GoSucceed® CRM

Terms of Service & Data Processing Addendum (DPA)

Effective Date 1 October 2025

Entity Salters & Monroe Ltd trading as GoSucceed®

Company Registration 13476747

Registered Office Kingfisher House, Hurstwood Grange, Hurstwood Lane, Haywards Heath, West Sussex, RH17 7QX

Jurisdiction England & Wales

Website https://gosucceedcrm.com

Support [email protected]

GoSucceed CRM is a licensed white-label deployment of the White Label CRM system (provided by AllClients LLC), operated by Salters & Monroe Ltd on the domain GoSucceedCRM.com.

These Terms of Service (the “Agreement”) govern your use of the GoSucceed CRM platform (the “Service”). If you would like a signed or physical copy of this Agreement (including the DPA), please email [email protected].

Terms of Service

1. Account Access and Security

When you sign up, you will receive login credentials (username and password). You must keep these secure and confidential. If you suspect unauthorised access or a security breach, notify us immediately at [email protected]. GoSucceed reserves the right to suspend access where misuse or compromise is suspected.

2. User Privacy

We value and protect your privacy. Customer Data entered into GoSucceed CRM will not be disclosed to third parties except where required by law, or where necessary to deliver the Service. GoSucceed acts as Data Processor for your client and prospect data, and as Data Controller for your user account and billing details. Our full Privacy Policy can be found at https://gosucceedcrm.com/privacy.

3. Liability

To the fullest extent permitted by law, GoSucceed, its affiliates, and licensors are not liable for any indirect, consequential, or incidental damages arising from use of the Service. Our total aggregate liability for direct losses shall not exceed the total fees you have paid to us in the preceding 12 months. Nothing in this section limits liability for fraud, negligence, or death or personal injury caused by us.

4. Indemnification

You agree to indemnify and hold harmless GoSucceed (including employees, contractors, and agents) against all claims, damages, or legal costs arising from:

– your breach of these Terms or applicable law;

– your misuse of the platform; or

– unlawful marketing or communications sent via the CRM.

You are responsible for ensuring all use of the system complies with the UK GDPR, the Data Protection Act 2018, and PECR (Privacy and Electronic Communications Regulations).

5. Use of Names and Logos

You may reference GoSucceed CRM as your system provider in documentation or marketing materials. GoSucceed may use your company name and logo in marketing materials to indicate you are a GoSucceed CRM client, but only with your prior written consent. Neither party may use the other’s intellectual property without written permission.

6. Termination and Suspension

We may suspend or terminate your account if payments are overdue, the Service is misused, or a user behaves abusively towards our team. Temporary downtime may occur due to maintenance or upgrades. If we permanently discontinue the Service, we will refund any unused prepaid months.

7. Payment Terms

All subscription fees for GoSucceed CRM are collected by Direct Debit only. By signing up to the Service you authorise GoSucceed to collect your subscription fees via GoCardless, our Direct Debit provider.

If a Direct Debit payment is returned unpaid for any reason, a failed payment administration charge will be applied to your account the following month. This charge reflects the fees incurred by GoSucceed from GoCardless as a result of the failed payment and will be notified to you at the time.

GoSucceed will notify you of any failed payment and allow a reasonable opportunity to resolve the issue before suspending access to the Service in accordance with Section 6.

Data Processing Addendum (DPA)

This DPA supplements the GoSucceed CRM Terms of Service between Salters & Monroe Ltd trading as GoSucceed® (“Processor”) and the Customer (“Controller”). It applies to all processing of personal data carried out by GoSucceed on the Customer’s behalf under the UK GDPR, and the Data Protection Act 2018.

1. Roles and Instructions

Controller The Customer (you)

Processor GoSucceed (Salters & Monroe Ltd)

Sub-processors As listed in Section 4 of this DPA

GoSucceed processes personal data solely on the Customer’s documented instructions, as set out in this Agreement and the Customer’s use of the Service. Where GoSucceed is required by applicable law to process personal data without the Customer’s instruction, GoSucceed will notify the Customer of that requirement before processing, unless prohibited by law from doing so.

2. Data Categories

GoSucceed CRM may store personal data including:

– Names, job titles, and contact details (email address, telephone number, postal address)

– Appointment information and communication logs

– Notes and business details uploaded by the Customer

The Customer must not upload special category data or sensitive personal data (including health, biometric, financial, or political data) unless a separate written agreement has been put in place with GoSucceed to cover such processing.

