Acceptable Use Policy
Draft wording — not yet reviewed by a solicitor. This page is published so you can see how we intend to work while a solicitor reviews it. Anything in [square brackets] is still to be decided. It is not final legal wording and should not be relied on as such. Version recorded: draft-2026-11-03.
Last updated: 3 November 2026
This policy applies to everyone who uses AquaCRM, including agencies, their staff, their clients, and anyone who uses a website, chatbot or form that AquaCRM powers. It sits alongside the Terms of Service. If the two disagree, the Terms of Service win.
1. Use AquaCRM lawfully
You must not use AquaCRM to break the law, or to help anyone else break it. That includes UK GDPR and the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), consumer protection law, and the law of any country your customers are in.
2. Contacting people
- Only send marketing to people who have agreed to it, or where the law otherwise allows it (for example, the "soft opt-in" for existing customers, or business addresses with a working unsubscribe).
- Every marketing email sent through AquaCRM carries an unsubscribe link. Do not remove it, hide it or work around it.
- When someone unsubscribes or asks not to be contacted, they go on the do-not-contact list. Do not re-add them by importing them again.
- Do not buy, rent or scrape contact lists and upload them to AquaCRM.
3. Chatbots and lead capture
- A chatbot that asks for someone's name, email or phone number must say why, and must ask for consent before that person is contacted for marketing.
- Do not make a chatbot pretend to be a human when it is an automated or AI reply. If a person replies, that is fine; if a machine replies, say so when asked.
- Do not use a chatbot to collect passwords, full card numbers, health data or other special category data unless you have a lawful basis and the right safeguards in place.
- A chatbot connected to a shop must only show someone their own orders, and only after they have been verified.
4. Things you must not do
- Upload malware, or try to break, probe or overload AquaCRM or the services it connects to.
- Try to reach another agency's or another client's data.
- Share your login, or let someone use AquaCRM through your account.
- Use AquaCRM to send spam, harass anyone, or publish anything unlawful, defamatory, hateful or misleading.
- Copy, resell or reverse engineer AquaCRM, except where the law says you may.
5. What happens if this policy is broken
We may remove content, pause sending, suspend an account, or end the service, as set out in the Terms of Service. Where we can, we will tell you first and give you a chance to put things right.
6. Reporting a problem
If you see something on AquaCRM that breaks this policy, email [email protected].