Privacy Policy

We collect only what we need to run CWork and our website. We do not sell personal data or use it for advertising, and analytics run only if you allow them.

This policy explains how Akazuki Works Georgia Ltd (CWork, we, us) handles personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and, where it applies, the EU General Data Protection Regulation (EU GDPR).

Akazuki Works Georgia Ltd is a company registered in England and Wales under company number 17063649, with its registered office at 82 James Carter Road, Suite A, Mildenhall, IP28 7DE, United Kingdom.

We act as controller for personal data about visitors to our website, prospective customers, and the staff of our customers who hold accounts in CWork, including for billing and account administration.

We act as processor for the data our customers, coworking operators, store in their workspace about their own members, companies, visitors and contacts. For that data, the operator is the controller and its own privacy notice applies. If you are a member of a coworking space that uses CWork, please contact that operator to exercise your rights; we will assist them as required by law.

We do not intentionally collect special category data. Please do not include it in enquiries or support requests.

Where we rely on legitimate interests, we have balanced them against your rights and expectations. You can ask us for details of that assessment.

We use cookies and similar technologies that are strictly necessary for the website and Service to work. We use Google Analytics only after you accept it, with advertising features and Google signals turned off. Our Cookie Policy lists every cookie we use and explains how to change your choice.

We share personal data only with service providers who process it on our behalf under written contracts that require them to protect it and to use it only on our instructions. Our current sub-processors are:

When a customer enables an integration, such as Xero or Bank of Georgia, we exchange the data needed for that integration with the provider on the customer’s instructions. We will give customers notice before adding or replacing a sub-processor that processes Customer Data.

We may also disclose personal data to professional advisers, to law enforcement or regulators where required by law, or to a successor in connection with a merger, acquisition or sale of assets, subject to equivalent protections.

Some of our providers process personal data outside the United Kingdom and the European Economic Area. Where that happens, we ensure the transfer is protected by an adequacy decision or the UK Extension to the EU–US Data Privacy Framework, or by the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with additional safeguards where appropriate. You can request a copy of the relevant safeguards from legal@cworkcrm.com.

We use appropriate technical and organisational measures, including encryption in transit, strict separation of each customer’s data, least-privilege database access, role-based permissions, and monitoring of our systems. Access to personal data is limited to people who need it to do their job and who are bound by confidentiality.

Depending on the circumstances, you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected or incomplete data completed;
• have your data erased;
• restrict or object to our processing, including at any time to direct marketing;
• receive your data in a portable format and have it transmitted to another controller;
• withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, email legal@cworkcrm.com. We will respond within one month and may ask you to verify your identity. There is normally no charge.

If you are unhappy with how we have handled your data, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or, if you are in the European Economic Area, to the data protection authority where you live or work.

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

CWork is a business service and our website is not directed at children. We do not knowingly collect personal data from anyone under 16.

We will update this policy when our practices change. The date at the top shows when it was last revised. If we make material changes, we will tell customers by email or in the Service before they take effect.

Questions about this policy or your personal data: legal@cworkcrm.com. Post: Akazuki Works Georgia Ltd, 82 James Carter Road, Suite A, Mildenhall, IP28 7DE, United Kingdom.