Privacy Policy
Last updated: [DATE]
This Privacy Policy explains how Callable ([registered company name], company number [number], of [registered address]) ("Callable", "we", "us") collects, uses and protects personal data. It applies to our website, and to the accounts we provide to business customers.
Callable is a communications platform. For most of the personal data that flows through our services — the calls, messages and recordings your organisation sends and receives — your organisation is the data controller and Callable acts as a data processor on your instructions, under the terms of our agreement and Data Processing Addendum. For your own account and our website, Callable is the controller; that is what this policy covers.
Who we are
Callable provides cloud voice, messaging, AI and connectivity for businesses. If you have any questions about this policy or how we handle personal data, contact privacy@callable.io.
Personal data we collect
- Account data — name, business email, phone number, job role and company, and the credentials you use to sign in.
- Usage and service records — call detail records (numbers, timestamps, duration, routing and cost), message metadata, delivery status, feature usage and audit logs. Where your organisation enables it, this may include recordings and transcripts of calls and messages.
- Billing data — the information needed to invoice and take payment for your account.
- Website data — pages visited, approximate location derived from IP, device and browser information, and anything you submit through our contact form.
- Support data — the content of your correspondence with our team.
How and why we use it
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Providing and operating your account | Performance of a contract |
| Routing, delivering and billing communications | Performance of a contract |
| Security, fraud prevention and network protection | Legitimate interests |
| Support and service communications | Performance of a contract / legitimate interests |
| Improving and developing our services | Legitimate interests |
| Legal and regulatory compliance (incl. telecoms rules) | Legal obligation |
| Marketing to business contacts | Legitimate interests / consent where required |
Sharing your data
We share personal data only as needed to run the service: with the carriers and messaging providers that terminate your calls and messages; with vetted sub-processors (for example cloud hosting and, where you enable them, AI, speech-to-text and text-to-speech providers); with payment and professional service providers; and where required by law, regulation or a valid legal request. We do not sell personal data.
International transfers
Our platform is hosted in the United Kingdom / European Union. Where personal data is transferred outside the UK or EEA, we rely on an adequacy decision or appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.
Retention
We keep personal data for as long as your account is active and as needed for the purposes above. Service records and recordings are retained according to your account's configuration and our legal and billing obligations, then deleted or anonymised.
Your rights
Subject to UK GDPR, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. Where processing relies on consent, you can withdraw it at any time. To exercise a right, contact privacy@callable.io. If the personal data concerned was processed on behalf of our business customer, we will refer the request to that customer as controller.
You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
Cookies, security and changes
Our website uses limited cookies — see our Cookie Policy. We protect personal data as described in our Security statement. We may update this policy; the "last updated" date above shows when, and we will flag material changes.
Contact: privacy@callable.io · [registered address].