Privacy Policy

1. Data stored in Harpiyo CRM

Harpiyo CRM is a Windows desktop application that stores your CRM data locally on your computer.

Your CRM data is not automatically sent to SHIELD CROSS ENTERPRISES LTD, and Harpiyo CRM does not use Harpiyo CRM-hosted servers to store your CRM database.

This includes information you enter into Harpiyo CRM such as contacts, organisations, notes, activities and other CRM records.

Files and documents associated with contacts also remain under your control and are not automatically uploaded to us.

Imports, exports and backups are carried out under your control and are not automatically sent to SHIELD CROSS ENTERPRISES LTD.

If you use Harpiyo CRM to store personal information about other people, you are responsible for ensuring that your use of that information complies with any data-protection or other legal obligations that apply to you.

2. Diagnostic logs and technical support

Harpiyo CRM creates diagnostic log files locally on your computer to help identify and investigate software problems.

These files are not automatically sent to us. You can access and review them yourself.

Harpiyo CRM is designed to exclude user-entered CRM information, such as contact information and notes, from diagnostic logs and to minimise information such as local file paths where reasonably possible. However, software defects may occasionally cause information to be recorded unexpectedly.

If you contact us for technical support, we may ask you to send relevant diagnostic logs, screenshots or other information that may help us investigate the problem. Providing this information is your choice.

Please do not send personal, confidential or sensitive information that is not relevant to the issue you are reporting.

Information you provide for support is used as necessary to investigate and respond to your enquiry, follow up on replies and retain the context of the conversation.

Closing an enquiry does not necessarily mean that a software change has been released. An enquiry may be closed because a fix has been provided, the issue is already addressed in an upcoming update, we cannot reproduce it, it falls outside the scope of Harpiyo CRM support, or there is insufficient information to investigate it.

See the Retention section below for how we handle support emails, attachments and records after an enquiry is closed.

3. Contacting Harpiyo CRM

If you contact us for support, report a problem, submit feedback or otherwise communicate with us, we may receive:

• your name and email address;
• the contents of your message;
• screenshots or files you choose to provide; and
• diagnostic logs you choose to provide.

We use this information to respond to you, provide support, investigate reported problems and maintain Harpiyo CRM.

Support email is provided using Microsoft 365 for business. Microsoft may process and store emails and attachments on our behalf as part of providing this service.

You are not under a legal obligation to provide information when contacting support. However, we may be unable to investigate or respond fully if you do not provide information reasonably necessary to deal with your enquiry.

Please avoid sending personal, confidential or sensitive information that is not relevant to your enquiry.

4. The Harpiyo CRM website

harpiyocrm.com uses Cloudflare for website hosting and delivery.

We do not currently add Google Analytics, advertising pixels or similar third-party visitor-tracking analytics to harpiyocrm.com.

Cloudflare may process technical information about website visits, such as IP addresses, browser or device information, request details and technical logs, to deliver, secure and operate the website.

If you contact us through the website or by email, information you choose to provide will be handled in accordance with this Privacy Policy.

5. Cookies and similar technologies

harpiyocrm.com may use cookies and similar technologies as part of the operation of Cloudflare's hosting and security services.

6. Microsoft Store

Harpiyo CRM is planned for release through Microsoft Store.

Microsoft may process information relating to Microsoft Store accounts, downloads, licences, purchases, payments and application updates under Microsoft's own privacy practices.

SHIELD CROSS ENTERPRISES LTD does not receive your payment-card information simply because you purchase Harpiyo CRM through Microsoft Store.

7. Why we process personal information

We process personal information only where we have an appropriate lawful basis.

We generally rely on our legitimate interests when responding to support enquiries, investigating software problems and maintaining the security and reliability of Harpiyo CRM.

Our legitimate interests include:

• providing effective support;
• diagnosing and resolving software problems;
• maintaining and improving the reliability of Harpiyo CRM; and
• maintaining the security of Harpiyo CRM and our support services.

Where processing is necessary to provide something you have requested or to perform a contract with you, we may rely on contract.

Where we are required to process personal information by law, we rely on legal obligation.

We do not use diagnostic logs or support information for advertising or profiling.

8. Sharing personal information

We do not sell personal information.

We use third-party service providers where necessary to operate Harpiyo CRM, our website and our support services. These currently include:

• Cloudflare, for website hosting, delivery and security; and
• Microsoft, for Microsoft 365 business email services and Microsoft Store services.

These providers may process personal information as necessary to provide their services.

We may also disclose information where required by law.

9. International processing

We use Cloudflare for website hosting, delivery and security, and Microsoft 365 for business email. These providers and their service providers may process personal information outside the United Kingdom, including in the United States.

Their data-processing terms describe the protections for international transfers. Depending on the transfer, these include applicable adequacy arrangements, such as the UK Extension to the EU–US Data Privacy Framework, or standard contractual clauses together with the UK Addendum where applicable.

Further information about these protections is available in:

• Cloudflare’s Data Processing Addendum, for website hosting, delivery and security; and
• Microsoft’s Products and Services Data Protection Addendum, for Microsoft 365 business email.

You can also read the standard contractual clauses for international transfers published by the European Commission and the UK Addendum (PDF) published by the Information Commissioner’s Office. These standard texts should be read together with the provider terms above.

If you have a question about how your personal information is processed internationally, contact us at [email protected].

10. Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

We keep support emails and attachments, including diagnostic logs and screenshots, for as long as reasonably necessary to deal with an enquiry, follow up on replies and retain the context of the conversation.

Once we consider an enquiry closed and the emails and attachments are no longer needed for those purposes, we delete them unless retention is required by law.

We may keep a record of a closed issue and how it was handled for product maintenance, provided it contains no email correspondence, attachments, diagnostic logs or personal information that identifies the person who raised the issue.

Deleted emails and attachments may remain in Microsoft 365 recovery or backup storage subject to the service's applicable retention and recovery settings.

11. Security

We take reasonable technical and organisational measures designed to protect personal information that we hold.

Harpiyo CRM is designed to minimise the transfer of CRM information to SHIELD CROSS ENTERPRISES LTD by storing CRM data locally on the user's computer during normal use.

If we become aware of a security or privacy issue affecting personal information, we will investigate it and take appropriate action.

12. Your data-protection rights

Depending on the circumstances and applicable law, you may have rights in relation to personal information we hold about you, including the right to:

• request access to your personal information;
• ask us to correct inaccurate information;
• ask us to delete information in certain circumstances;
• ask us to restrict how information is used in certain circumstances;
• receive certain personal information you have provided to us in a reusable electronic format where this right applies.

These rights do not apply in every circumstance.

Your right to object

Where we process personal information on the basis of our legitimate interests, you may have the right to object to that processing.

To exercise a data-protection right, including the right to object, contact us at [email protected].

13. Complaints

If you have concerns about how we handle your personal information, please contact us at [email protected] so that we can investigate.

You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's data-protection regulator.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Harpiyo CRM, our website, our services, the way we handle personal information or applicable legal requirements.

15. Contact us

Harpiyo CRM is a trading name of: