Legal

Privacy Policy

Last updated: 19 May 2026  ·  TheirCall Ltd, Company No. SC887444

We take privacy seriously at TheirCall — particularly because our service involves daily conversations with elderly people and sharing those summaries with their families. This policy explains clearly what we collect, why we collect it, how long we keep it, and what rights you have.

If anything is unclear, contact us at hello@theircall.co.uk and we will explain.

1. Who we are

TheirCall Ltd is a company registered in Scotland (Company No. SC887444). Our registered office is 2nd Floor, 48 West George Street, Glasgow, G2 1BP. We operate the TheirCall service at theircall.co.uk.

TheirCall is a wellbeing companion service. We provide daily AI voice calls to elderly people and plain-English summaries to their adult family members. We are not a medical device, healthcare provider, or emergency service.

For the purposes of UK data protection law, TheirCall Ltd is the data controller for personal data collected through this website and the TheirCall service.

TheirCall Ltd is registered with the Information Commissioner's Office (ICO) under registration number C1924269, as required under UK GDPR.

2. The data we collect and why

Waitlist members

When you join our waitlist, we collect your email address. We use this solely to contact you about the TheirCall launch. The lawful basis for this processing is your consent, given when you submitted the waitlist form. You can withdraw this consent at any time by unsubscribing.

Family members (subscribers)

When you subscribe to TheirCall, we collect the following information to provide the service:

• Your name and email address
• Your phone number (for account verification)
• Your payment details (processed entirely by Stripe — we never see or store your card number)
• The name and phone number of your elderly family member
• Your preferred call time and voice choice
• Any additional context you provide about your family member to help personalise calls

The lawful basis for this processing is the performance of a contract — you have subscribed to TheirCall and we need this information to deliver the service.

Elderly family members (call recipients)

The person who receives the daily call is not the person who signs up. We take this seriously. Before daily calls begin, we obtain consent directly from the elderly person — either verbally during an introductory call, or through confirmation that a family member holds a valid Welfare Power of Attorney or Lasting Power of Attorney (Health and Welfare) for them.

During calls, we process the content of the conversation solely to generate the plain-English summary sent to the subscribing family member. Raw call transcripts are deleted immediately after the summary has been generated. They are never retained beyond that point.

3. What we do not collect

We do not collect medical records, diagnoses, or formal health data. We do not use biometric identification. We do not track location. We do not collect data from children. TheirCall is a service for adults over 18.

4. How long we keep your data

• Waitlist email addresses — retained until you unsubscribe or ask us to delete them
• Raw call transcripts — deleted immediately after the summary is generated
• Call summaries — retained for 90 days, then automatically deleted
• Alert history — retained for the duration of your subscription, then deleted with your account data 90 days after cancellation
• Account data — retained for the duration of your subscription, then permanently deleted 90 days after cancellation, unless we are required by law to retain it longer

5. Who we share data with

We share data only with trusted third-party providers who process it solely on our behalf and strictly for the purpose of delivering the TheirCall service. We do not sell data. We do not share data with advertisers.

Our data processors include providers of the following services:

• Email marketing — to manage the waitlist and send summary emails to families
• AI voice and conversation — to conduct the daily call
• Telephony — to connect and route calls
• AI summarisation — to generate plain-English summaries from call content
• Database and infrastructure hosting — to store account data and summaries securely
• Payment processing — Stripe processes subscription payments under their own privacy policy and PCI compliance framework

All processors are contractually bound to process data only on our documented instructions and to maintain appropriate security measures.

Call summaries are shared only with the family member or members you designate when setting up your account. They are never shared with third parties, other families, or any external organisations.

6. How we protect your data

TheirCall Ltd is built to ISO 27001 information security principles. All data is encrypted in transit using TLS 1.2 or higher. All data stored in our systems is encrypted at rest. Access to personal data is restricted to systems that require it to function — we operate a least-privilege access model throughout.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.

7. Your rights under UK GDPR

As a data subject, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your data. We will do so within 30 days
• Right to restriction — you can ask us to restrict how we process your data in certain circumstances
• Right to data portability — you can ask for your data in a machine-readable format
• Right to object — you can object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, email us at hello@theircall.co.uk. We will respond within one calendar month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

8. Rights of elderly call recipients

The elderly person who receives the daily call has the same data rights as any other data subject. If an elderly person — or someone acting on their behalf — wishes to access, correct, restrict, or delete data relating to their calls, they may contact us at hello@theircall.co.uk and we will act on their request promptly.

If an elderly person withdraws consent for calls to continue, we will stop the service immediately and notify the subscribing family member.

9. Cookies

Our website uses only essential technical cookies necessary for the site to function. We do not use tracking cookies, advertising cookies, or analytics services that follow you across the web. For full details, see our Cookie Policy.

10. Children

TheirCall is not directed at children. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us at hello@theircall.co.uk and we will delete it promptly.

11. Changes to this policy

If we make significant changes to this policy, we will notify waitlist members and active subscribers by email before the changes take effect. The date at the top of this page always reflects the most recent update.