Call MaggiePrivacy policy
Last updated 1 November 2026. For a shorter, plain-English version for business owners, see how we look after your data.
This policy explains what personal information Sunny Socials Ltd handles, why we handle it, who we share it with, how long we keep it and how to have it deleted.
1. Who we are
Call Maggie is a trading name of Sunny Socials Ltd. Sunny Socials Ltd is a company registered in England and Wales, company number 16668367. Our registered office is 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.
We are registered with the Information Commissioner's Office, registration number ZC118212.
For anything in this policy, including a request to see or delete your information, write to info@sunnysocialsltd.com or call 07503 423527.
2. What this policy covers
We handle personal information in two different roles, and your rights are exercised differently in each.
When you contact a business that uses our AI receptionist. We provide Call Maggie, an AI receptionist that answers phone calls, text messages and WhatsApp messages for small businesses such as plumbers, salons, clinics and garages. When you call or message one of those businesses, that business decides why and how your information is used. It is the controller of your information, and we handle it on its instructions as its processor. Sections 3 and 4 describe what happens to your information.
When you are our client, or enquire about our services. Here we decide how your information is used, and we are the controller. This includes calling or texting our own number and trying Maggie on our website. Section 5 covers this.
This policy also applies to information we receive through Meta's WhatsApp Business Platform. Section 4 sets out what we receive and what we do with it.
3. If you call or message a business that uses our AI receptionist
The receptionist is an AI assistant. On a phone call it says so at the start and tells you the call is recorded. In a message it says so if you ask.
What is collected
- The phone number you call or message from, and any other contact number you give.
- Your name, the address and postcode of the job, and what you tell the receptionist about the work.
- A recording and a written transcript of each phone call.
- The content of your text and WhatsApp messages.
- A short written description of any photo you send. The photo is looked at once to produce that description. We do not keep the photo.
- The appointment made for you: the service, the date and the time.
We do not ask for, and the receptionist is instructed never to take, card details. Where a business asks for a deposit, you pay on a page run by Stripe, and we never see your card number.
The business you called can listen to the recording of your call, and read the transcript, for 30 days. After that both are deleted.
What it is used for
- To answer your enquiry, book your appointment and pass messages to the business.
- To check that the address exists, using your postcode.
- To confirm your booking, remind you of it the evening before, and let you move or cancel it.
- To tell you if the engineer is running late.
- To ring you back, only when you have asked for a call.
- Where the business has chosen these: to ask for a review after the job, to tell you when a yearly service is due, to offer you an earlier time if one becomes free, and to send one message the day after an enquiry that did not become a booking.
If a business you have used before gave us your details
A business may give us a list of its own past customers: the name, the mobile number, the service carried out and the date. It does this so that the receptionist can send a reminder when that service is due again, for example a boiler service, an MOT or a regular appointment.
That list belongs to the business, and the business is responsible for it. Before a list is accepted, the business must confirm to us that everyone on it is its own customer, gave their number when booking or enquiring, was told they could say no to messages, and has not asked the business to stop. We do not check a list against those conditions and rely on the business's confirmation. The business, not Sunny Socials Ltd, is answerable for whether it was entitled to contact you.
We hold a list only on the business's instructions and use it only to send that business's reminders. Every reminder says how to stop them. If you receive one you did not expect, reply STOP, and contact the business that sent it. You may also write to us at info@sunnysocialsltd.com and we will remove your details and tell the business.
The legal basis
The business you contacted decides the legal basis. It is normally that the business has a legitimate interest in answering and dealing with your enquiry, and that the steps are needed to arrange a job you have asked for.
Stopping messages
Reply STOP to any text message and you will receive no more review requests, service reminders or offers from that business. You will still be sent a confirmation and a reminder of any booking you make. Reply START to undo this.
Who to ask
To see, correct or delete your information, contact the business you called or messaged. You may also write to us at info@sunnysocialsltd.com, and we will act on the request with that business.
4. WhatsApp and information received through Meta
Our app, Sunny Socials, connects a business's own WhatsApp number to the AI receptionist using Meta's WhatsApp Business Platform. It is used only by businesses that have signed up to our service and have connected their number themselves.
What we receive through the platform
- The phone number and WhatsApp profile name of a person who messages the business.
- The messages and photos that person sends to the business.
