Data processing summary
Last updated:
1. Roles
The customer is the controller of the information about its callers and WhatsApp users. IK Cloud Solutions is the processor and acts on the customer’s documented instructions.
2. Subject matter and duration
We process information to answer calls and messages for the customer for as long as the service runs.
3. Categories of data
- Voice recordings and transcripts.
- Phone numbers.
- WhatsApp messages and profile names.
- Appointment and enquiry details.
4. Purpose limits, instructions and confidentiality
We use the information only to provide the service and for no other purpose. People who can access it are bound by confidentiality.
5. Security measures
We apply appropriate technical and organisational measures. The security page says what is true today.
6. Planned subprocessors, to be confirmed before launch
This list is a plan, not a commitment. We will tell customers before we add or replace a subprocessor.
| Provider | Purpose | Note |
|---|---|---|
| Vercel | Website hosting | |
| Resend | Transactional email | |
| Cloudflare | Turnstile spam protection | |
| Retell (planned) | Voice orchestration | |
| Telnyx (planned) | UK telephony carrier | |
| Meta | WhatsApp Business Platform | Also acts as an independent controller for some data. |
| To be confirmed | Large language model provider | Terms that rule out training on customer data are required. |
7. Help with data-subject requests
We help the customer respond to requests to access, correct or delete personal information.
8. Deletion and return
At the end of the contract we delete or return the information. Our proposed default for call recordings is [90] days, configurable by the customer.
9. Breach notification and audit
We tell the customer without undue delay after becoming aware of a personal data breach, and we make the information needed to show compliance available on request.
10. International transfers
Where a subprocessor handles information outside the UK, a lawful transfer mechanism is used. [Solicitor to confirm].
11. The full agreement
The full data processing agreement is provided on request or at order.