Privacy Policy

Callytics Ltd ("we", "us", "our") provides call tracking and analytics services to businesses. We are the data controller for information collected through our website and marketing activities, and act as a data processor for call data on behalf of our customers. Registered in England and Wales Contact: [email protected]

We collect different types of information depending on how you interact with us: **Account Information** When you create an account, we collect: • Name and email address • Business name and address • Payment information (processed securely by Stripe) • Phone numbers for forwarding **Call Data (as a Processor)** On behalf of our customers, we may process: • Caller phone numbers • Call timestamps and duration • Call recordings (if enabled) • AI-generated transcripts (if enabled) • Source attribution data **Website Analytics** We use privacy-friendly analytics to understand how visitors use our website. We do not use third-party tracking cookies. **Click-to-Call Tracking Script** Our tracking script captures campaign attribution data (e.g., UTM parameters, referrer) when visitors click phone numbers. It does not collect personal information or use cookies.

We use your information to: • Provide and improve our call tracking services • Process payments and manage your subscription • Send service-related communications • Provide customer support • Comply with legal obligations • Detect and prevent fraud We do not sell your personal information to third parties.

Under UK GDPR, we process your data based on: **Contract Performance**: To provide the services you have subscribed to. **Legitimate Interests**: To improve our services, prevent fraud, and send relevant communications. **Legal Obligation**: To comply with applicable laws and regulations. **Consent**: Where required, such as for marketing emails (you can opt out at any time).

We share your information only with: **Service Providers** • Telephony infrastructure providers (for call routing) • AI transcription services (call audio is not retained after processing) • Payment processing (Stripe) • Cloud hosting providers **Legal Requirements** We may disclose information if required by law or to protect our rights. All service providers are carefully selected and bound by data processing agreements.

We retain your data for as long as necessary to provide our services: • **Account data**: Retained while your account is active and for 30 days after closure • **Call recordings**: Retained according to your account settings (default 90 days) • **Transcripts**: Retained as long as the associated recording • **Analytics data**: Aggregated and anonymised after 2 years You can request deletion of your data at any time (see Your Rights below).

We implement appropriate technical and organisational measures to protect your data: • Encryption in transit (TLS 1.3) and at rest (AES-256) • Access controls and authentication • Regular security assessments • Employee training on data protection • Incident response procedures Call recordings are stored in secure UK/EU data centres.

Your data is primarily processed in the UK and European Economic Area. Where we use service providers outside these regions (e.g., OpenAI for transcription), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK ICO.

Under UK GDPR, you have the right to: • **Access**: Request a copy of your personal data • **Rectification**: Correct inaccurate data • **Erasure**: Request deletion of your data • **Restriction**: Limit how we process your data • **Portability**: Receive your data in a portable format • **Objection**: Object to certain processing activities • **Withdraw Consent**: Where processing is based on consent To exercise these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Our website uses minimal, essential cookies: • **Session cookies**: To keep you logged in • **Preference cookies**: To remember your settings We do not use third-party advertising or tracking cookies. Our analytics are cookie-free.

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

We may update this privacy policy from time to time. We will notify you of significant changes by email or through our service. The "Last updated" date at the top indicates when changes were made.

For privacy-related questions or to exercise your rights: **Email**: [email protected] Callytics Ltd United Kingdom