Back to login

Privacy Policy

Last updated: 20 October 2026

Who we are

BloopCRM is a customer relationship management platform operated by BLOOP CRM LIMITED, a company registered in England and Wales (company number 17185904). Registered office: Belmont Suite, Stowe House, St Chads Road, Lichfield, WS13 6TJ. Contact: admin@bloopcrm.com.

Businesses use BloopCRM to manage their customer enquiries, appointments and projects. This policy explains how personal data is handled in two situations:

  • Business users, people who use BloopCRM at work. For their account data, BLOOP CRM LIMITED is the controller.
  • Customers of those businesses, people whose details a business stores in BloopCRM, for example after submitting an enquiry form. The business is the controller of that data, and BLOOP CRM LIMITED processes it on the business's behalf as a processor.

Data we collect

From business users: name, email address, password (stored securely hashed, never readable), role and permissions, the company you belong to, and records of actions taken in the platform for security and audit purposes.

On behalf of businesses: the details a business collects about its customers. Typically name, phone number, email address, address, answers to enquiry forms, appointment and project details, files and documents, and messages sent to and from customers.

Cookies: we only use the cookies needed to keep you signed in and the service secure. We do not use analytics or advertising cookies.

How data is used

  • To provide the service: storing records, scheduling, documents, and sending the emails, text messages and other messages a business chooses to send.
  • To keep the service secure and working, and to fix problems.
  • To contact business users about their account and the service.

We do not sell personal data, and we do not use customers' data for our own marketing.

Messaging

Businesses may contact their customers by email, text message (SMS) and, where the business has connected it, WhatsApp. These are messages about something the customer asked for, such as appointment confirmations, reminders and project updates. Promotional messages may only be sent to people who have agreed to receive them.

You can opt out at any time by contacting the business you are dealing with. Opted-out numbers are blocked by the platform before any message, including automated ones, is sent. On WhatsApp you can also reply STOP, or block the business in WhatsApp.

Connected services

Businesses can choose to connect third-party services. When they do, data is shared with that service only as needed for it to work:

  • Meta (WhatsApp Business Platform). If a business connects its WhatsApp number, messages and the contact details needed to deliver them are processed by Meta. We use data received from WhatsApp only to show and manage that business's conversations, and never for advertising or profiling. Meta's own privacy policy applies to its processing.
  • Google. If a business connects Google, we create Google Meet links for its appointments.

Where data is stored, and who processes it

Data is stored on Amazon Web Services in the London (eu-west-2) region. We use these sub-processors:

  • Amazon Web Services: hosting, database, file storage, email delivery and text messages.
  • Ideal Postcodes and postcodes.io: address and postcode lookup. Only the postcode or address being searched is sent.
  • Meta Platforms: WhatsApp, only for businesses that connect it.
  • Google: Meet links, only for businesses that connect it.

Some connected services may process data outside the UK. Where they do, they use legally recognised safeguards.

How long we keep it

  • Customer data: kept for as long as the business needs it, and deleted when the business deletes it or closes its account.
  • Message delivery records: kept for up to 400 days.
  • Security and audit records: kept for up to 2 years.
  • Closed accounts: when a business closes its account, its data is deleted within 30 days, except where we must keep records by law.

Your rights

Under UK data protection law you can ask to access, correct or delete your personal data, object to or restrict its use, and ask for a copy to take elsewhere.

  • If you are a customer of a business using BloopCRM, contact that business first; it controls your data and can act on it directly.
  • If you are a business user, or need help, email admin@bloopcrm.com.

Deleting your data: email admin@bloopcrm.com with your request and the phone number or email address it relates to. We will act on it, or pass it to the business that controls the data, within one month.

You can also complain to the Information Commissioner's Office at ico.org.uk.

Changes

We may update this policy. The date at the top shows when it last changed.