Who we are
[LEGAL COMPANY NAME], registered at [YOUR REGISTERED ADDRESS], [CITY, POSTCODE], [COUNTRY], is the controller of personal data described in this policy. You can reach us about privacy at [YOUR PRIVACY EMAIL].
What we collect
Account data — name, email, company, phone number, chosen plan and login details. Passwords are stored only as a one-way encrypted hash; we can never see them.
Billing data — billing address and payment history. Card details are processed by our PCI-DSS compliant payment provider and never stored on our servers.
Service data — call detail records (numbers dialled, time, duration, cost), and recordings or transcripts only if you switch them on.
Website enquiries — what you send through our contact or newsletter forms, plus your IP address for spam protection.
How we use it
To provide and bill the service, route and troubleshoot calls, prevent fraud, answer your enquiries, meet legal and regulatory obligations and — only if you subscribe — send our monthly rate-change email.
Legal bases
We rely on performance of our contract with you, our legitimate interests (such as fraud prevention and service improvement), legal obligations (such as telecoms and tax record-keeping) and your consent where we ask for it, for example the newsletter.
Who we share it with
Carrier partners needed to connect your calls, our payment processor, hosting and email providers, and professional advisers. We never sell personal data. Current sub-processors: [LIST OR LINK].
International transfers
Calls cross borders by nature. Where data leaves [UK / EEA], we use appropriate safeguards such as standard contractual clauses.
How long we keep it
Account data for as long as your account is open plus [N] years; call detail records for [N] months or as required by law; website enquiries for [N] months.
Your rights
You can update your details or delete your account yourself from your account page at any time. You can also ask to access, correct, delete, restrict or port your data, and object to certain uses — email [YOUR PRIVACY EMAIL]. You may also complain to [YOUR DATA PROTECTION AUTHORITY].
Security
Calls use TLS signalling and SRTP media encryption, and stored data is encrypted at rest with 256-bit encryption. Access is limited to staff who need it.
Changes
We’ll post any changes here and update the date above. If a change is significant, we will email account holders.