Privacy Policy

Last updated: 9 August 2026

Bright Sparks AI Ltd ("Bright Sparks AI", "we", "us" or "our") is a company registered in England and Wales. This Privacy Policy explains how we collect, use and protect personal data when you visit our website, and when we provide our services to client businesses ("Clients") and, in turn, process data on behalf of those Clients relating to their customers ("End Users").

1. Who we are

Bright Sparks AI Ltd, Unit 53C, Unimix House, Abbey Road, London NW10 7TR, United Kingdom. Contact: hello@brightsparksai.com.

2. Data we collect

We collect and process the following categories of data:

• Client business data: contact details, company information and billing details of businesses that engage our services.
• End User data, processed on behalf of Clients: names, phone numbers, email addresses, call recordings and transcripts, SMS message content, appointment details and related communications, collected through our AI receptionist, missed-call text-back, web chat and related services.
• Website data: information you submit when contacting us directly, such as your name, email address and the content of your message.

We do not use cookies, analytics or tracking technologies on this website, and we do not collect data automatically from website visitors beyond what is necessary to serve the pages.

3. Lawful basis for processing

We process personal data on the following lawful bases:

• Performance of a contract: to provide our services to Clients and to respond to enquiries.
• Legitimate interests: to operate, maintain and improve our services, and to communicate with Clients and prospective Clients.
• Consent: where End Users have consented to receive communications such as SMS messages, as described in our SMS Consent policy.
• Legal obligation: where we are required to retain or disclose data to comply with the law.

4. Processing on behalf of Client businesses

Where we process End User data on behalf of a Client, the Client is the data controller and Bright Sparks AI acts as a data processor (or service provider, as applicable under relevant US state law). We process such data only in accordance with the Client's instructions and the agreement in place with that Client, and we do not use End User data for our own independent purposes.

Any questions about how a specific Client business handles your personal data should be directed to that business in the first instance.

5. Third-party processors

We use the following categories of third-party service providers to deliver our services. These providers process data under contractual terms that require appropriate protection of personal data:

• GoHighLevel — customer relationship management, communications and workflow automation platform.
• Twilio — telephony, SMS messaging and call-handling infrastructure.
• Other hosting, infrastructure and communications providers reasonably necessary to deliver our services.

6. Data retention

We retain personal data for as long as necessary to provide our services, to comply with our legal and contractual obligations, and for legitimate business purposes such as record-keeping and dispute resolution. Retention periods for End User data are governed by the agreement between Bright Sparks AI and the relevant Client. Data is deleted or anonymised once it is no longer required.

7. International transfers

As we work with Client businesses in the United States, personal data may be transferred between the United Kingdom and the United States. Where such transfers occur, we take steps to ensure appropriate safeguards are in place in accordance with UK data protection law.

8. Data subject rights

Subject to applicable law, individuals have the right to request access to, correction of, or deletion of their personal data, to object to or restrict certain processing, and to request a copy of their data in a portable format. Where we act as a processor on behalf of a Client, we will direct such requests to the relevant Client or assist the Client in responding, as required by our agreement with them.

To exercise these rights in relation to data we hold as a controller, contact us athello@brightsparksai.com.

9. Data security

We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or alteration.

10. Children's data

Our services are intended for use by businesses and their adult customers. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised.

12. Contact us

Bright Sparks AI Ltd, Unit 53C, Unimix House, Abbey Road, London NW10 7TR, United Kingdom. Email: hello@brightsparksai.com.