Privacy Policy
This Privacy Policy explains how enCircle Solutions Ltd ("enCircle", "we", "us") collects and uses personal data through the TrustCRM website at www.trustcrm.co.uk. TrustCRM is a product of enCircle Solutions Ltd.
Who we are
enCircle Solutions Ltd is the data controller for personal data collected through this website.
- Registered office: Cawley House, Canal Street, Nottingham, NG1 7HR
- Company registration number: 05059372
- ICO registration number: Z1804654
- Contact: trustcrm@encircle.co.uk
Website visitors and the TrustCRM platform
This policy covers personal data we process as a data controller for visitors to this website (for example, when you submit an enquiry). It does not cover the personal data held within a Trust's TrustCRM platform. For that data, the NHS Foundation Trust is the data controller and enCircle acts as a data processor under a separate agreement; please refer to the Trust's own privacy information.
What we collect
- Enquiry details you provide through our forms: your name, role, organisation, work email address and the content of your message.
- Technical data automatically recorded when you visit, such as IP address, browser type and pages viewed, held in server and security logs.
- Anti-spam data processed by Cloudflare Turnstile to confirm you are not an automated bot when you submit a form.
How and why we use it
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Responding to your enquiry and arranging a demo | Legitimate interests, and to take steps at your request prior to entering a contract |
| Protecting the website against abuse and fraud | Legitimate interests |
| Operating and maintaining the website | Legitimate interests |
Who we share it with
We do not sell your personal data. We share it only with service providers who help us run the website and respond to you, including:
- Cloudflare, for website delivery, security and bot protection;
- Google Workspace, for receiving and responding to enquiry emails.
All TrustCRM services are hosted on UK-based infrastructure. Where a provider processes data outside the UK, we rely on appropriate safeguards recognised under UK data protection law.
How long we keep it
We keep enquiry correspondence for as long as needed to deal with your request and for a reasonable period afterwards for our legitimate business records, after which it is deleted. Security and server logs are retained for a short period and then removed.
Your rights
Under UK data protection law you have the right to: access your personal data; have it corrected or erased; restrict or object to its processing; and data portability. To exercise any of these rights, email trustcrm@encircle.co.uk.
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we have handled your data.
Cookies
This website uses only the minimum cookies needed to function and to protect our forms. For more detail, see our Cookie Policy.
Security and standards
enCircle delivers its services under UKAS-accredited ISO 27001 and ISO 9001 certifications, and in compliance with the NHS Data Security and Protection Toolkit.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised.
Contact
For any question about this policy or your personal data, contact trustcrm@encircle.co.uk.