GDPR Privacy Policy

Last Updated: February 12, 2026

At My ERP CRM , we are committed to protecting your privacy and ensuring full compliance with the General Data Protection Regulation (GDPR). This page explains how we collect, process, store, and safeguard personal and business data when you use our website, applications, and ERP-CRM services. Our goal is to maintain transparency, protect your information, and provide a secure digital experience.

1. Data We Collect

To deliver reliable ERP and CRM functionality, we may collect limited personal and operational data necessary for account access, service performance, and system security, including:

  • Account Information: Name, company name, email address, and contact details provided during registration.
  • Business Data: Customer records, invoices, inventory, reports, and other information entered into the ERP-CRM system.
  • Technical Data: IP address, browser type, device type, operating system, and login activity.
  • Usage Analytics: Pages visited, session duration, and feature interactions within the platform.
  • Cookies: Used for authentication, preferences, analytics, and performance improvements.

2. Legal Basis for Processing

We process data only when legally permitted under GDPR, based on the following lawful grounds:

  • Contractual Necessity: To provide ERP-CRM services and maintain your account.
  • Legitimate Interest: To improve system performance, security, and user experience.
  • Legal Obligation: To comply with applicable laws, regulations, or government requests.
  • Consent: For optional cookies, analytics tracking, or communications where required.

3. Use of Third-Party Services

We may work with trusted third-party providers for hosting, analytics, communication, and infrastructure support. These providers process limited data solely to deliver their services in compliance with GDPR.

  • Cloud hosting and infrastructure providers for secure data storage.
  • Analytics tools to understand platform performance and improve usability.
  • Email or communication services for system notifications and support.

Each third-party provider operates under its own privacy and data-protection policies aligned with GDPR requirements.

4. Your GDPR Rights

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the data we hold about you.
  • Right to Rectification: Correct inaccurate or incomplete information.
  • Right to Erasure: Request deletion of your personal data where legally permitted.
  • Right to Restrict Processing: Limit how your data is used in certain situations.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please contact us using the details provided below.

5. Cookies and Consent

When you first visit our website or platform, you may be presented with a cookie consent notice. Cookies are used to maintain secure login sessions, remember preferences, and analyze performance.

  • You may accept or reject non-essential cookies.
  • You can manage or disable cookies anytime through your browser settings.

6. Data Retention

We retain personal and business data only for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Once no longer required, data is securely deleted or anonymized.

7. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, loss, misuse, or alteration. While we strive for maximum protection, no digital system can guarantee absolute security.

8. Contact Us

If you have questions about our GDPR compliance, wish to exercise your data rights, or need clarification regarding data protection practices, please contact us:

Email: support@myerpcrmdesk.com