Privacy Policy

1. Introduction

TalkDin Limited ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered phone ordering system and related services (the "Service").

We are registered in England and Wales under company number 16974205, with our registered office at 3rd Floor, 86-90 Paul Street, London, United Kingdom.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, business name, and payment details
• Restaurant Information: Menu items, pricing, business hours, and location details
• Customer Data: Phone call recordings, transcripts, order details, and customer phone numbers processed through our Service

2.2 Automatically Collected Information

• Usage data, including call logs, call duration, and system interactions
• Device information, IP addresses, and browser types
• Performance and diagnostic data to improve our Service

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our AI phone ordering Service
• Process orders and facilitate communication between you and your customers
• Improve and personalize the Service based on your usage patterns
• Send you service updates, security alerts, and support messages
• Process payments and prevent fraudulent transactions
• Comply with legal obligations and enforce our Terms of Service
• Train and improve our AI models (using anonymized data only)

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

• Contract Performance: To provide the Service you've subscribed to
• Legitimate Interests: To improve our Service, prevent fraud, and ensure security
• Legal Obligation: To comply with UK laws and regulations
• Consent: Where you've provided explicit consent for specific processing activities

5. Data Sharing and Third Parties

We may share your information with:

• Service Providers: Vapi.ai (voice AI), Twilio (telephony), Stripe (payments), Supabase (database hosting)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties. All third-party service providers are contractually bound to protect your data and use it only for the purposes we specify.

6. Call Recording and Customer Data

Our Service records phone calls to process orders and improve AI performance. By using TalkDin, you acknowledge that:

• You are responsible for complying with applicable laws regarding call recording in your jurisdiction
• You must inform your customers that calls may be recorded
• Call recordings and transcripts are stored securely and encrypted
• You can request deletion of call recordings at any time

7. Data Retention

We retain your data for as long as:

• Your account is active
• Necessary to provide the Service
• Required by law (typically 6 years for tax and accounting purposes)

Upon account deletion, we will delete or anonymize your data within 90 days, except where retention is required by law.

8. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time (where consent is the legal basis)

To exercise these rights, contact us at info@talkdin.com

9. Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for data in transit
• Encryption at rest for sensitive data
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the United Kingdom. Where this occurs, we ensure adequate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
• Transfers to countries with adequacy decisions
• Compliance with the UK GDPR international transfer requirements

11. Cookies and Tracking

We use essential cookies to operate our website and Service. We do not use non-essential cookies without your consent. For more information, see our cookie banner when you first visit our site.

12. Children's Privacy

Our Service is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our Service. The "Last updated" date at the top of this policy reflects the most recent changes.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

15. Complaints

If you believe we have not handled your data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):