Last updated 2 September 2026.
Who we are
JUST XRM Limited is the data controller for the personal data described here. We are a company registered in England and Wales, number 13616544, VAT registration GB 488 5438 34, based in Newcastle upon Tyne and working UK-wide.
For anything in this policy, including any request about your data, write to justin.wilkinson@justxrm.com.
What this website collects
This site has no enquiry form, no login, no advertising and no marketing cookies. It does not set cookies of its own.
Two things still happen whenever anyone loads a page, as they do on any website:
- Server logs. Our host, Cloudflare, records the usual request data — IP address, timestamp, page requested, browser user agent — to serve the site and protect it from abuse. We use this only in aggregate, to understand how much the site is used and to investigate problems.
- Fonts. The site loads its typefaces from Google Fonts. That means your browser makes a request to Google's servers, and your IP address is visible to Google as part of it. We do not send Google anything else, and we receive nothing back about you.
If you get in touch
When you email us, or book a conversation through Microsoft Bookings, we hold what you choose to give us — typically your name, email address, organisation and whatever you tell us about your situation. We use it for one purpose: to have that conversation and, if it leads somewhere, to do the work.
The lawful basis is legitimate interests where you have approached us about our services, and performance of a contract once we are working together. We do not send marketing email and we do not sell, rent or share your details with anyone for their own purposes.
Who else processes it
We keep the estate deliberately small. Personal data you send us is processed by:
- Microsoft — email, calendar, Bookings and document storage, under Microsoft's data protection terms.
- Cloudflare — hosting and delivery of this website.
Both may process data outside the UK. Where they do, they rely on the safeguards permitted under UK data protection law, including the International Data Transfer Addendum and standard contractual clauses.
We will also disclose information where the law requires it.
How long we keep it
Enquiries that do not become work are kept while the conversation is live and for a reasonable period afterwards, then deleted. Records relating to clients and engagements are kept for as long as the relationship lasts and then for six years, which is the period we need for tax, accounting and professional liability purposes. Server logs are retained by our host for a short rolling window.
Your rights
Under UK GDPR you can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict what we do with it, or object to us processing it. You can also ask for it in a portable form. There is no charge, and we will respond within one month.
Email justin.wilkinson@justxrm.com and say what you want; we may need to confirm who you are first.
If you think we have handled your data badly, please tell us so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, by post at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or on 0303 123 1113.
Client systems
When we build or support a Dynamics 365 or Power Platform system, the personal data inside that system belongs to the client, who is its controller. We act as a processor on their instructions, under the terms of our engagement with them. If you are asking about data held in a system we built for somebody else, that organisation is the right place to ask.
Changes
If this policy changes we will update the date at the top of this page.