Privacy Policy (Tile And Talk LTD)

Effective date: [08/02/2026]
Last updated: [08/02/2026]

Tile And Talk LTD (“Tile And Talk,” “we,” “us,” “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, communicate with us, or use our products and services (including AI voice agents and automation services).

1) Who we are (Data Controller)

Company: Tile And Talk LTD
Country: United Kingdom
Email: [email protected]
Company number: 15798006

For most personal information we collect through our website and business operations, Tile And Talk LTD is the “controller” (the party responsible for deciding how and why your personal information is processed).

If you are a client and we process personal information on your behalf (for example, caller details handled by a voice agent you deploy), we may act as a processor/service provider under your instructions.

2) What this policy covers

This policy applies to:

• Visitors to our website

• People who contact us or sign up for updates

• Prospective and current clients and their representatives

• Individuals who call phone numbers connected to voice agents we help deploy (where applicable)

3) Personal information we collect

We may collect the following categories of information:

A) Information you provide directly

• Contact details: name, email address, phone number, company name, job title

• Business details: service areas, operating hours, appointment preferences, CRM/calendar tools

• Messages and content: forms, emails, chat messages, call notes, support requests

• Billing info: invoices, payment confirmations (payment details are typically handled by payment providers rather than stored by us)

B) Information collected automatically (website usage)

• Device and usage data: IP address, browser type, device identifiers, pages viewed, referral URLs, and interaction data

• Cookies and similar technologies (see Section 10)

C) Information collected through voice and messaging systems (where applicable)

Depending on how your business (or your client’s business) is configured, voice agents may capture:

• Caller contact details (e.g., name, phone number)

• Call metadata (time, duration, routing, outcome)

• Call content (transcripts or recordings if enabled)

• Appointment details (requested times, address/service area, job type)

Note: Call recording/transcription is optional and configurable. See Section 8.

4) How we use personal information

We use personal information to:

• Provide, operate, and improve our website and services

• Respond to inquiries and provide demos and support

• Onboard clients and configure AI voice agents and automations

• Monitor performance, troubleshoot issues, and maintain security

• Send service updates, administrative messages, and (where permitted) marketing communications

• Comply with legal obligations and enforce agreements

5) Legal bases for processing (UK GDPR)

Where UK GDPR applies, we rely on one or more of these legal bases:

• Contract: to provide services you request or to take steps before entering a contract

• Legitimate interests: to run our business, improve services, prevent fraud, and secure systems (balanced against your rights)

• Consent: for certain marketing communications and non-essential cookies (where required)

• Legal obligation: to meet legal or regulatory requirements

6) How we share personal information

We may share personal information with:

• Service providers (processors): hosting, analytics, communications, automation/voice infrastructure, customer support tools, scheduling tools, and CRM/marketing tools

• Professional advisers: legal, accounting, compliance

• Authorities: if required by law, court order, or to protect rights/safety

We do not sell your personal information in the conventional sense.
If a U.S. state law defines certain disclosures as “sale” or “sharing” (e.g., for cross-context behavioral advertising), we aim to offer appropriate controls (see Section 12).

7) Key vendors and platforms we may use

Depending on the implementation, we may use platforms such as:

• Website/CRM and forms (e.g., GoHighLevel / HighLevel)

• Telephony/SMS providers

• Voice AI and automation orchestration tools (e.g., workflow automation, voice agent platforms)

• Calendar and productivity integrations (e.g., Google services)

• Database/hosting infrastructure

• Analytics tools

Your exact setup may vary by project. If you are a client, we can provide a list of your configured subprocessors on request.

8) Call recording, transcription, and AI interactions

Recording & transcription

Some deployments may enable call recording and/or transcription for:

• Quality assurance and training

• Debugging and performance improvement

• Dispute prevention and audit trails

• Compliance and security

Recording and transcription are configurable and may be turned off depending on your needs and applicable law.

Consent and compliance

Recording laws vary by U.S. state and other jurisdictions. Where required, we (or our clients) may provide:

• A disclosure that the caller is interacting with an automated assistant

• A notice that a call may be recorded/transcribed

• A mechanism to obtain consent, or alternative routing if consent is not provided

If you are a client, you are responsible for ensuring your customer-facing disclosures align with your local laws and business practices. We can help implement disclosures as part of configuration.

Automated decision-making

Our systems may use automated logic to:

• Route calls

• Determine whether a lead meets criteria (e.g., service area/job type)

• Suggest next steps or book appointments based on rules

You may request more information about how routing/qualification logic works in your deployment (see Section 11).

9) Data retention

We retain personal information only as long as necessary for the purposes described in this policy, including:

• The duration of a client relationship and a reasonable period after

• As needed for legal, accounting, or reporting obligations

• To resolve disputes and enforce agreements

Where call recordings/transcripts are enabled, we can set retention windows (e.g., 30/60/90 days) depending on client preference and compliance needs.

10) Cookies and tracking technologies

We use cookies and similar technologies to:

• Ensure the website works properly

• Understand usage and improve performance

• Measure marketing effectiveness (where enabled)

Where required, we request consent for non-essential cookies. You can control cookies through:

• Any cookie banner/consent tool we provide

• Your browser settings (which may affect site functionality)

11) Your rights (UK/EEA visitors)

If UK GDPR applies, you may have the right to:

• Access your personal information

• Correct inaccurate information

• Delete information in certain circumstances

• Restrict processing in certain circumstances

• Object to processing based on legitimate interests

• Data portability (in certain cases)

• Withdraw consent (where processing is based on consent)

To exercise rights, contact: [email protected].
We may need to verify your identity before responding.

Complaints

If you are in the UK and believe we have handled your personal information unlawfully, you can complain to the Information Commissioner’s Office (ICO).

12) U.S. privacy rights (state-specific)

Depending on your U.S. state of residence, you may have rights such as:

• Accessing the personal information we hold about you

• Requesting deletion

• Correcting inaccuracies

• Opting out of certain targeted advertising or “sharing” (as defined by state law)

To submit a request, email [email protected] with the subject line: “Privacy Request”.
We will respond in line with applicable law and may verify your request.

13) International transfers

We are based in the United Kingdom but may use service providers and infrastructure located in the United States and other countries.

Where UK GDPR applies and data is transferred internationally, we use appropriate safeguards, which may include:

• UK International Data Transfer Agreement (IDTA) or UK Addendum to SCCs

• Vendor security and contractual protections

• Additional technical and organizational measures where appropriate

14) Security

We implement reasonable technical and organizational measures designed to protect personal information, including access controls and secure configurations. No system is 100% secure, but we work to prevent unauthorized access, loss, or misuse.

15) Children’s privacy

Our website and services are not intended for children under 13 (or under 16 where applicable). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take appropriate steps.

16) Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those third parties. Please review their policies directly.

17) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date above.

18) Contact us

If you have questions about this Privacy Policy or our privacy practices, contact:
Email: [email protected]
Tile And Talk LTD