Privacy Policy for Grand Risings AI

Last Updated: 24 November 2025

1. Introduction

Welcome to Grand Risings AI ("we", "us", "our"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI receptionist services (the "Services"). This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purpose of the UK GDPR, the data controller is Grand Risings AI, located at 7 Albemarle Street, London, W1S 4HQ.

Our contact email for data protection matters is:[email protected]

.

2. What Information We Collect

We may collect and process the following types of personal data:

Data Category

Examples

Purpose

Identity Data

Full name, username, or similar identifier.

To identify you and personalize your experience.

Contact Data

Billing address, delivery address, email address, and telephone numbers.

To communicate with you and provide the Services.

Financial Data

Payment card details.

To process payments for the Services.

Transaction Data

Details about payments to and from you and other details of services you have purchased from us.

To maintain records of transactions.

Technical Data

Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our Services.

To ensure the security and proper functioning of our Services.

Usage Data

Information about how you use our website and Services.

To improve our Services and user experience.

Call Data

Voice recordings, call transcripts, caller ID information, and call duration of the phone calls handled by our AI receptionist on your behalf.

To provide the core functionality of our AI receptionist Services.

3. How We Use Your Information

We use the information we collect in the following ways, based on the legal grounds of contract necessity, legitimate interests, consent, and legal obligation:

•To Provide and Manage the Services: We use your Identity, Contact, and Call Data to fulfill our contract with you.

•To Process Payments: We use your Financial and Transaction Data to process payments for the Services.

•To Improve Our Services: We may use Usage and anonymized Call Data to analyze and improve the performance of our AI models and the overall Service, which is our legitimate interest.

•To Communicate With You: We use your Contact Data to send you service-related updates, invoices, and marketing communications where we have your consent or a legitimate interest.

•For Security and Compliance: We use Technical Data to protect against fraud and to comply with our legal obligations.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with the following categories of third parties:

•Service Providers: Such as payment processors (e.g., Stripe), cloud hosting providers (e.g., AWS, Google Cloud), and telephony service providers (e.g., Twilio) who help us operate our Services. These providers are contractually bound to protect your data.

•Professional Advisors: Including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.

•Legal Authorities: If required by law or in response to valid requests by public authorities.

5. International Data Transfers

As we serve a global clientele, your data may be transferred and stored outside the United Kingdom (UK). When we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

•We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK Secretary of State.

•Where we use certain service providers, we may use specific contracts approved by the UK which give personal data the same protection it has in the UK (known as Standard Contractual Clauses).

6. Your Data Protection Rights

Under UK GDPR, you have the following rights:

•The right to be informed: You have the right to be informed about the collection and use of your personal data.

•The right of access: You have the right to access your personal data.

•The right to rectification: You have the right to have inaccurate personal data rectified, or completed if it is incomplete.

•The right to erasure: You have the right to have personal data erased (also known as the "right to be forgotten").

•The right to restrict processing: You have the right to request the restriction or suppression of your personal data.

•The right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.

•The right to object: You have the right to object to the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at: [email protected]

7. Data Security and Retention

We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a "Last Updated" date and will be effective as soon as it is accessible. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

9. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us at: [email protected] You can also complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

Disclaimer: This is a template and not legal advice. You should consult with a legal professional to ensure this Privacy Policy is suitable for your specific business needs.