Last updated: 30 July 2026
Buzzozo Ltd ("Buzzozo", "we", "us") is a digital marketing agency registered in England & Wales. We are the data controller for the personal data described in this policy. You can contact us about anything data-related at hello@buzzozo.com or on 020 3282 5353.
We do not sell your personal data. Ever.
Only trusted service providers who help us run our business, such as our hosting infrastructure, CRM platform, email provider and payment processor, and only to the extent needed. Each is bound by contract to protect your data. Where a provider processes data outside the UK, we ensure appropriate safeguards such as UK-approved standard contractual clauses.
Enquiry data is kept for up to 24 months from last contact. Client data is kept for the duration of our engagement and for 6 years afterwards where required for legal and accounting purposes. You can ask us to delete your data sooner at any time.
With your consent (given via our cookie banner), our website may use advertising and analytics technologies including Google Ads conversion tracking, Google Analytics, and the Meta (Facebook) Pixel. These help us measure which of our adverts work and may show you our adverts on other websites and platforms (remarketing) after you visit us.
Under UK GDPR you have the right to access, correct, delete, restrict or object to our processing of your data, the right to data portability, and the right to withdraw consent at any time. To exercise any of these, email hello@buzzozo.com. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Your data is stored on secure, access-controlled systems. Our own hosting platform uses SSL encryption, and we limit access to those who need it to help you.
BuzzozoHub is our client relationship and business management software. If you are a Buzzozo client using BuzzozoHub, we act as a data controller for your account information (name, business details, login email, usage records). For the information you store in the platform about your own customers - names, contact details, addresses, bookings, invoices, messages and call records - we act as a data processor on your instructions: you decide what is collected and you are responsible for having a lawful basis to hold it. We process it only to provide the platform to you, and we never sell it or use it for our own marketing.
To run the platform we use a small number of trusted sub-processors, each bound by contract and only receiving what their function needs: Stripe (card payments - we never see card numbers), Twilio (text messages and call handling), ElevenLabs (AI voice answering, where enabled), Anthropic (AI assistant features), Google (business profile and mapping services, where connected), Meta (lead adverts, where connected), and UK/EU based hosting. Where any provider processes data outside the UK, transfers are protected by recognised safeguards such as the UK Addendum to Standard Contractual Clauses.
Calls answered by the AI receptionist are transcribed and the transcript is stored in the relevant business's account so they can serve you; texts sent through the platform honour STOP requests automatically. Customer-facing links (for example a personal customer page or an invoice) use secure signed tokens. Platform data is retained while the business's account is active and deleted or returned on closure, subject to legal retention duties.
Some platform features use artificial intelligence (for example drafting replies, summarising calls, and the in-portal assistant). Inputs to these features are processed by our AI sub-processor to generate the output and are not used to train their models under our agreement. AI output can contain mistakes: businesses remain responsible for reviewing AI-drafted content before relying on it.
If we change this policy we will update the date at the top and, for significant changes, let existing clients know directly.
