Your customers' data, kept safe and kept separate.
Stored in the UK, encrypted where it matters, and never sold. This page explains exactly how, in plain English.
Stored in the UK
The CRM, its database and its nightly backups are stored in UK data centres.
Kept separate
Every request is checked so one business can never see or change another business's records.
Encrypted
All traffic uses HTTPS with HSTS. Passwords are hashed. API keys, email passwords and connection tokens are encrypted with AES-256.
Two-step sign-in
Owners and admins must switch on two-step sign-in before they can use the CRM. Idle sessions sign out after 30 minutes.
Nightly backups
A full database backup every night, encrypted and kept outside the public web folder for 14 days.
Audit log
Changes are logged with who made them and when, so you can see what happened on your account.
Roles and permissions
Five built-in roles, plus custom roles, so each person only has the access they need.
Protected connections
Website forms and shop orders must carry a valid signature, and unsigned updates are rejected.
You control your data. We look after it.
You are the data controller for the customer records you keep in the CRM, and we are your data processor.
Sign the agreement in your account. Admins can read and sign our data processing agreement under Your data and GDPR. The page also shows what you hold and where it is kept.
Your rights, covered. Export your contacts at any time. Close your account and we delete your data from the live system within 30 days. If a breach ever affects your records, we tell you within 72 hours.
Who else processes data
The providers we use to run the CRM. We tell customers at least 30 days before adding a new one.
| Provider | What for | Where |
|---|---|---|
| Twilio | Texts, calls and phone numbers | UK / EU |
| Retell AI | AI receptionist and outbound AI calls | USA |
| Postmark | Email sending | USA / EU |
| Stripe | Card payments and plan billing | UK / EU |
| PayPal | Customer payments | UK / EU |
| Anthropic | AI writing help and knowledge base summaries | USA (not kept) |
| Postcodes.io (Ideal Postcodes) | Travel time and route mileage, postcode only, from 11 Nov 2026 | UK / EU |
Twilio, Retell and Postmark run on your own accounts. You only use the payment providers you connect.
What we changed recently
The trust centre lists the security work done each month and what is coming next.
See the latest updatesQuestions about your data?
Email info@unavoidablecrm.com and you will get a straight answer, or start your free trial today.