- Notice that the business owner has replied from their own phone. The receptionist then stays out of that conversation for four hours.
- The business's WhatsApp number, display name and account details.
What we do with it
We use it for one purpose: to reply to that person on behalf of the business they wrote to, and to book, move or cancel their appointment with that business.
What we do not do with it
- We do not sell it or share it with anyone for their own use.
- We do not use it for advertising, or to build a profile of anyone.
- We do not combine one business's customers with another's. Each business's information is kept apart.
- We do not send marketing messages over WhatsApp.
- We do not use it to train artificial intelligence models.
Deleting it
A WhatsApp conversation held by the receptionist is deleted automatically one day after its last message. To have everything connected to your phone number deleted sooner, including any booking record we hold, email info@sunnysocialsltd.com from any address and give the phone number and the name of the business you messaged. We will delete it within 30 days and confirm when it is done. Section 9 says more about your rights.
A business that stops using our service can ask us to delete all information received through its WhatsApp number. We do so within 30 days of the service ending.
5. If you are our client, or enquire about our services
What we collect
- Your name, business name, phone number and email address.
- What you tell us when setting up the service: your working hours, the areas you cover, your services and prices, and your diary arrangements.
- Your agreement to our terms, including your signature.
- Records of what the receptionist did for you: the number and length of calls, bookings made and messages passed on.
- Billing records. Payments are taken by Stripe. We see whether a payment succeeded and the last four digits of a card, never the full card number or bank details.
- Emails and messages you exchange with us.
If you call or text our own number, or try Maggie on our website
Our own line, 07367 083603, is answered by Maggie, who explains our service. Calls are recorded and transcribed, and kept for 30 days. We keep your number, and your name and business if you give them, for 30 days so that we can follow up, and we send ourselves a short note of what you asked. If you ask for it, Maggie texts you a link to our website or to start a trial and, if you agree, one reminder the next morning. Reply STOP and no more are sent.
When you press Talk to Maggie on our website, the call is handled the same way. If you ask to hear her as your own business, we read the public pages of the website address you give us to write her greeting, and delete that preview within three days.
What we use it for, and the legal basis
| Purpose | Legal basis |
|---|---|
| Setting up and running the service you have ordered, and billing for it | Performance of our contract with you |
| Telling you about a failed payment or a suspension of the service | Performance of our contract with you |
| Answering an enquiry and sending a proposal you asked for | Steps taken at your request before a contract |
| Contacting a business about our services | Our legitimate interest in finding clients. Every message says how to stop further contact |
| Keeping accounting and tax records | Legal obligation |
| Finding and fixing faults, and preventing misuse | Our legitimate interest in running a reliable service |
6. Who we share information with
We do not sell personal information. We share it only with the business you contacted and with the companies below, which process it for us under contract and may use it only to provide their service to us.
| Company | What it does | What it handles | Based in |
|---|---|---|---|
| Retell AI | Runs the phone conversation: speech recognition, the voice, the recording and transcript | Call audio, transcript, caller's number | United States |
| Twilio | Provides the phone numbers and carries calls and text messages | Phone numbers, text message content | United States |
| Meta (WhatsApp Business Platform) | Carries WhatsApp messages to and from a business's number | Phone number, profile name, messages, photos | United States and Ireland |
| Anthropic | Provides the AI model that writes replies to messages, describes photos and helps new clients set up | Message content, photos, public website pages a business asks us to read | United States |
| Cloudflare | Hosts our system, the records listed in section 8 and the Call Maggie website | All records listed in section 8 | United States, with servers worldwide |
| Holds the diary, where a business uses Google Calendar | Appointment details | United States and Ireland | |
| Microsoft | Holds the diary, where a business uses Outlook | Appointment details | United States and Ireland |
| Stripe | Takes payments | Payment details, name, email | United States and Ireland |
| Ideal Postcodes | Looks up the addresses at a postcode, including through its free postcodes.io service | Postcode only | United Kingdom |
| Wix | Hosts www.sunnysocialsltd.com and its contact form | Enquiry details | Israel and United States |
We will also disclose information where the law requires it, for example to a court or a regulator.
7. Transfers outside the United Kingdom
Several of the companies in section 6 are based in the United States, so information is processed there. In particular, phone calls are processed in the United States by Retell AI, and messages by Anthropic.
