Privacy Policy

Effective date: 24 August 2026 · Last updated: 24 August 2026

BeauScaled ("BeauScaled", "we", "us", "our") is a sole trader based at 10 Park Crescent, Falmouth, Cornwall, TR11 2DL, United Kingdom, providing AI-powered voice agents, lead reactivation, website development and related AI-agency services (the "Services"). This Privacy Policy explains how we collect, use, share and protect personal data, and applies to visitors of beauscaled.com, our clients, and prospective clients.

We are committed to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and — where relevant to clients or contacts based elsewhere — with equivalent frameworks such as the EU GDPR and the California Consumer Privacy Act (CCPA).

1. Two Roles We Play

Because of the nature of our Services, we handle personal data in two distinct capacities, and it's important you understand the difference:

• As a Data Controller — for data about you as our client or prospective client (e.g. your name, email, phone number, payment details, and communications with us). We decide how and why this data is used.
• As a Data Processor — where you are our client and we operate an AI voice agent, send SMS/email reactivation messages, or otherwise contact your customers or leads on your behalf. In this case, your customers' data (call recordings, transcripts, SMS content, contact details) is processed strictly on your instructions, for the purpose of delivering your Services. You remain the data controller for your own customers' data, and you are responsible for having a lawful basis (including any consent required under PECR) to have us contact them. Terms governing this processing are set out in our Terms of Service and, where applicable, a separate Data Processing Agreement.

2. Information We Collect

From clients and prospective clients

• Name, email address and phone number
• Billing and payment information (processed by Stripe — we do not store full card details)
• Business information relevant to onboarding and configuring your Services
• Correspondence with us (email, forms, calls)

Processed on behalf of clients (as processor)

• Call recordings and transcripts handled by the AI voice agent
• SMS and email messages sent as part of lead reactivation
• Booking and calendar data
• Any other customer contact data you provide or connect via your CRM

From website visitors

• Usage and analytics data (pages visited, device/browser type, approximate location) via cookies and similar technologies
• Information you submit through contact or booking forms

3. How We Use Your Data

Purpose	Legal basis (UK GDPR)
Providing and operating the Services you've purchased	Performance of a contract
Billing and payment processing	Performance of a contract / legal obligation
Customer support and account communications	Performance of a contract / legitimate interests
Improving and securing our website and Services	Legitimate interests
Website analytics (e.g. Google Analytics / advertising pixels)	Consent (via cookie banner)
Marketing about our own Services	Consent, or legitimate interests for existing clients (soft opt-in)

4. AI & Automated Processing

Our Services use AI (including third-party AI/voice models) to answer calls, hold conversations, draft messages, and re-engage leads on behalf of our clients. We do not use client or end-customer data to train, fine-tune, or improve any AI model — data is used only to deliver the specific Service you've engaged us for. Our AI systems assist with communication and scheduling; they are not used to make decisions producing legal or similarly significant effects about individuals without human involvement.

5. Cookies & Analytics

Our website uses cookies and similar tools, which may include Google Analytics and/or advertising pixels (e.g. Meta Pixel), to understand how visitors use the site. You can control or disable cookies through your browser settings; non-essential analytics cookies will only be set with your consent where required by law.

6. Who We Share Data With

We share personal data with trusted service providers who help us run BeauScaled and deliver your Services, including:

• Cloudflare — website hosting and infrastructure
• Stripe — payment processing
• GoHighLevel (GHL) — CRM, SMS/email delivery, calendar and workflow automation
• AI/voice service providers used to power the voice agent
• Analytics providers (e.g. Google Analytics)

We do not sell personal data. We may disclose data if required by law, to protect our rights, or in connection with a business transfer.

7. International Data Transfers

Some of our service providers (including Cloudflare, Stripe and GoHighLevel) may store or process data outside the UK, including in the United States. Where this happens, we rely on appropriate safeguards recognised under UK GDPR, such as the UK International Data Transfer Agreement (IDTA), the EU Standard Contractual Clauses with the UK Addendum, or an applicable adequacy decision.

8. Data Retention

• Client account and billing data: retained for the duration of our engagement and for up to 6 years afterwards, to meet UK tax and accounting obligations.
• Call recordings, transcripts and SMS/email content processed on a client's behalf: retained for the duration of the engagement plus up to 12 months, unless the client instructs earlier deletion or a different retention period.
• Website analytics data: retained according to the applicable analytics provider's standard retention periods.

These are our default retention periods. Clients may request a different retention or deletion schedule for data processed on their behalf at any time.

9. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure ("right to be forgotten")
• Restrict or object to certain processing
• Request data portability
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us using the details below. If your request relates to data we process on behalf of one of our clients, we may direct you to that client as the data controller.

10. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted (HTTPS/TLS) connections, access limited to authorised personnel, and reputable service providers that maintain their own industry-standard security practices. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our Services are intended for individuals aged 18 and over and for businesses. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above. Continued use of our website or Services after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

For any privacy questions or to exercise your rights, contact:
BeauScaled
10 Park Crescent, Falmouth, Cornwall, TR11 2DL, United Kingdom
hello@beauscaled.com