Privacy notice
ReferProCRM processes the minimum partner and referred-customer information needed to verify accounts, fulfil requested services, prevent duplicate cases and reconcile commissions.
Who and what this covers
This notice covers the ReferProCRM public website, partner workspace and internal operations workspace. ReferProCRM is a partner and operations CRM; referred customers do not receive portal accounts.
Information we process
- Partner identity, contact, business, verification and masked payout-destination details.
- Customer name, consent time, contact fingerprint and last four phone digits, optional email, location and requested-service context.
- Referral documents that are specifically required for the selected service.
- Case milestones, staff actions, commission decisions, wallet entries, payout references and audit events.
- Essential security and diagnostic data needed to protect accounts and investigate errors.
Why we process it
We use this information to create and secure partner accounts, coordinate customer-requested services, apply commercial rules, maintain referral ownership, meet record-keeping duties, prevent abuse and answer support or dispute queries.
Access and sharing
A referral is accessible only to its submitting partner, the assigned ReferProCRM operations member and authorised administrators. Information may be shared with the relevant lender, insurer, professional service provider or infrastructure processor only as required to assess or fulfil the requested service. ReferProCRM does not operate a lead marketplace and does not sell referrals to unrelated partners.
Storage and retention
Documents are kept in private object storage. Access uses short-lived signed links. The CRM stores a keyed fingerprint and last four digits for new customer phone entries rather than displaying the full number to partners. Retention periods follow the purpose of the case, contractual record requirements, dispute windows and applicable law; records are deleted or de-identified when no longer required.
Choices and requests
Partners can correct profile information in Account settings. Partners and customers may request access, correction, restriction or deletion through the assigned operations contact or signed-in support channel. Some records may need to be retained for legal, fraud-prevention, accounting or dispute purposes.
Security and changes
Controls include phone OTP verification, strict role separation, private document storage, masked financial identifiers and tamper-evident records. No internet system is risk-free. Material changes to this notice will be dated and communicated through the partner workspace where appropriate.