Last updated 20 October 2026.
Who we are
JUST XRM Limited is the data controller for the personal data described here. We are a company registered in England and Wales, number 13616544, VAT registration GB 488 5438 34, with its registered office at Unit 3.1 Beaufront Business Park, Anick Road, Hexham NE46 4TU, working UK-wide.
We are registered with the Information Commissioner’s Office as a data protection fee payer, registration reference ZC267859.
For anything in this policy, including any request about your data, write to hello@justxrm.com.
What this website collects
This site has no enquiry form, no login, no advertising and no marketing cookies. It does not set cookies of its own.
Two things still happen whenever anyone loads a page, as they do on any website:
- Server logs. Our host, Cloudflare, records the usual request data — IP address, timestamp, page requested, browser user agent — to serve the site and protect it from abuse. We use this only in aggregate, to understand how much the site is used and to investigate problems.
- Analytics. We use Cloudflare Web Analytics to count page views and see which pages get read. It sets no cookies, does not fingerprint your browser, does not follow you to other websites and does not build a profile of you. We see aggregate numbers, never individuals.
- Fonts. The site loads its typefaces from Google Fonts. That means your browser makes a request to Google's servers, and your IP address is visible to Google as part of it. We do not send Google anything else, and we receive nothing back about you.
If you get in touch
When you email us, or book a conversation through Microsoft Bookings, we hold what you choose to give us — typically your name, email address, organisation and whatever you tell us about your situation. We use it for one purpose: to have that conversation and, if it leads somewhere, to do the work.
The lawful basis is legitimate interests where you have approached us about our services, and performance of a contract once we are working together. We do not send marketing email and we do not sell, rent or share your details with anyone for their own purposes.
Who else processes it
We keep the estate deliberately small. Personal data you send us is processed by:
- Microsoft — email, calendar, Bookings and document storage, under Microsoft's data protection terms.
- Cloudflare — hosting and delivery of this website.
Both may process data outside the UK. Where they do, they rely on the safeguards permitted under UK data protection law, including the International Data Transfer Addendum and standard contractual clauses.
We will also disclose information where the law requires it.
How long we keep it
Enquiries that do not become work are kept while the conversation is live and for a reasonable period afterwards, then deleted. Records relating to clients and engagements are kept for as long as the relationship lasts and then for six years, which is the period we need for tax, accounting and professional liability purposes. Server logs are retained by our host for a short rolling window.
Your rights
Under UK GDPR you can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict what we do with it, or object to us processing it. You can also ask for it in a portable form. There is no charge, and we will respond within one month.
Email hello@justxrm.com and say what you want; we may need to confirm who you are first.
If you think we have handled your data badly, please tell us so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, by post at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or on 0303 123 1113.
Client systems
When we build or support a Dynamics 365 or Power Platform system, the personal data inside that system belongs to the client, who is its controller. We act as a processor on their instructions, under the terms of our engagement with them. If you are asking about data held in a system we built for somebody else, that organisation is the right place to ask.
Our products on Microsoft AppSource
When your organisation buys one of our products, such as JUST XRM Customer Service, through Microsoft AppSource, Microsoft tells us who bought it: the organisation’s name and tenant, and the name and email address of the person who placed the order. We use that only to support the product and to tell you about changes to it. The lawful basis is performance of a contract.
The product itself runs in your own Microsoft environment, and the data you keep in it (cases, contacts, emails and articles) stays there. We do not receive it. If you ask us for support and give us access, we act as your processor, as described below.
Changes
If this policy changes we will update the date at the top of this page.