data
-Right to correct inaccurate data
-Right to request deletion (“right to be forgotten”)
-Right to restrict or object to processing
-Right to data portability
-Right to withdraw consent at any time
To exercise these rights, contact us at: [email protected]
If you're unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk/
9. Cookies
Our website uses cookies to enhance your browsing experience and understand how our site is used. You can control cookie preferences in your browser settings.
For more details, see our separate Cookie Policy.
10. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites.
11. Children’s Privacy
Our services are not directed to individuals under 16. We do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be posted on our website with an updated “Last Updated” date.
13. Contact Us
If you have questions about this policy or our data practices, please contact:
Email: [email protected]
Business Address: Icon Innovation Centre, Eastern Way, Daventry, Northamptonshire, NN11 0QB
Quick Links
Company
Get In Touch
© Copyright 2025. Spotty Elephant CRM. All rights reserved.