Privacy Policy

1. Who we are

DaveBrain AI Telephony is operated by David Knight, Bristol BS14 9BL, United Kingdom.

We are the Data Controller for personal data collected through this website (www.davebrain.co.uk). For data processed through our AI telephony service on behalf of our business clients, we act as a Data Processor — see our Terms & Conditions for details.

We are registered with the Information Commissioner's Office (ICO) under registration reference ZC165416 and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or our data practices, contact us at [email protected].

2. What information we collect

2.1 Information you give us

If you contact us by phone, email, or WhatsApp to enquire about our services, we will collect:

• Your name
• Your phone number and/or email address
• The name and nature of your business
• Any other information you choose to share with us

We do not operate any contact or lead-capture forms on this website. All contact is direct — by phone or email.

2.2 Information collected automatically

When you visit this website, our web server may record standard server logs including:

• Your IP address
• Browser type and version
• Pages visited and time of visit

These logs are used solely for security and operational purposes and are not used to profile or track individual visitors. We do not use Google Analytics or any other third-party analytics service on this website.

2.3 Fonts

This website uses the Inter typeface, which is hosted directly on our own server. No third-party font services are used and no requests are made to external font providers when you visit this site.

3. How we use your information

We use the information we collect to:

• Respond to your enquiries and set up your AI telephony service
• Manage our business relationship with you (invoicing, support, service updates)
• Comply with our legal obligations
• Maintain the security and operation of our website and services

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal basis for processing

Purpose	Legal basis (UK GDPR)
Responding to your enquiries	Legitimate interests / Pre-contractual steps
Delivering and managing the service	Performance of a contract
Server security logs	Legitimate interests
Cookie consent preference	Legal obligation / Legitimate interests
Compliance with UK law	Legal obligation

5. Third parties & sub-processors

This website and the DaveBrain service uses the following third-party providers. Each maintains their own privacy policy and GDPR compliance obligations:

Provider	Purpose	Privacy Policy
Google Fonts	Web font loading	Google Privacy
Twilio Inc.	Telephony & SMS (AI service)	Twilio Privacy
OpenAI LLC	AI conversation (AI service)	OpenAI Privacy
ElevenLabs Inc.	AI voice synthesis (AI service)	ElevenLabs Privacy
Cloudflare Inc.	Network & DNS infrastructure	Cloudflare Privacy

Data transferred to providers outside the UK is done under appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

6. Data retention

We retain personal data only for as long as necessary:

• Enquiry data (name, contact details): retained for the duration of our business relationship, then deleted within 12 months of the relationship ending.
• AI telephony call data (customer names, booking details): automatically purged 7 days after the booking date. See our Terms & Conditions for full details.
• Server logs: retained for up to 30 days for security purposes, then deleted.
• Cookie consent records: stored in your browser's local storage for 12 months.

7. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your data ("right to be forgotten")
• Right to restriction — ask us to limit how we process your data
• Right to data portability — receive your data in a portable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, email us at [email protected]. We will respond within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

8. Cookies

This website uses a small number of cookies. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

9. Children

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at [email protected] and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact us