Psalm/If we wrote to you first

Privacy notice · Last updated 10 October 2026

If we wrote to you first

You are reading this because Psalm sent an email to your business without being asked. This page explains what we hold about you, why, and how to make us stop. The short version: we hold only your business contact details, we write at most twice, and one word from you ends it.

Who we are

Psalm is made by Jordan Labs Ltd, a company registered in England and Wales, company number 17358646. Jordan Labs Ltd decides how your details are used, which makes us the controller of them. You can write to us at info@psalmcrm.com, or reply to any of our emails. We have not appointed a Data Protection Officer because the law does not require one at our size; your message is read by a person.

What we hold

  • The name of your business, its website, its town and its company number.
  • The email address your business publishes for enquiries, and, where your website publishes it, the name and job title of the person that address belongs to.
  • Where your business is a company, the names of its directors as shown on the public register.
  • A short note taken from your own website about the kind of work you do, so that our email is relevant to you.
  • The emails we send you, any reply you send, and the date of each.

We do not hold your home address, a personal phone number or anything about your private life.

Where we got it

From publicly accessible sources: your business's own website, the Companies House register, and trade association directories that list businesses in your trade. We did not buy a list.

What we use it for, and our legal basis

We use your details to write to you about Psalm, our quoting and invoicing software for businesses like yours: up to two emails, four days apart. If you reply, we use them to carry on that conversation.

Our legal basis is legitimate interests (Article 6(1)(f) of the UK GDPR). Our interest is telling businesses that price, quote and invoice their work about software built for exactly that, and the law recognises direct marketing as a legitimate interest. We have weighed it against yours: we use only the business contact details your business chose to publish, we write about your business and nothing personal, we stop at two emails, and we stop the moment you ask. You can ask for a copy of our written assessment.

We do not track whether you open our emails or which links you click. One link in our second email carries a label that tells our website a visit came from these emails; if you later sign up to Psalm, your account records that this is how you found us.

We make no decisions about you by automated means.

Who else handles it

We never sell your details or give them to anyone for their own marketing. These companies handle them for us, only on our instructions:

  • Google, which provides the mailbox our emails are sent from and replies arrive in, and the spreadsheet that holds the list we send to.
  • Supabase (servers in London), which runs our own customer records, where we note a conversation if you reply.
  • GitHub (United States), which stores our encrypted nightly backups of those records.

Transfers outside the United Kingdom

Google may handle your details in the United States. The protection is the one set out in Google's data processing terms: the UK's adequacy regulations for certified US companies, or the UK's approved addendum to the standard contractual clauses. GitHub stores our nightly backups in the United States; they are encrypted before they leave us, so GitHub cannot read them, and the protection is the same, set out in GitHub's data protection terms: the UK's adequacy regulations for certified US companies, or the UK's approved addendum to the standard contractual clauses. Ask us and we will send you a copy of either.

How long we keep it

  • If you do not reply, we delete your details six months after our last email.
  • If you reply and we talk, we keep the conversation for 12 months after our last exchange, unless you become a customer, when our privacy policy takes over.
  • If you tell us to stop, we delete everything except your email address, your business's web address and the date you asked, which we keep on a “do not contact” list so we never write to you again, even if we come across your details somewhere else.

Your rights

You can ask us at any time:

  • to stop: you have an absolute right to object to direct marketing. Reply “no” to any email, or write to info@psalmcrm.com, and we stop the same day;
  • for a copy of what we hold about you;
  • to correct it, or to delete it;
  • to restrict how we use it while a question about it is being settled;
  • to object to our use of it for any other reason;
  • for your data in a portable form, where that right applies (it mainly covers data you gave us yourself under a contract or with your consent).

We answer within one month and never charge for it.

If you want to complain

Please tell us first, at info@psalmcrm.com. We will acknowledge your complaint within 30 days, look into it, and tell you what we found and what we did.

You also have the right to complain to the Information Commission, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes

If we change this page, the date at the top changes with it.