1. Introduction

This Privacy Policy explains how NexusFlowCRM (a trading name of Mackinnon Accountants Ltd) collects, uses, and protects personal data within our SaaS platform in compliance with UK GDPR and Data Protection Act 2018.

2. Data We Collect 

We may collect:

- Account details (name, email, company, login data).

- Subscription/payment information (processed via third-party payment providers).

- Data uploaded into the CRM (client records, communications, files).

- Log and usage data (IP addresses, device info, activity within the platform).

3. How We Use Data

To operate and deliver the CRM service.

To provide customer support and updates.

To invoice and process subscription payments.

To enhance platform functionality and user experience.

To comply with legal and regulatory obligations.

4. User Data Responsibility

You (the Customer) are the data controller for personal information uploaded into the CRM.

NexusFlowCRM acts as a data processor, processing such data only according to your instructions.

A Data Processing Agreement (DPA) will apply where required under UK GDPR.

5. Data Sharing

We do not sell or lease user data.

Service-related data may be shared with third-party hosting, payment, or support providers under confidentiality and data protection safeguards.

Data may be disclosed if legally required.

6. International Transfers

Where data is transferred outside the UK/EEA, we ensure safeguards such as Standard Contractual Clauses.

7. Data Retention

Subscription account data is retained as long as the account remains active.

Uploaded CRM data is retained until deletion by the Customer or within 30 days of account termination.

8. Your Rights

You have rights under UK GDPR, including:

- Access to your data.

- Request correction or deletion.

- Restrict or object to processing.

- Data portability.

- Withdraw consent where given.

- Complain to the ICO if unsatisfied.

9. Security

We use encrypted connections (TLS/SSL), access controls, and regular security monitoring to minimise risks to your data.

10. Contact

For data protection requests, contact:

Data Controller: NexusFlowCRM (Mackinnon Accountants Ltd)

Email: [email protected]

Address: ℅ Mackinnon Accountants Ltd, 20 Wenlock Road, London N1 7GUquisquam et deserunt, recusandae. here