Legal · Privacy & GDPR
Privacy
Policy
We take your privacy seriously. Here’s a clear explanation of who we are, what we collect, and the rights you have under UK GDPR.
Please read this Privacy Policy carefully. It contains important information on who we are, how and why we collect, store, use and share any information relating to you (your personal data) in connection with your use of our website. It also explains your rights in relation to your personal data, and how to contact us or a relevant regulator should you have a complaint.
Who we are
This Privacy Policy and the website belong to Guideazy®, a registered trademark and trading name of Guidizy Ltd (referred to in this Privacy Policy as “Guideazy”, “we”, “us” or “our”). Registered in England & Wales (Company No: 16084610). We are a B2B Software-as-a-Service company providing human-touch ‘click-2-call’ communication services for businesses. For more information, see https://guideazy.com.
We collect, use and are responsible for certain personal information about you. When we do so, we are regulated under the UK General Data Protection Regulation (UK GDPR), which applies in the United Kingdom. We act as the ‘controller’ of personal information collected through our website — meaning we are the organisation legally responsible for deciding how and for what purposes it is used.
Our website
This Privacy Policy relates to your use of our website at https://guideazy.com.
Our website may link to other websites owned and operated by trusted third parties to enhance the services available to you. Those third-party websites may also collect information about you in accordance with their own privacy policies. For privacy information about those sites, please consult their policies directly.
Our collection and use of your personal information
We collect personal information about you when you access our website, register with us, contact us, use the Guideazy Button to access our click-2-call service, send us feedback, purchase services via our website, post material to our website, and complete customer surveys or participate in competitions.
We collect this information directly from our customers (who are businesses) when they register, contact us, or use the Guideazy Button to seek human-touch click-2-call services. We may also collect information indirectly from End Customers(our customers’ end users, potential customers, or visitors to a customer’s website) who click the Guideazy Button to seek click-2-call help for a particular product or service — including browsing activity data (see ‘Cookies’ below).
The personal information we collect depends on the activities carried out through our website, and may include:
- Your name, address and contact details
- Details of any feedback you give us by phone, email, post or social media
- Information about the services we provide to you
- Your account details, such as username and login credentials
- Information about your company
We use this personal information to:
- Populate our questionnaire when you request services from us
- Create and manage your account with us
- Verify your identity
- Send you a tailored report based on the questions you have answered
- Improve the services we provide to you
Children: This website is not intended for use by children, and we do not knowingly collect or use personal information relating to children.
Our legal basis for processing your personal information
When we use your personal information, we are required to have a legal basis for doing so. Depending on what we process and why, the legal bases we may rely on include:
Consent
Where you have given us clear consent to process your personal information for a specific purpose.
Contract
Where processing is necessary for a contract we have or are negotiating with you, or because you have asked us to take specific steps before entering into a contract.
Legal obligation
Where processing is necessary for us to comply with the law (excluding contractual obligations).
Vital interests
Where processing is necessary to protect your life or someone else's.
Public task
Where processing is necessary to perform a task in the public interest or for our official functions, with a clear basis in law.
Legitimate interests
Where processing is necessary for our legitimate interests or those of a third party, unless those interests are overridden by your rights and freedoms.
What we collect, when and how
For further details on when we collect personal information, what we collect, and how we use it:
Scenario
When customers browse our website
What we ask for
Device data:
- Operating system type and version
- Browser type
- Screen resolution
- IP address
- Unique device identifiers
Browsing data:
- How many times you visit the website in a given timeframe
- Sites you visited before browsing to ours
- Pages you viewed and how long you spent on each
- Interactions with marketing emails (clicks on links or CTAs)
- Date and time of activity
How & why we use it
Scenario
When customers sign up for a Free or Paid Subscription plan
What we ask for
Personal & company information:
- First and last name
- Company email address
- Contact number
- Company name
- Your role at the company
- Company contact address
Payment information:
- Credit card information
Device data:
- OS type and version, browser, screen resolution, IP address, device IDs
How & why we use it
All information is stored and used in accordance with this Privacy Policy. We retain it until your account is closed.
Payment information processing:
Payment information is processed by Stripe, a third-party payment processor. Your payment details are not stored in our application systems or databases. See Stripe’s privacy policy for details.
Scenario
When a customer clicks the Guideazy Button on our website
What we ask for
The Guideazy Button opens a short form that captures the following before establishing the click-2-call session:
- First and last name
- Email address
- Contact number
How & why we use it
Scenario
When End Customers click the Guideazy Button on a customer's website
What we ask for
Depending on the customer’s configuration, the Guideazy Button may open a short form to capture:
- First and last name
- Email address
- Contact number
How & why we use it
B.4Log retention and data minimisation
To enforce GDPR data minimisation principles, platform logs adhere to a strict dual tier timeline:
90 Days
Hot Storage
Active chat transcripts and workflow telemetry are fully accessible via the Customer dashboard.
12 Months
Cold Storage
At day 91, logs are compressed into an archival database partition, after which they are permanently and irrevocably deleted.
Customers may customise these retention windows via their administrative dashboard.
B.5Cross border engineering access (UK/EU and India)
While all customer production data resides permanently on Sovereign EU Cloud hardware, Guideazy utilises an international engineering and technical support framework. Level 3 DevOps and Support Engineers located in India may access diagnostic telemetry or isolated application environments solely for system maintenance, debugging, or troubleshooting.
To legally protect these cross border support interactions, Guideazy enforces strict EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum (IDTA) internally across all international operations.
B.6Inbound webhook disclaimer (NEXUS gateways)
B.7Data subject access request (DSAR) routing
As a Data Processor, Guideazy cannot directly interact with or respond to privacy requests initiated by Your end users.
End User Requests
If Guideazy receives a DSAR from Your end user, we will log the request and route it directly to Your designated Data Protection Officer (DPO) via the platform dashboard.
SaaS Client Requests
If You or Your DPO require technical assistance from Guideazy to fulfil a complex data extraction or deletion mandate that cannot be executed natively via the GUARDIAN administrative panel, Guideazy will respond and assist Your team within a strict 72 hour SLA from official notice.
B.8Data breach notification SLA
In the event of a verified security compromise or unauthorised access impacting Guideazy infrastructure or its sovereign cloud sub processors, Guideazy will notify all affected Data Controllers (Our Clients) within 72 hours of formal internal confirmation. Guideazy will provide ongoing forensic updates, affected record scopes, and mitigation strategies to assist Clients in fulfilling their regulatory disclosure obligations to the UK ICO or EU Data Protection Authorities.
B.9Platform transactional email routing
While core AI processing, vector embeddings, and database storage remain exclusively on Sovereign EU Cloud infrastructure, the Platform utilises specialised third party transport providers (for example SendGrid) strictly to route outbound transactional email notifications, such as HITL workflow alerts or end user chat transcript exports. You acknowledge that data routed through these transactional email gateways is transiently subject to the sub processor’s standard data transmission security protocols.
How to contact us
Please contact us, or our Data Protection Officer, if you have any questions about this Privacy Policy or the information we hold about you.
Get in touch
Phone
+44 75880 10321