Privacy policy
Last updated: 3 July 2026
How we handle personal data on this website and in the crmSpace service. Two roles matter: for your workspace data we act on your instructions; for the rest we decide, and this policy explains how.
Who we are
Rated Counsel Limited, trading as crmSpace, is registered in England and Wales (company number 11812572) with its registered office at 5 Golden Mede, Waddesdon, HP18 0NG, United Kingdom. For any privacy question or request, contact connect@crmspace.ai.
Two roles
- Controller. For this website, your account details, billing and our own communications with you, we decide how data is used, and this policy applies directly.
- Processor. For the contacts, leads, deals and messages your team stores in a workspace, your organisation is the controller and we process on its instructions under the data processing addendum. If you want to exercise rights over data a crmSpace customer holds about you, ask that organisation; we will help them respond.
What we collect as controller
- Account data. Name, work email and sign-in identifiers when you create or join a workspace, provided through our sign-in provider.
- Billing data. The organisation details and VAT information needed to invoice you.
- Enquiries. Whatever you send us when you email connect@crmspace.ai.
- Server logs. Basic technical logs, such as IP address and request data, kept by our hosting provider to run the service securely.
- Analytics. On this website only, cookieless page-view counts, and only after you opt in. See the cookie policy.
Why, and on what basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Providing the service you signed up for | Article 6(1)(b): performance of a contract |
| Billing, accounting and tax records | Article 6(1)(c): legal obligation |
| Answering enquiries and providing support | Article 6(1)(f): legitimate interest in responding to people who contact us |
| Running and securing the service | Article 6(1)(f): legitimate interest in keeping the service safe and available |
| Website analytics | Article 6(1)(a): consent, withdrawable at any time |
Who we share it with
We do not sell personal data. We use a small number of providers to run the service; the current list, with locations and roles, is the subprocessor list. Where data leaves the UK or EEA, we use UK and EU approved transfer mechanisms.
AI processing
AI features process workspace data to produce briefs, drafts and mappings inside the product. We do not use your data to train models, and AI output is always reviewed by a person in your team before it becomes a record or a message.
How long we keep it
- Workspace data: for the life of the workspace, then deleted on the schedule in the DPA.
- Account and billing records: as long as tax and company law require, typically six years.
- Enquiries: up to two years after the last exchange.
- Server logs: short rolling windows set by our hosting provider.
Your rights
You can ask for access, correction, deletion, restriction, portability, and you can object to processing based on legitimate interests. Write to connect@crmspace.aiand we will respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk, though we would rather hear from you first.
Changes
We will post changes here and update the date above. For changes that matter, workspace administrators are told by email.