Privacy notice
What we collect, why, who we share it with and how long we keep it.
Last updated: 18 October 2026
Who we are
HOWLITEWORKS LTD (trading as HowliteWorks), registered in England and Wales, company number 17221572, registered office 13a Elmsleigh Park, Paignton, TQ4 5AT. Email: howliteworksltd@gmail.com.
We haven't appointed a data protection officer. For anything about your personal information, email us at the address above.
Our two roles
As a controller. We decide how and why we use personal information about people who visit this website, ask for a demo, become our clients, or whom we contact about our services. This notice covers that information.
As a processor. When we run an AI receptionist, missed call recovery, bookings, quotes or invoicing for a business, we handle their callers' and customers' information on that business's behalf and under their instructions. In that case, the business you called is the controller and its own privacy notice applies. Our page on how calls are handled explains what happens to callers' information.
What we collect and why
| Information | Why we use it | Lawful basis |
|---|---|---|
| Demo form: your name, business name, email, phone, trade, call volume and message | To reply, arrange your demo, prepare a quote and follow up about it | Legitimate interests (responding to enquiries), and steps you ask us to take before a contract |
| Emails and messages you send us | To reply and keep a record of what was agreed | Legitimate interests |
| Client details: contact names, email, phone, billing and contract details | To set up and run the service, provide support and invoice you | Contract, and legal obligation for accounting records |
| Business contact details from public sources, such as a company website or directory | To tell businesses about our service | Legitimate interests. You can object at any time and we'll stop |
| Technical data our host records when you visit, such as IP address, browser and pages requested | To deliver the website and keep it secure | Legitimate interests |
| Anonymous visit statistics from Cloudflare Web Analytics | To see which pages are used and improve the site | Consent. It only runs if you accept, and you can change your choice at any time in Cookie settings |
| Data protection complaints and requests about your rights | To handle them and keep a record of what we did | Legal obligation |
When we send marketing emails, texts or make calls to businesses, we follow the Privacy and Electronic Communications Regulations, including the rules for sole traders and partnerships. Every marketing email includes a way to opt out.
Who we share it with
We use trusted providers to run our business. They only use your information to provide their service to us.
- Netlify, Inc.: website hosting and the demo form
- Google LLC: email
- Cloudflare, Inc.: anonymous website analytics
- HighLevel, Inc.: lead management and client messaging
- Vapi: the voice assistant platform behind the AI receptionist
- OpenAI (language model), Soniox (speech-to-text) and ElevenLabs (the assistant's voice), used through Vapi
- Twilio Inc.: phone calls and text messages
- Stripe: payments, invoicing and Direct Debit collection
- Professional advisers such as accountants and solicitors, and public authorities where the law requires it
International transfers
Some of these providers are based in, or process data in, the United States. When personal information is transferred outside the UK, it's protected by an approved mechanism:
- Netlify, Google, Cloudflare, Twilio and Stripe are certified to the UK Extension to the EU–US Data Privacy Framework (the UK–US data bridge).
- For HighLevel, Vapi and the providers Vapi uses for us, we rely on the UK–US data bridge where the provider is certified to it, and otherwise on standard contractual clauses with the UK International Data Transfer Addendum, set out in their data processing terms.
How long we keep it
| Information | How long |
|---|---|
| Demo requests and enquiries that don't lead to a contract | 12 months after our last contact |
| Client contract and billing records | 6 years after the contract ends |
| Business contact details used for marketing | Until you object, or 12 months after our last contact |
| Call recordings we hold for clients | 90 days, unless the client asks for a shorter period |
| Call transcripts, lead details, quotes and invoices we hold for clients | While the client uses our service, then deleted or returned within 30 days of the contract ending |
| Data protection complaints and rights requests | 2 years after the complaint or request is closed |
| Website server logs | Held by our host, Netlify, for a limited period under its own retention policy |
Your rights
You have the right to:
- ask for a copy of your personal information
- ask us to correct anything that's wrong
- ask us to delete it
- ask us to limit how we use it
- object to us using it, including for marketing
- ask us to send it to you or another organisation in a reusable format
- complain to us about how we've handled it (see below)
Where we rely on your consent, such as for website analytics, you can withdraw it at any time in Cookie settings. This doesn't affect anything we did before you withdrew it.
Email howliteworksltd@gmail.com to use any of these rights. We'll reply within one month. There's no charge in most cases.
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. The AI receptionist collects details from callers; people at the business decide what happens next.
Keeping it safe
The website runs over HTTPS. Access to client and caller information is limited to the people who need it to run the service, and we choose providers that commit to protecting the data they handle for us.
Complaints
If you're unhappy with how we've handled your personal information, please tell us first so we can put it right. Email howliteworksltd@gmail.com. You don't need to use a form or mention data protection law.
We'll acknowledge your complaint within 30 days, look into it without undue delay, keep you updated, and tell you the outcome in writing.
If your complaint is about a call to a business that uses our AI receptionist, that business is responsible for your information. We'll pass your complaint to them straight away and help them respond.
If you're still unhappy, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
We'll update this page if anything changes. The date at the top shows when it was last updated.