Who we are
ZiftyCRM (“Zifty”, “we”, “us”) is a trading name of Zifty Ltd, a company registered in England and Wales (company number 17529909) with its registered office at 16 Acacia Road, Balderton, Newark, NG24 3AE, United Kingdom. Zifty Ltd is run by its founders, Chris Morris and Lewis Parker.
For personal data about you as a Zifty user or a visitor to ziftycrm.com, we are the controller. You can reach us at hello@ziftycrm.com. Using Zifty is covered by our Terms.
What we collect
The waitlist. If you join the waitlist on ziftycrm.com: your name, email address, mobile number, business name, postcode, how many vans you run, roughly how many customers you have and what you use now. We also note where you found us: the campaign tags on the link you clicked (such as “facebook”), the page you arrived on and the website that sent you.
Your account. Your name and email address, and if you choose to give them, your mobile number. If you sign in with Google, we receive your name and email address from Google. We don’t receive your Google password.
Your business. Your business name, the postcode where your van is based, your website, and the answers you give when you set up (such as roughly how many customers you have and what you use now).
Using Zifty. Records of signing in, and basic technical information our hosting providers log to keep the service secure and working, such as IP address, browser and the time of a request.
Billing. When Zifty billing is switched on, your plan and your payment status. Direct Debit details are collected and held by GoCardless, not by us.
Emails. Records of the emails we send you, such as sign-in codes, including whether they were delivered and, where tracking is switched on, opened or clicked.
Your customers’ data
When you use Zifty to run your round, you add information about your customers, such as names, addresses, phone numbers, email addresses, prices, visits, invoices and payments. For that information you are the controller and we are your processor: we only use it to provide Zifty to you, following your instructions, and we don’t sell it or use it for our own marketing.
You’re responsible for having a lawful basis to hold your customers’ data and for telling them how you use it. If you need a data processing agreement, email us and we’ll provide one.
Why we use your data
- To run the waitlist (legitimate interests): telling you when your spot opens, offering you early bird pricing, helping you move your round across, and seeing which posts and links bring window cleaners to us. We’ll only call, text or email you about your place on the waitlist and Zifty itself, and you can ask us to take you off at any time.
- To provide Zifty (contract): creating your account, signing you in, setting up your business, running the app and supporting you.
- To bill you (contract): your plan, your trial and collecting payment through GoCardless.
- To keep Zifty secure and working (legitimate interests): preventing misuse, fixing problems and keeping logs.
- To improve Zifty (legitimate interests): understanding, in summary, how features are used.
- To meet our legal obligations (legal obligation): for example keeping financial records.
- To send you news about Zifty (consent): only if you’ve asked for it, and you can stop at any time.
Who helps us run Zifty
We use trusted providers to run Zifty. Each only gets the data it needs for its job:
- Supabase: our database and sign-in. Data is stored in London, UK.
- Vercel: hosts the website and the app. It may process requests in the US and the EU.
- Resend: sends our emails, such as sign-in codes, from servers in Ireland.
- Cloudflare: runs our domain names and forwards email sent to our addresses.
- Microsoft Clarity: shows how the website is used, only if you allow analytics cookies.
- Google: when you choose “Continue with Google”, to confirm who you are, and Google Analytics, to measure how the website is used (with cookies only if you allow them).
- GoCardless: Direct Debit payments to us, and, if you connect your own GoCardless account, your customers’ payments to you. GoCardless is responsible for the payment data it collects.
- Mapping, postcode and weather services (postcodes.io, OpenStreetMap, OSRM and Open-Meteo): to find addresses on the map, plan the quickest route and show the forecast. They receive addresses, postcodes or map coordinates, never who lives there.
Some of these providers are based in, or process data in, the United States. Where personal data leaves the UK, we rely on protections approved under UK data protection law, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum.
We never sell personal data. We may share it if the law requires us to, or as part of selling or reorganising the business, in which case this policy would continue to apply.
Cookies
On ziftycrm.com we use Google Analytics to see how people find and use the website, such as which pages and social posts bring window cleaners to Zifty, and Microsoft Clarity to see how pages get used, such as where people click and scroll (as recordings of the page, with anything typed into our forms hidden). Their cookies are only set if you say yes when we ask: until then Google Analytics runs without cookies and can’t recognise you from one visit to the next, and Clarity doesn’t run at all. You can change your answer any time with “Cookie settings” at the bottom of every page. We remember your answer in your browser.
If you arrive from a link with campaign tags, we also read them from the link and send them with the waitlist form if you join. The app uses one cookie, to keep you signed in. We don’t use advertising cookies.
How long we keep data
We keep waitlist details until you join Zifty (they then become part of your account) or for 12 months after you joined the waitlist, whichever comes first, unless you ask us to remove them sooner. We keep your account and business data while your account is open. If you close your account, we delete it, including your customers’ data, within 90 days, apart from records we must keep by law, such as invoices for tax purposes, which we keep for up to six years. Server logs are kept for a short time, usually no longer than 30 days.
Keeping data safe
Data is encrypted in transit and at rest. Access is limited to the people who need it to run Zifty, and the app is built so that one business can never see another’s data.
Your rights
Under UK data protection law you can ask to see the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, and to receive a copy to take elsewhere. Where we rely on your consent, you can withdraw it at any time.
To use any of these rights, email hello@ziftycrm.com. We’ll reply within one month. If you’re a customer of a window cleaner who uses Zifty, contact them first, as they control your data; we’ll help them respond.
If you’re unhappy with how we’ve handled your data, please tell us. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
If we change this policy we’ll update the date at the top, and if the changes are significant we’ll tell you by email or in the app.