Privacy Policy
Effective Date: 31/07/2025
1. Introduction
Ripple ("we", "us", "our") is committed to protecting your privacy and handling your information in an open and transparent manner.
This Privacy Policy explains how we collect, use, share, and protect your personal information when you:
- Visit our website.
- Use our CRM and marketing automation services.
- Interact with our AI Assistant features.
- Connect third-party services to Ripple (such as Google, Microsoft, or SMTP services).
This policy applies in accordance with the UK General Data Protection Regulation (UK GDPR) and applicable UK data protection laws.
2. About Ripple
Ripple is a CRM and marketing automation platform designed for business use. Our services include managing customer relationships, sending communications, automating tasks, handling documents, and providing AI-based assistance.
Ripple is owned and operated by Ripple CRM Limited, a company registered in the United Kingdom. Our registered office is at 55 St Paul's, Leeds, West Yorkshire, LS1 2TE.
3. Information We Collect
Information You Provide Directly
- Account registration details (name, email address, company name, telephone number).
- Information entered into our CRM system (contacts, leads, clients, emails, call records, notes, files).
- Content submitted to our AI Assistant or knowledge base.
- Support enquiries and communications.
Information We Collect Automatically
- IP address, browser type, operating system, and access times.
- Website usage data collected through cookies and similar technologies.
Information from Third Parties
- OAuth tokens and related information when you connect third-party services (e.g., Google, Microsoft, SMTP servers).
- Integration data from third-party applications you authorise.
4. How We Use Your Information
We use the information we collect to:
- Provide, manage, and maintain Ripple services.
- Facilitate CRM and marketing automation activities.
- Enable users to send emails via connected services (Google, Microsoft, SMTP).
- Support AI-driven services, including chatbot interactions and knowledge base queries.
- Communicate with you about updates, system changes, promotions (where permitted), and service notices.
- Respond to customer support enquiries.
- Monitor and analyse usage to improve our website, platform features, and user experience.
- Ensure the security of our platform, prevent fraud, and detect misuse.
Tracking and Analytics
We use tracking scripts, cookies, and analytics tools to collect information about how visitors use our website. This may include pages visited, time spent on pages, referring websites, and other usage statistics. This data helps us to improve our website and provide a better user experience.
We do not use tracking scripts to collect personal email content, CRM records, or private information from within your Ripple account.
5. Legal Basis for Processing
We rely on the following legal bases under the UK GDPR to process your personal information:
- Performance of a Contract: To provide Ripple services under our agreement with you.
- Consent: Where you have given clear consent for processing (for example, marketing emails or connecting third-party services).
- Legitimate Interests: To improve our services, prevent fraud, and secure our systems, provided these interests do not override your rights.
- Legal Obligations: To comply with legal and regulatory requirements.
6. Sharing Your Information
We do not sell, rent, or trade your personal information to third parties.
We may share your information in the following limited circumstances:
- Service Providers: We may engage trusted third-party providers to perform services such as hosting, analytics, communication processing, and customer support. These providers are bound by confidentiality obligations and only access data as needed to perform their services.
- Third-Party Integrations: If you choose to connect your Ripple account with services such as Google, Microsoft, or SMTP providers, we will share limited information necessary to enable the integration, based on your authorisation.
- Compliance with Law: We may disclose your information if required by law, regulation, legal process, or governmental request.
- Business Transfers: If Ripple is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction, subject to your rights under applicable laws.
7. International Data Transfers
Ripple may store and process your information on servers located outside the United Kingdom or the European Economic Area ("EEA"). This may include the United States or other countries where our service providers are located.
Where we transfer personal information outside the UK or EEA, we ensure that appropriate safeguards are in place, such as:
- Ensuring the recipient country has been deemed to provide an adequate level of protection by the UK government.
- Using Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO).
- Conducting risk assessments and implementing supplementary measures where necessary.
By using our services, you consent to the transfer of your personal information to countries outside your country of residence, which may have different data protection rules than your country.
8. Security of Your Information
We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, use, disclosure, alteration, or destruction.
Security measures include:
- Encryption of data in transit and at rest.
- Access controls and authentication procedures.
- Regular security audits and vulnerability assessments.
- Monitoring and logging of platform activity.
Despite these measures, no system can be guaranteed 100% secure. We encourage you to take steps to protect your information, such as choosing a strong password and safeguarding your account credentials.
9. Your Rights
Under the UK General Data Protection Regulation (UK GDPR), you have the following rights regarding your personal information:
- Right to Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete information.
- Right to Erasure: Request deletion of your personal information in certain circumstances ("right to be forgotten").
- Right to Restriction: Request that we restrict the processing of your personal information.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Right to Data Portability: Request transfer of your personal information to another service provider.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time.
- Right to Complain: You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have breached your data protection rights.
To exercise any of these rights, please contact us at hello@.
10. Cookies and Similar Technologies
We use cookies and similar tracking technologies to collect information about your use of our website and services. Cookies are small text files placed on your device to collect standard Internet log information and visitor behaviour information.
We use cookies for purposes such as:
- Enabling basic website functionality.
- Understanding how you interact with our site (e.g., pages visited, time spent on site).
- Measuring and improving website performance.
- Providing a more personalised user experience.
Types of cookies we may use include:
- Essential cookies: Required for basic functionality and security.
- Analytics cookies: Help us understand user behaviour to improve our website.
- Functional cookies: Enhance functionality such as remembering your preferences.
You can control or delete cookies through your browser settings. If you choose to disable cookies, some parts of our site may not function properly.
For more detailed information about the cookies we use, please refer to our Cookie Policy.
11. Third-Party Links and Services
Our website and platform may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices, content, or security of these third parties.
If you choose to access third-party services through Ripple (such as Google, Microsoft, or other integrations), your use of those services is governed by the third parties' own terms and privacy policies.
We encourage you to read the privacy notices of any third-party websites or services that you visit or use.
12. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, including for satisfying any legal, accounting, or reporting requirements.
When we no longer require your information, we will securely delete or anonymise it.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.
Where required by law, we will also notify you of significant changes through our services or by email.
14. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
Ripple CRM Limited
55 St Paul's, Leeds, West Yorkshire, LS1 2TE
Email: [email protected]