Introduction:
At CRM Africa (“CRM Africa”, “we”, “us” or “our”), we respect your right to privacy and are committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, who can access it and what your rights are. Our approach is straightforward: we never sell your information or use it for advertising. We collect only what is necessary to provide you with our cloudbased business management platform.
To contact us about this policy, please email [email protected] or write to our offices in Somerville and Cape Town.
This Privacy Policy applies to all CRM Africa websites that link to it, our mobile applications, and services offered through these channels. It does not apply to any separate websites or services that have their own privacy policies, or to third party sites linked from our pages.
We collect information about you only if we need it for legitimate purposes. We obtain data from three sources: you provide the information directly, we collect it automatically, or we receive it from third parties.
- Account signup:When you sign up for a CRM Africa account, we ask for your name, contact number, email address, company name and country. You choose a unique username and password. Optional information such as a photo, time zone or language can be added but is not required.
- Event registrations and forms:We collect the information you submit when registering for events (webinars, seminars), downloading content, subscribing to newsletters, participating in surveys or requesting support.
- Payment processing:When you purchase a subscription, we record the cardholder’s name and address, expiry date and last four digits of the card number. We do not store full card numbers; payment details may be kept in encrypted form with our payment gateways for future transactions.
- Testimonials:If you authorize us to post a testimonial, we may publish your name and other personal details. You can review, update or delete your testimonial at any time.
- Customer interactions:We may record email, phone or chat conversations with our sales or support teams to improve the quality of our service.
- Browser and device data:When you visit our sites, we log information your browser, device or server makes available, such as IP address, browser type, time zone and referring URL.
- Cookies and tracking technologies:We use first party cookies, beacons and similar technologies to recognize you, improve navigation and understand how you use our services. We do not use non-essential third party cookies or tracking scripts, and you can disable cookies in your browser settings.
- Application logs and mobile analytics:We collect data from our application logs and usage analytics tools to understand clicks, features accessed, error reports, device types and locations.
- Federated login:If you log in through a federated authentication provider (e.g., Google, LinkedIn or Microsoft), we receive basic profile information such as your name and email address.
- Referrals:Our reselling partners or customers may provide your name and contact information when they refer our services. We use this information only for the purpose provided.
- Public sources and social media:We may collect information that is publicly available or that you post on review sites and social media (e.g., comments, likes, mentions) to improve our products and communicate with you.
We use your information to:
- Deliver and maintain services– create and manage your account, enable collaboration features and provide hosting and backup.
- Communicate– send essential notifications (account updates, security alerts), newsletters, product news, surveys and feedback requests.
- Improve our products– analyze usage to understand user needs and enhance our websites and services.
- Detect and prevent fraud– monitor suspicious activities, report spam and protect the rights of CRM Africa, our users, third parties and the public.
- Legal and compliance– meet our contractual obligations and demonstrate legitimate business interests or obtain your consent where required.
- Opt out of non-essential emails:You may unsubscribe from newsletters and marketing messages at any time. You will continue to receive critical account notices (password resets, renewal reminders, etc.).
- Disable cookies:You can disable browser cookies, but some features may not function properly.
- Provide optional information:You control whether to add optional profile details (photo, time zone) and may edit or delete them at any time.
CRM Africa does not sell your personal data. We share information only as described below and only with parties who adopt appropriate confidentiality and security measures:
- Employees and contractors:CRM Africa staff and contractors may access your personal information on a need to know basis.
- Service providers:We use third party providers for marketing, event management, analytics and payment processing. They may use your data only as necessary to provide these services.
- Domain registrars and reselling partners:Not applicable – CRM Africa does not provide domain registration services nor does it partner with resellers. Consequently, we do not share personal information with such parties.
- Integration partners:When you install or purchase applications from our marketplace, your name and email address may be shared with the developer. Their use of your data is governed by their own privacy policies.
- Legal and other disclosures:We may share your information as needed to comply with legal obligations, prevent fraud or enforce our rights.
CRM Africa respects the privacy rights afforded by multiple jurisdictions and extends them to all users regardless of where you reside. Depending on your location, you may have specific statutory rights. We summarize them here so you understand how they apply to you:
- European Union / GDPR rights:Under the EU General Data Protection Regulation you have the right to be informed about how your data is collected and used, the right to access your personal data, the right to correct inaccuracies, the right to have data erased (“right to be forgotten”), the right to restrict processing, the right to data portability, the right to object to processing, and rights related to automated decision making and profiling. These rights apply to all customers, not just those in Europe.
- California / CCPA/CPRA rights:California residents enjoy expanded rights under the California Consumer Privacy Act and the California Privacy Rights Act. These include the right to know what personal information we collect and how we use it, the right to request correction of inaccurate personal information, the right to request deletion of personal information, the right to opt out of the sale or sharing of personal information and certain uses of sensitive personal information, the right to opt out of automated decision making that produces significant effects, the right to data portability, and enhanced protections for children under 16 requiring explicit opt in consent before their data is sold or shared. The long standing rights to know, delete and opt out continue to apply.
- South Africa / POPIA rights:The Protection of Personal Information Act grants South African data subjects nine actionable rights: the right to be notified about the collection and processing of personal information; the right to access personal information; the right to request correction; the right to request deletion; the right to object to processing; the right not to receive direct marketing via unsolicited electronic communications; the right not to be subject to decisions based solely on automated processing; the right to complain to the Information Regulator; and the right to an effective judicial remedy.
You may exercise any of these rights by contacting [email protected]. We will respond to your request in accordance with applicable law and will not discriminate against you for exercising your privacy rights.
We retain personal information only as long as necessary for the purposes described in this policy or as required by law. When we no longer need your data, we will delete, anonymize or isolate it.
Service Data Entrusted to Us
When you use CRM Africa to manage information about your customers or employees, or grant a mobile app access to contacts, call history or photos, you entrust us with “service data”. You own your service data and may access, share, export or request deletion of it at any time.
We process service data only according to your instructions, for example:
- Generating invoices with customer details.
- Sending emails to mailing lists through our campaign module.
- Providing collaboration features where other users may see your name and profile picture next to your edits.
Service data remains in your account as long as you use the service. If you terminate your account, data is removed from active databases during the next cleanup cycle and from backups after an additional period.
- CRM Africa group and sub processors:To provide our services and technical support, CRM Africa may engage affiliated companies and trusted third party processors.
- Employees and contractors:Limited access may be granted to specific staff to resolve technical issues, verify spam reports, or process images. Access is logged and audited.
- Collaborators:When you collaborate with others, some of your profile information may become visible to them.
- Third party integrations:If you enable integrations with other services, those third parties may access your service data. Review their policies before use.
Data Subject Requests
If you believe we store or process your information on behalf of another customer (for example, your employer), please contact that customer to exercise your data rights; we will assist them in responding.
Children’s Information
CRM Africa’s products and services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete it. If you believe a child’s information is in our systems, please contact us.
We take data security very seriously. CRM Africa employs administrative, technical and physical safeguards to prevent unauthorized access, use, modification or disclosure of your information. You can read more in our Security Policy or contact our security team at [email protected].
We have appointed a Data Protection Officer (DPO) responsible for overseeing our privacy practices. You can reach our DPO at [email protected] or by writing to: Data Protection Officer, CRM Africa, 165 Middlesex Ave, Somerville, MA 02145 U.S OR 62 Roeland St, 3rd Floor, Gardens, Cape Town 8001, South Africa.
CRM Africa stores and processes personal information in the United States and South Africa and may transfer data across borders to ensure continuity of service. These transfers are governed by appropriate data protection agreements, such as the EU’s Standard Contractual Clauses where applicable. By using our services, you consent to the processing and transfer of your information as outlined.
If you require a Data Processing Addendum to meet your own data protection obligations, please contact us. We will provide an appropriate DPA for your review and signature.
To offer enhanced productivity and predictive capabilities, CRM Africa may use technologies such as regular expression parsing, machine learning and AI. We restrict this to (i) using anonymized segments of service data to improve algorithm accuracy and (ii) building models specific to your organization. We do not exploit your data beyond what is described here.
Some browsers send DNT signals to indicate you do not wish to be tracked. Currently, there is no standard governing these signals, so CRM Africa does not respond to DNT settings.
Our websites may contain links to third party sites with their own privacy policies. We urge you to review those policies before submitting personal information. Our blogs and forums are public; any information you post may remain even after you terminate your account. Social media widgets (e.g., “like” buttons) may collect your IP address and page visits.
We may disclose personal information or service data if required to comply with law, prevent fraud, enforce agreements, or protect user safety. In the unlikely event of a business transfer (sale, merger or acquisition), the successor will be bound by this policy and we will inform you of any changes.
We strive to ensure compliance with this Privacy Policy and conduct periodic reviews. We may update this policy and will notify you via service announcements or email for significant changes. Minor updates may be posted without direct email notice. Continued use of our services after changes take effect constitutes acceptance of the updated policy.
For any questions or concerns about this Privacy Policy, please reach us at:
- Email: [email protected]
- United States Office:165 Middlesex Ave, Somerville, MA 02145
- South Africa Office:62 Roeland St, 3rd Floor, Gardens, Cape Town 8001
We will do our best to address your concerns in a timely manner.
