Privacy Notice

1. Who we are

Client Payroll Exchange ("CPX", "we", "us") operates this website and the CPX member platform. We are the data controller for the personal information described in this notice. You can contact us about privacy matters by email at privacy@clientpayrollexchange.com.

2. Information we collect

• Registration of interest: your name, role, email address, telephone number, firm name, website, information about your firm and how your payroll services are delivered, the areas of CPX you are interested in, your consent choices and anything else you choose to tell us.
• Member accounts: account and sign-in details, firm profile information, team member details, compliance and continuity evidence you upload, and your activity within the member platform.
• Directory profiles: the business contact details and service information a member firm chooses to publish.
• Technical information: limited information needed to operate the site securely and reliably, such as device and browser information and server logs.

3. How we use it

• To assess registrations of interest and arrange introductory conversations.
• To provide, administer and support CPX membership and the member platform.
• To carry out and maintain CPX verification and continuity verification.
• To publish directory profiles where a member firm has opted in.
• To send service messages such as renewal reminders, briefing invitations and platform notices.
• To send updates and resources by email where you have asked us to, and you can opt out at any time.
• To keep the platform secure and to meet our legal obligations.

4. Lawful bases

We rely on legitimate interests to assess membership enquiries, operate the platform and keep it secure; contract to deliver membership once you join; consent for optional marketing emails; and legal obligation where we must retain records.

5. Sharing your information

We do not sell personal information. We share it only with service providers who help us operate CPX — including our hosting, database, authentication and email delivery providers — and where we are required to do so by law. These providers act on our instructions under written terms.

6. Storage and transfers

Information is stored on secure, access-controlled infrastructure. Where a provider processes information outside the UK, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Addendum.

7. How long we keep it

Registrations of interest are kept for up to 24 months from your last contact with us unless you become a member or ask us to delete them sooner. Member records and verification evidence are kept for the duration of membership and for up to six years afterwards, so that we can evidence the checks completed and meet our legal and accounting obligations.

8. Cookies

We use only the cookies and similar storage that are strictly necessary to operate the site — principally to keep you signed in to the member platform and to protect it from abuse. We do not use advertising cookies. If we introduce analytics or other non-essential cookies, we will ask for your consent first and update this notice.

9. Your rights

You have the right to access your personal information, to have inaccurate information corrected, to request erasure or restriction, to object to processing based on legitimate interests, to data portability, and to withdraw consent for marketing at any time. To exercise a right, email privacy@clientpayrollexchange.com.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to resolve matters with you first.

10. Changes

We may update this notice from time to time. The date at the top of this page shows when it was last revised.