Compliance & GDPR
Sub-processors explained in plain English
The companies that help us run the service — who they are, what they touch, and why your DPA makes us publish the list.
8 Oct 2026
PECR and cookies on your business website
The UK's cookie rules are stricter than most small businesses realise — what PECR actually requires and how the consent banner handles it.
8 Oct 2026
AI transparency rules and where the UK is heading
The UK doesn't have a single AI law — but transparency for conversational AI is already effectively required and clearly where regulation is pointing.
8 Oct 2026
Data subject rights: what customers can ask for
Access, erasure, portability — the rights your callers and customers have over their data, and how you'd actually handle a request.
8 Oct 2026
How long can you keep call recordings? Retention rules
UK GDPR says keep personal data no longer than necessary — but what does that mean for call recordings in practice?
8 Oct 2026
Data Processing Agreements: what they are and when you need one
Every business using a SaaS that touches personal data needs a DPA. What it is, what ours says, and why it protects you.
8 Oct 2026
Lawful bases explained for business owners
Legitimate interests, contract, consent — what UK GDPR's lawful bases actually mean for a business running an AI receptionist.
8 Oct 2026
Do you need to tell callers they're talking to an AI?
Short answer: yes — legally, ethically, and practically. Where disclosure requirements come from and why early transparency is also better business.
8 Oct 2026
Call recording laws in the UK: a practical guide
Recording calls is legal in the UK with the right notices — here's what you actually need to do, and what the rules are really about.
8 Oct 2026
UK GDPR and AI receptionists: what small businesses need to know
The compliance basics that actually matter when an AI answers your phone: lawful basis, transparency, retention, and what's on us versus you.
8 Oct 2026