Privacy.

01

What this notice covers

This notice explains how Drummer handles personal information when you visit our website, request a demo or communicate with us. Drummer is responsible for deciding how information collected through these interactions is used.

When a customer connects its CRM or provides recordings to the Drummer service, that customer determines the purposes of processing. The relevant customer agreement and data processing agreement govern Drummer’s processing on its behalf. This website notice does not replace those agreements.

02

Information we collect

• Demo enquiries:first and last name, work email, company name, job title, team size, CRM, sales channels, information you choose to include and your recorded acknowledgement of the enquiry.
• Updates:the email address you submit when asking to hear about new posts.
• Correspondence:messages and information you share when speaking with our team.
• Technical information:hosting and delivery providers may process your IP address, browser information, request timestamps and diagnostic information to deliver and protect the website.

Please only share information needed for your enquiry. Do not submit customer recordings, confidential CRM records or sensitive personal information through the public forms.

03

Why we use it

We use enquiry information to respond, arrange a demo and discuss the service you requested. The legal basis is taking steps at your request before entering a contract, or our legitimate interest in responding to business enquiries where appropriate.

We rely on our legitimate interests in operating a secure, reliable website for proportionate technical diagnostics and abuse prevention. Legal obligations may require us to retain particular records. Optional email updates rely on your consent; you can withdraw it at any time.

A demo request is not permission for unrelated marketing. Where consent is required for marketing, it must be obtained separately.

04

Who may receive information

Information may be processed by service providers supporting hosting, data storage, communications and website operations, and by team members who need it to handle your request. Information may also be disclosed where legally required or necessary to establish or defend legal claims.

For product use, CRM connections and AI processing depend on your agreed setup. Ask for the applicable data processing agreement and subprocessor details before connecting business data.

Where processing involves a transfer outside the European Economic Area, the applicable transfer mechanism and safeguards must be identified in the relevant processing documentation. This notice does not promise EU-only hosting or processing.

05

How long information is kept

Retention depends on the purpose: enquiries need to be kept only as long as needed to manage the conversation and related business or legal requirements. Optional update subscriptions need to be removed from active mailing lists when you withdraw consent.

Product data retention, deletion and any backup retention are governed by the customer’s agreement. Contact us to ask about the retention period applicable to your information or to request deletion.

06

Cookies and external services

The website loads fonts from Google Fonts and images from an external asset delivery service. Your browser sends technical request information, including your IP address, to those providers when retrieving these resources.

Necessary browser storage may support website or service functions. Optional analytics or advertising cookies, if introduced, require the appropriate notice and consent where required by law. Browser controls let you restrict cookies and storage, but some functionality may be affected.

07

Your data protection rights

Subject to the conditions in applicable law, you can request access, correction, deletion, restriction or portability of your personal information. You can object to processing based on legitimate interests, and withdraw consent without affecting the lawfulness of earlier processing.

We may need to verify your identity before acting on a request. GDPR requests are generally due a response within one month, with lawful extensions for complex requests. You may lodge a complaint with your local data protection authority.

If your information was provided by a Drummer customer, contact that organisation first. It is responsible for handling rights requests concerning the data it controls.

08

Changes and related information

This notice may be updated as the website and service evolve. The date above identifies the latest version. Material changes should be communicated where required by law.

Read our security informationfor the questions to consider before sharing CRM data or recordings with Drummer.