3. Security

GoSucceed uses appropriate technical and organisational security measures to protect personal data, including:

– Encryption in transit (TLS 1.2+) and at rest (AES-256)

– Multi-factor authentication on accounts”(being implemented, expected May 2026)”

– Role-based access controls and user permission management

– Daily backups with 30-day rolling retention stored offsite

– Login and activity audit logging retained for 90 days

– Confidentiality obligations on all authorised personnel

If a personal data breach occurs affecting Customer data, GoSucceed will notify the Customer without undue delay and will provide all reasonable assistance to support any notification obligations to the ICO or affected data subjects.

4. Sub-processors

GoSucceed uses the following categories of sub-processors to deliver the Service. By entering into this Agreement, the Customer provides general authorisation for GoSucceed to use these sub-processors, subject to the notification provisions below.

4.1 AllClients LLC Sub-processors

The following sub-processors are used by AllClients LLC (White Label CRM) in the delivery of the underlying platform infrastructure. Personal data may pass through these services as part of the Service:

Sub-processor Country Service Transfer Mechanism

Rackspace USA Cloud Infrastructure & Server Hosting UK Addendum to EU SCCs (Module 2)

SendGrid USA Email Delivery Services UK-US Data Bridge (DPF)

Mailgun USA Email Delivery Services UK-US Data Bridge (DPF)

Zapier USA Integration Services UK-US Data Bridge (DPF)

4.2 GoSucceed Sub-processors

The following sub-processors are used directly by GoSucceed in the delivery of the Service:

Sub-processor Country Service Transfer Mechanism

Make.com (Celonis Inc) USA Integration & Automation Services UK-US Data Bridge (DPF) + ISO 27001:2022

GoSucceed will notify the Customer of any intended changes to sub-processors (additions or replacements) with reasonable notice. The Customer may object in writing within 14 days of notification on reasonable data protection grounds. If GoSucceed is unable to accommodate a reasonable objection, the Customer may terminate the Agreement on written notice.

GoSucceed ensures that all sub-processors are subject to data protection obligations equivalent to those set out in this DPA, and remains fully liable to the Customer for the acts and omissions of its sub-processors.

5. International Data Transfers

All sub-processors listed in Section 4 are based in the United States. GoSucceed ensures that transfers of UK personal data to these sub-processors are protected by an appropriate transfer mechanism under UK GDPR:

– Transfers to AllClients LLC (and its sub-processor Rackspace) are covered by the UK Addendum to the EU Standard Contractual Clauses (Module 2, Controller to Processor), executed between Salters & Monroe Ltd and AllClients LLC.

– Transfers to SendGrid, Mailgun, Zapier, and Make.com (Celonis Inc) are covered by the UK Extension to the EU-US Data Privacy Framework (UK-US Data Bridge), under which those organisations are active certified participants.

GoSucceed will notify the Customer if any transfer mechanism becomes invalid or is materially altered, and will take prompt steps to implement an alternative compliant mechanism.

6. Data Subject Rights

GoSucceed will assist the Customer in fulfilling its obligations under UK GDPR in respect of data subject rights, including rights of access, rectification, erasure, restriction, portability, and objection. If a data subject contacts GoSucceed directly with a request relating to the Customer’s data, GoSucceed will promptly redirect that request to the Customer as Controller and will not act on it unilaterally.

7. Audit Rights

GoSucceed will make available to the Customer all information reasonably necessary to demonstrate compliance with this DPA. GoSucceed will accommodate reasonable audit requests or inspections by the Customer or an authorised third party auditor, subject to reasonable notice and confidentiality protections. GoSucceed may satisfy audit requirements by providing relevant certifications or third-party audit reports where available.

8. Data Retention and Deletion

When your Agreement ends, or upon written request, GoSucceed will delete or export your personal data within 30 days, except where retention is required by applicable law. GoSucceed will confirm in writing when deletion has been completed.

9. Data Protection Impact Assessments

Where required under UK GDPR Article 35, GoSucceed will provide reasonable assistance to the Customer in carrying out a Data Protection Impact Assessment (DPIA) in relation to the processing carried out under this Agreement, based on the information available to GoSucceed.

10. Governing Law

This DPA and all related Terms are governed by the laws of England and Wales. Any disputes are subject to the exclusive jurisdiction of the courts of England and Wales.

Sub-processor Schedule

The sub-processor list set out in Section 4 of this DPA is current as at the Effective Date. GoSucceed maintains an up-to-date sub-processor list and will notify Customers of any material changes in accordance with Section 4 of this DPA.

Customers may request a current copy of the sub-processor list at any time by emailing [email protected].

Acceptance

By using the GoSucceed CRM platform, you confirm that you have read, understood, and agree to these Terms of Service and Data Processing Addendum. If you require a countersigned copy of this Agreement, please contact [email protected].