GDPR

Roles

For website visitors and account holders, VoxBulk Ltd is the data controller. For end-user data processed through the platform, VoxBulk acts as the data processor on behalf of the customer (the controller).

Data Processing Agreement

Every business customer accepts our Data Processing Agreement at signup (required checkbox). A PDF copy is available on request from Data.Pro@voxbulk.com. It covers Article 28 obligations, sub-processor categories, breach notification and assistance with data subject requests.

Retention

Call recordings and full transcripts: 30 days by default. Other operational data on our servers: 90 days by default. Account and billing records are kept longer as described in the Privacy Policy.

Security

Data is encrypted in transit and at rest. Storage and processing are intended for UK / EU data centres. Access is role-based, logged and reviewed.

Data subject rights

End users should contact the customer that initiated the conversation. Customers can use the dashboard or email Data.Pro@voxbulk.com to action requests.

Regulatory

VoxBulk Ltd operates in accordance with UK GDPR, the Data Protection Act 2018 and PECR.