Callwell Privacy Policy & GDPR Information
Last updated: 22 April 2025
Introduction
This privacy notice explains how Callwell collects, uses, and protects personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to information collected through:
Our websites
Email, telephone, SMS and LiveChat communications
Recruitment and employment
Complaints and feedback
Our Callwell Enquiry System and third-party services
Lawful Basis for Processing
We process personal data under the following lawful bases:
Consent: e.g. for marketing communications.
Contract: to fulfil obligations to clients or employees.
Legitimate interests: to manage and improve our services.
Legal obligation: for HR, taxation, and regulatory requirements.
Your Rights Under UK GDPR
You have the following rights:
Right to be informed
Right of access
Right to rectification
Right to erasure
Right to restrict processing
Right to data portability
Right to object
Rights related to automated decision-making and profiling
To exercise these rights, contact Robert Wellstead (DPO) at data@callwell.co.uk.
Data Retention
We retain data in accordance with our Data Retention Policy, available on our website. Retention periods vary depending on the nature of the information and our legal obligations.
Visitors to Our Website
We use Google Analytics to analyse usage data. This is processed anonymously. Cookies may be used; for more, see our Cookie Policy.
You will be presented with a cookie banner to manage your consent preferences when visiting our website. You can update your preferences at any time.
E-Newsletters
We use Mailchimp to send newsletters and track performance statistics. For details, see Mailchimp’s Privacy Policy.
Feedback and Survey Data
Data from feedback or surveys is stored securely using Evernote, Dropbox and Surveymonkey. These providers act as data processors and are bound by Callwell’s processing instructions.
The Callwell Enquiry System
We act as a data processor for our clients under this system. It is patent pending (application no. 1618657.9). Data is stored securely on UK servers and backed up to Germany via Digital Ocean and AWS, which are compliant with UK GDPR adequacy standards.
LiveChat
We use Zendesk for real-time chat. We collect your name, optional email, and chat content. This is stored for 2 years. You can request a transcript by providing your email during or after the session. For more information, see Zendesk’s Privacy Policy.
Contact by Phone, SMS, and Social Media
Phone: CLI data is collected. Calls may be recorded and encrypted.
SMS: Sent under the instruction of the data controller. You may request copies via a Subject Access Request.
Social Media: We do not share your data received via social platforms.
Callwell uses Google for email services. Emails may be monitored for security and compliance.
Complaints
When you make a complaint, we collect your name and relevant information. Complaint data is retained for 2 years post-closure, following our retention policy.
Job Applicants and Employees
We use personal data to process applications and manage employment. Data for unsuccessful applicants is held for 12 months. Employment files are retained as per our retention schedule.
Children’s Data
Our services are not intended for children under 16. We do not knowingly collect data from minors.
Automated Decision-Making
We do not carry out automated decision-making or profiling using your personal data.
Data Sharing & International Transfers
Some processors (e.g. AWS, Mailchimp) may operate outside the UK. We ensure data is protected through UK adequacy regulations or Standard Contractual Clauses.
When data is transferred outside the UK, we ensure that appropriate safeguards are in place, such as adequacy decisions, Standard Contractual Clauses (SCCs), or binding corporate rules, where applicable.
All third-party service providers we work with act as data processors under written contracts and are required to implement appropriate technical and organisational measures to protect personal data.
Subject Access Requests
To request your data or ask for corrections, contact:
Robert Wellstead (DPO)
Email: data@callwell.co.uk
Information Governance Department
Callwell Limited
5 Eleanor’s Cross
Dunstable, Beds, LU6 1SN
Changes to this policy
We review this policy annually. Last reviewed 22 April 2025.
For more information, or to raise a concern, please contact our DPO: data@callwell.co.uk