Mipp CRM ("Mipp", "we", "us") provides a customer relationship management platform at www.mipp.co.uk. This policy explains what information we collect, how we use it, and the rights you have over it.
Information we collect
- Account information: your name, email address, company name, and password (stored as a secure hash; we never see your actual password).
- Your CRM data: the contacts, companies, deals, tasks, notes, and other records you choose to store in Mipp. This data belongs to you.
- Billing information: payments are processed by Stripe. We never see or store your card number; we keep only records of your subscription status and payment history.
- Usage and security data: sign-in events, IP addresses, and browser information, kept to protect your account and diagnose problems.
How we use your information
- To provide and operate the Mipp CRM service.
- To process subscription payments and manage your plan.
- To secure accounts (e.g. detecting sign-ins from new locations).
- To respond to support requests and feedback you send us.
We do not sell your personal data or your CRM data to anyone, and we do not use your CRM data for advertising.
Who we share data with
- Stripe, for payment processing (Stripe's privacy policy).
- Railway, our hosting provider, where the service and its database run.
We share data with these providers only as needed to run the service, and with authorities only where the law requires it.
Security
- All traffic is encrypted in transit with HTTPS/TLS.
- Passwords are hashed with bcrypt; sessions use secure, httpOnly cookies.
- Optional two-factor authentication (2FA) is available on every account.
- Each customer's CRM data is isolated, so no other customer can access your records.
- Security events are logged and monitored.
Your rights (UK & EU GDPR)
If you are in the UK or EU, you have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectification: correct inaccurate data (you can edit most data directly in the app).
- Erasure: ask us to delete your account and all associated data.
- Portability: receive your data in a machine-readable format.
- Objection and restriction: object to or limit certain processing.
To exercise any of these rights, email us at sam@mipp.co.uk. We will respond within one month. You also have the right to complain to the ICO (ico.org.uk).
Data retention
We keep your data while your account is active. If you cancel, you can ask us to delete your account and data entirely; otherwise inactive account data may be retained for up to 12 months before deletion.
Cookies
We use one essential cookie to keep you signed in. With your consent, we also use Google Analytics (via Google Tag Manager) to understand how visitors use our site; these analytics cookies are only set if you choose "Accept" on our cookie banner, and you can decline them without losing any functionality. We do not use advertising cookies.
Changes to this policy
If we make material changes we will update this page and note the new date above.
Contact
Questions about privacy? Email sam@mipp.co.uk.