Where information leaves the United Kingdom, we rely on one of the safeguards recognised by UK data protection law: the UK extension to the EU-US Data Privacy Framework, where the company is certified under it, or the International Data Transfer Addendum issued by the Information Commissioner's Office. You may ask us which applies to a particular company.
8. How long we keep information
The records the receptionist keeps are deleted automatically at the end of the period shown. The last two rows are our own business records, which we delete ourselves.
| Record | Kept for |
|---|---|
| Recording and transcript of a phone call | 30 days |
| Text or WhatsApp conversation with the receptionist | 1 day after the last message |
| A message taken for the business | 30 days |
| An appointment in the business's own calendar | As long as the business keeps it. The business controls its calendar |
| An appointment in our built-in diary | 90 days after the appointment |
| Name and address held against a phone number, so a returning customer need not repeat them | 18 months after the last booking |
| Reminder that a yearly service is due: name, postcode and the service | About 14 months after the booking |
| Details of past work given to us by a business from its own records: name, mobile number, the service and its date | Until 90 days after the reminder is sent, and about 14 months at most |
| A note of an enquiry that did not become a booking | 4 days |
| The code sent to confirm a change to a booking | 10 minutes |
| A record that you asked not to be messaged | Until you ask to be messaged again. It is kept so that the request is honoured |
| Counts of calls and bookings, with no names or phone numbers | 400 days |
| Fault records, with phone numbers removed | 14 days |
| Details you give on our own sales line, so that we can follow up | 30 days |
| A preview of Maggie as your business, made on our website | 3 days |
| Our clients' account and billing records | 6 years after the contract ends, as tax law requires |
| Enquiries from people who did not become clients | 2 years after the last contact |
9. Your rights, and how to have your information deleted
Under UK data protection law you have the right to:
- be told what information is held about you and receive a copy of it;
- have it corrected if it is wrong;
- have it deleted;
- object to its use, or ask for its use to be restricted;
- stop marketing messages at any time.
How to ask
Email info@sunnysocialsltd.com or call 07503 423527. Tell us the phone number you called or messaged from and, if you can, the name of the business you contacted. You do not need to give a reason and there is no charge.
We reply within one month. A request to delete is carried out within 30 days, and we confirm in writing when it is done. Deletion covers our own records. Copies held by the companies in section 6 are deleted on our instruction, or at the end of those companies' own retention periods. If your appointment is in a business's own calendar, we pass your request to that business, which controls that calendar.
We may need to keep a small amount of information where the law requires it, for example an invoice. We will tell you if that applies.
10. Security, and how artificial intelligence is used
Security
- Information is encrypted while it travels between you, us and the companies in section 6.
- Every message our system receives from a phone or messaging company is checked to be genuine before it is acted on.
- Each business's records are kept apart from every other's.
- A booking can be changed only from the phone number it belongs to. A change asked for by text message must be confirmed with a code sent to that number.
- Customers' phone numbers are removed from our fault records.
- Access to our systems is limited to Sunny Socials Ltd.
If a breach of security puts your information at risk, we will tell the business concerned and, where the law requires, the Information Commissioner's Office and you.
Artificial intelligence
The receptionist uses AI models to understand what you say or write and to reply. Photos are read by an AI model to produce a short description for the business.
The AI does not decide anything about you that has a legal or similarly significant effect. It offers appointment times from the business's diary, and prices from the business's own price list. Anything it cannot deal with is passed to a person at the business.
We do not use your calls or messages to train AI models.
11. Our websites, changes to this policy, and complaints
Our websites
When you send us an enquiry through www.sunnysocialsltd.com we receive the details you enter and use them to reply. That website is hosted by Wix, which sets cookies needed for the site to work and, with your consent, cookies that measure visits. You can change your choice at any time using the cookie banner on the site.
The Call Maggie website is hosted by Cloudflare and sets no cookies. Its pages load fonts from Google, which sees your device's internet address. Section 5 says what happens when you talk to Maggie there.
Children
Our services are for businesses and their adult customers. We do not knowingly collect information about children.
Changes to this policy
We will update this page when what we do changes, and show the date of the latest version at the top. If a change is significant we will tell our clients directly.
Complaints
If you are unhappy with how your information has been handled, please contact us first at info@sunnysocialsltd.com so that we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.