CentralContacts

    Privacy Policy

    Last updated: 3 August 2026

    1. Introduction

    CentralContacts ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our contact management platform and related services.

    By using CentralContacts, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the service.

    2. Information We Collect

    2.1 Personal Information

    When you register for an account, we collect:

    • Email address
    • Full name
    • Password (stored in encrypted form)
    • Organisation name (if applicable)
    • Job title and department (optional)
    • Phone number (optional)

    2.2 Contact Data

    When you use our service, you may input contact information including:

    • Contact names, email addresses, and phone numbers
    • Company and job title information
    • Tags and categorisation data
    • Notes and activity logs

    2.3 Automatically Collected Information

    We automatically collect certain information when you visit our platform:

    • IP address and approximate location
    • Browser type and version
    • Device information
    • Pages visited and time spent
    • Referring website

    3. How We Use Your Information

    We use the information we collect for the following purposes:

    • Service Delivery: To provide, maintain, and improve our contact management platform
    • Account Management: To manage your account, process registrations, and handle authentication
    • Communication: To send service-related notifications, updates, and support messages
    • Security: To detect, prevent, and address technical issues and security threats
    • Analytics: To understand how our service is used and improve user experience
    • Legal Compliance: To comply with legal obligations and protect our rights

    4. Data Storage and Security

    4.1 Where We Store Your Data

    Your data is stored on secure servers located within the European Economic Area (EEA). We use enterprise-grade cloud infrastructure with automatic backups and redundancy.

    4.2 Security Measures

    We implement industry-standard security measures including:

    • TLS 1.3 encryption for all data in transit
    • AES-256 encryption for data at rest
    • Secure password hashing using bcrypt
    • Row-level security policies to isolate user data
    • Regular security audits and penetration testing
    • Multi-factor authentication options

    4.3 Data Retention

    We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.

    5. Data Sharing and Disclosure

    We do not sell your personal data. We may share your information in the following circumstances:

    5.1 Service Providers

    We work with trusted third-party service providers who assist us in operating our platform. These providers are contractually obligated to protect your data and may only use it to provide services on our behalf.

    5.2 Organisation Members

    If you are part of an organisation on CentralContacts, contacts marked as "organisation-wide" will be visible to other members of your organisation. Personal contacts remain private to you.

    5.3 Legal Requirements

    We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

    5.4 Business Transfers

    In the event of a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

    6. Your Rights Under GDPR

    Under the General Data Protection Regulation (GDPR), you have the following rights:

    • Right to Access: Request a copy of your personal data
    • Right to Rectification: Request correction of inaccurate data
    • Right to Erasure: Request deletion of your personal data
    • Right to Restrict Processing: Request limitation of data processing
    • Right to Data Portability: Receive your data in a portable format
    • Right to Object: Object to certain types of processing
    • Right to Withdraw Consent: Withdraw consent at any time

    To exercise these rights, please contact our Data Protection Officer at dpo@centralcontacts.co.uk.

    7. Cookies and Tracking

    We use essential cookies to enable core functionality of our service, including authentication and session management. We may also use analytics cookies to understand how you use our platform.

    You can control cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our service.

    8. Children's Privacy

    CentralContacts is not intended for use by children under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

    9. International Data Transfers

    Your data is primarily stored within the EEA. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

    10. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email.

    11. Contact Us

    If you have any questions about this Privacy Policy, please contact us: