Last updated: 11 June 2026
This Privacy Policy explains how CM Integrations Ltd (“CM Integrations”, “we”, “us”, or “our”) collects, uses, shares, and protects your personal data when you visit cmintegrations.co.uk (the “Site”), create an account, purchase or licence our products, or otherwise interact with us. It also sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read this policy alongside any other notices we may provide on specific occasions when we collect or process your personal data, so you are fully aware of how and why we are using it.
CM Integrations Ltd is the data controller responsible for your personal data.
If you have any questions about this policy or how we handle your personal data, please contact us at info@cmintegrations.co.uk.
Depending on how you use the Site, we may collect and process the following categories of personal data:
Account and identity data — your name, username, email address, and a securely hashed password when you register for an account.
Contact and billing data — billing and (where applicable) delivery address, telephone number, and email address.
Order and transaction data — details of the products and licences you have purchased, order numbers, order history, amounts paid, currency, and the date and status of your orders. We do not store full payment card numbers (see “Payments” below).
Licensing data — the licence keys and serial numbers we issue to you, the products and modules each licence entitles you to use, licence type, seat counts, and activation status.
Hardware identifiers — where a licence is bound to a device, the hardware or device identifier you register against that licence, so we can validate activations and enforce licence terms.
Software download data — a record of the files you download from your account, including the date and time of each download and the IP address used, so we can provide and secure the download service.
Reseller data — if you are a reseller, your business details, reseller account status, and the pricing tier applied to your account.
Communications data — the transactional and, where you have consented, marketing emails we send you, and records of whether they were sent and delivered, together with any correspondence you have with us.
Technical and usage data — your IP address, browser type and version, device information, and information about how you use the Site, collected through cookies and similar technologies (see “Cookies”).
Approximate location data — an approximate location derived from your IP address, used to display prices in an appropriate currency.
We do not knowingly collect any special categories of personal data (such as data about health, race, religion, or political opinions) and ask that you do not provide such data to us.
We use your personal data only where the law allows us to. The list below sets out how we use it and the lawful basis we rely on.
To create and manage your account and provide our products and licences — including issuing licences, validating activations, and providing downloads. Lawful basis: performance of a contract with you.
To process and fulfil your orders and take payment — including sending order confirmations and licence details. Lawful basis: performance of a contract with you; compliance with a legal obligation (tax and accounting).
To provide customer support and respond to your enquiries. Lawful basis: performance of a contract; our legitimate interests in supporting our customers.
To send service and transactional emails (for example order confirmations, licence and account notifications, and security notices). Lawful basis: performance of a contract; our legitimate interests.
To send marketing communications about our products and offers, where you have asked us to. Lawful basis: your consent, which you can withdraw at any time.
To secure the Site, prevent fraud, and enforce our licence terms — including logging downloads and validating hardware identifiers. Lawful basis: our legitimate interests in protecting our business and intellectual property, and the security of our services.
To display prices in the correct currency using approximate location. Lawful basis: our legitimate interests in providing a localised experience.
To comply with our legal and regulatory obligations — including keeping records required by tax law and responding to lawful requests. Lawful basis: compliance with a legal obligation.
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and freedoms, and we will always give your interests appropriate weight.
When you make a purchase, your payment is processed securely by our payment providers. Where you pay by card or digital wallet, payment is handled by PayPal (UK) Ltd and/or Stripe Payments UK Ltd, who act as independent controllers of the payment data you provide to them. We do not receive or store your full card details — we receive only confirmation of payment and limited transaction information needed to fulfil your order. Where you pay by bank transfer, you provide your payment to us directly using the bank details we supply, and no third-party card processor is involved.
Please refer to the privacy policies of PayPal and Stripe for details of how they handle your data.
We use cookies and similar technologies to operate the Site, remember your preferences (including your chosen display currency), keep your basket and session working, and—where you consent—to understand how the Site is used. When you first visit the Site you are shown a cookie banner that lets you accept or decline non-essential cookies. You can change your choice at any time using the controls on the Site, and you can manage or delete cookies through your browser settings. Essential cookies that are strictly necessary for the Site to function do not require consent.
We do not sell your personal data. We share it only with the following categories of recipient, and only as far as necessary:
Payment providers — PayPal and/or Stripe, to process card and wallet payments (see “Payments”).
Email service provider — Brevo (Sendinblue SAS), which we use to send transactional and marketing emails on our behalf.
Hosting and infrastructure provider — Hostinger, which hosts the Site and our databases.
Geolocation provider — MaxMind, which provides the approximate-location lookup used to set your display currency.
Couriers and logistics providers — where physical hardware is shipped to you.
Professional advisers — such as our accountants and auditors, where necessary.
Authorities and regulators — where we are required to disclose data by law or to protect our rights.
All our processors are bound by contract to keep your personal data secure and to use it only for the purposes we specify.
Some of our service providers (for example our email and geolocation providers) may process data outside the United Kingdom. Where personal data is transferred outside the UK, we ensure an appropriate safeguard is in place — such as a UK adequacy regulation, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum — so that your data receives an equivalent level of protection.
We keep your personal data only for as long as we need it for the purposes set out in this policy:
When we no longer need your personal data, we will securely delete or anonymise it.
Under UK data protection law you have the following rights:
We have built tools into our system that let us export the personal data associated with your account and erase it on request. To exercise any of your rights, please email us at info@cmintegrations.co.uk. We will respond within one month. We will not charge a fee unless your request is clearly unfounded or excessive, and we may need to verify your identity before acting.
Please note that where we are legally required to keep certain records (such as completed-order and tax records), we may retain and anonymise that information rather than delete it entirely.
We will only send you marketing emails where you have asked us to. Every marketing email we send includes an easy way to unsubscribe, and you can opt out at any time by clicking the unsubscribe link or by emailing info@cmintegrations.co.uk. Opting out of marketing will not stop service or transactional messages that we need to send you about your account, orders, or licences.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include secure hosting, encryption of data in transit, hashed storage of passwords, and access controls limiting who can see your data. No method of transmission over the internet is completely secure, but we take all reasonable steps to protect your information.
The Site and our products are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page, and where the changes are significant we will take reasonable steps to bring them to your attention.
If you have any questions about this policy or wish to exercise your rights, please contact us at info@cmintegrations.co.uk, or write to us at CM Integrations Ltd, 68 Winslow Road, Wingrave, Buckinghamshire, HP22 4QB, United Kingdom.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at any time. You can reach the ICO at www.ico.org.uk, by their helpline on 0303 123 1113, or by post at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would, however, appreciate the chance to address your concerns before you approach the ICO, so please do contact us first.
