Your Data Security is Our Top Priority
CentralContacts is built with enterprise-grade security measures to ensure your contact data remains protected, private, and accessible only to authorised users.
How We Protect Your Data
Multiple layers of security work together to keep your information safe at every level.
Secure Authentication
Industry-standard authentication with encrypted passwords and secure session management. We never store passwords in plain text.
- bcrypt password hashing
- Secure session tokens
- Automatic session expiry
- Password reset via email verification
Row-Level Security
184 security policies across 47 database tables ensure every query is filtered, so users only access data they're authorised to see.
- 184 RLS policies active
- 47 protected tables
- Query-level filtering
- Complete organisation isolation
Role-Based Access Control
Granular permissions system with distinct roles for administrators, employees, and super admins, controlling what actions each user can perform.
- Admin, Employee & Super Admin roles
- Permission-based feature access
- Comprehensive audit logging
- Principle of least privilege
Organisation Isolation
Complete data separation between organisations. Your company's data is never visible to users from other organisations.
- Multi-tenant architecture
- Separate data boundaries
- Cross-tenant protection
- Organisation-scoped queries
Personal Data Privacy
Personal contacts remain private to each user. Only you can see contacts marked as personal, even within your organisation.
- Personal vs Organisation scope
- User-owned data protection
- Private contact management
- Visibility controls
Encrypted Data Transfer
All data transmitted between your browser and our servers is encrypted using TLS 1.3, the latest encryption standard.
- TLS 1.3 encryption
- HTTPS everywhere
- Secure API endpoints
- Certificate pinning
Additional Security Measures
Beyond our core security features, we implement additional safeguards to maintain the highest standards of data protection.
Infrastructure Security
Hosted on enterprise-grade cloud infrastructure with automatic backups, redundancy, and 99.9% uptime guarantee.
Regular Security Audits
Our systems undergo regular security assessments to identify and address potential vulnerabilities.
Access Logging
Comprehensive audit logs track all administrative actions, providing full accountability and traceability.
Secure Password Policies
Strong password requirements and secure reset flows protect user accounts from unauthorised access.
Your Data Rights Under GDPR
CentralContacts is fully compliant with the General Data Protection Regulation (GDPR). As a user, you have the following rights regarding your personal data.
Right to Access
You can request a copy of all personal data we hold about you at any time. We will provide this information within 30 days.
Right to Rectification
If any of your personal data is inaccurate or incomplete, you have the right to request corrections through your account settings.
Right to Erasure
You can request the deletion of your personal data. We will remove your data unless we have a legal obligation to retain it.
Right to Restrict Processing
You can request that we limit how we use your data while we address any concerns you may have about its accuracy or use.
Right to Data Portability
You can export your data in a commonly used, machine-readable format to transfer to another service provider.
Right to Object
You have the right to object to the processing of your personal data for direct marketing or other purposes.
How to Exercise Your Rights
To exercise any of your data rights, you can contact our Data Protection Officer at dpo@centralcontacts.co.uk. We will respond to your request within 30 days.
For data export and account deletion, you can also use the self-service options available in your account settings under Profile Settings.
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
Your Trust Matters to Us
We understand that your contact data is sensitive and valuable. That is why we have built CentralContacts from the ground up with security as a core principle, not an afterthought. Every feature we develop goes through rigorous security review to ensure your data remains protected.
Have questions about our security practices? Contact our support team