Privacy policy

Who we are

This website is run by Apostle, a company registered in England and Wales under Apostle22 Ltd, company number 16618863, with its registered office at 20 Wenlock Road, London, England, N1 7GU. We are the controller of the personal data described in this policy.

If you have any questions about this policy or how we use your data, email operations@apostlecrm.com or write to us at the address above.

What we collect and why

We only collect what we need for the purposes below.

Enquiries through our Contact page

What we collect: your name, role, brand, email and your message.

Why: to reply and discuss working together.

Lawful basis: legitimate interests, in responding to enquiries.

How long we keep it: 2 years from our last contact with you.

Joining the CRM Leaders community

What we collect: your name, email, brand, job title, your LinkedIn profile URL if you choose to give it, and whether you would like to hear about CRM Leaders events.

Why: to invite you to community events and share member updates.

Lawful basis: consent.

How long we keep it: until you ask to leave.

Registering for a CRM Leaders event

Event registration runs through Lu.ma, under Lu.ma’s own privacy policy.

What we receive: your name, email and any answers to the registration questions.

Why: to run the event and share attendee names with the venue for entry.

Lawful basis: legitimate interests.

How long we keep it: 1 year after the event.

Browsing the site

What we collect: your device, browser, the pages you visit and your approximate location.

Why: to measure and improve the site. Our Cookie policy explains this in more detail.

Lawful basis: legitimate interests, and consent for non-essential cookies.

How long we keep it: see our Cookie policy.

Who we share it with

We do not sell your data. We share it only with service providers who help us run our business, under contracts that require them to protect it:

Klaviyo for email marketing and forms

Lovable for website hosting

Google Analytics for site analytics

Slack for internal operations

Event venues, limited to attendee names for entry and security

We may also share data where the law requires it, or with professional advisers such as lawyers and accountants.

International transfers

Some of our providers are based outside the UK, including in the United States. Where data leaves the UK, we rely on UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the International Data Transfer Agreement to keep it protected.

Your rights

You have the right to:

access the personal data we hold about you

ask us to correct it

ask us to delete it

object to us using it, including for direct marketing

ask us to restrict how we use it

ask us to transfer it to you or someone else

withdraw consent at any time, where we rely on consent

To use any of these rights, email operations@apostlecrm.com. We will respond within one month. You can unsubscribe from our emails at any time using the link in every email.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

Automated decisions

We do not make decisions about you based solely on automated processing.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.