Data processing agreement
Version 1 · 14 October 2026 · Part of the Belgrave Line terms of service
This agreement covers the personal data of the people who ring your business and are answered by Belgrave Line. It applies automatically when you subscribe and forms part of our terms. "You" are the business that subscribes (the controller). "We" are Mouhammed Tellai, trading as Belgrave Line (the processor).
1. What we process and why
- Purpose: answering calls forwarded from your phone, taking the caller's details, and sending you a summary so you can call them back. Also showing you call records (for example a weekly summary or dashboard).
- People: callers to your business (customers, prospective customers and anyone else who rings).
- Data: phone number, name, address and postcode, details of the job or request, how urgent it is, the call recording, the transcript and the summary. We don't ask for special category data. If a caller volunteers it (for example a health detail), it may appear in the recording or transcript.
- Duration: for as long as your subscription runs, plus the deletion period in section 7.
2. Your instructions
We process caller data only to provide the service as described in our terms and as you set it up (your greeting, questions and where summaries go), or on your other written instructions, including by text or email. If we are ever required by law to do something else, we will tell you first unless the law forbids it. If we think an instruction breaks data protection law, we will tell you.
3. Your responsibilities
You decide why caller data is used and you must have a lawful basis for it. You are responsible for telling your callers how you use their data, for example with a privacy notice on your website. We can give you a short template. The assistant tells every caller that it is an AI assistant and that calls may be recorded.
4. Confidentiality and security
Only Mouhammed Tellai, and anyone we bring in who is bound by confidentiality, can access caller data, and only to run the service. We use accounts protected by strong passwords and two-factor authentication where available, encrypted connections, access limited to what is needed, and suppliers with recognised security standards.
5. Sub-processors
You give us general permission to use these suppliers to run the service:
- ElevenLabs (voice assistant, recordings and transcripts; US)
- Twilio (phone numbers, call routing and text messages; US)
- n8n (automation that sends summaries)
- Google (spreadsheets that hold call records; US)
- Supabase (database)
- Cloudflare (website hosting)
We will give you at least 14 days' notice by text or email before adding or replacing a sub-processor. You can object, and if we can't resolve it you can cancel without charge for the remaining period. We give each sub-processor data protection terms that are at least as protective as these, and we remain responsible to you for them.
6. Transfers outside the UK
Some suppliers process data in the US. Those transfers rely on the UK–US data bridge (the UK Extension to the EU–US Data Privacy Framework) or the UK's approved contract clauses or addendum.
7. How long we keep it, and deletion
- Call recordings: 30 days. Transcripts and summaries: 90 days. Unless you ask us in writing for a different period.
- Text messages we send you stay on your phone and are under your control.
- When your subscription ends, we delete caller data within 30 days. If you ask before it ends, we first send you a copy of your call records.
8. Helping you
We will help you, as far as reasonably possible, to answer requests from callers exercising their rights (for example to see or delete their data), to keep data secure, to deal with data breaches, and with any data protection impact assessment. If a caller contacts us directly about your calls, we pass the request to you without delay.
9. Data breaches
If we become aware of a personal data breach affecting your caller data, we will tell you without undue delay and within 48 hours. We will tell you what happened, what data is affected, and what we are doing about it, so you can decide whether to report it to the ICO.
10. Audits and information
We will give you the information you reasonably need to show that this agreement is being followed, and we will answer reasonable written questions within 14 days.
Appendix: notice for your callers (template)
Put this on your website's privacy page, filling in the brackets. It's a template, not legal advice.
When you ring [Your business] and we can't answer, your call is answered by our AI assistant, provided by Belgrave Line. It tells you it's an AI and that the call may be recorded. It takes your name, number, address and details of the job, and sends them to us so we can call you back. We use these details to respond to your enquiry and to provide our services, which is in our legitimate interests or needed to enter into a contract with you. Recordings are kept for 30 days and transcripts for 90 days. Our suppliers process the call for us, some of them in the US, under recognised safeguards. You can ask us to see, correct or delete your details by contacting [email / phone]. You can complain to the ICO at ico.org.uk.
11. General
If this agreement and our terms disagree about personal data, this agreement wins. It is governed by the law of England and Wales.
Questions: [email protected] · 07541 137781