Privacy Policy

1.1 Personal Information

When you create an account or use our Service, we may collect the following information:

• Your name and email address (for account registration and authentication)
• Phone number (to deliver Wonder Calls)
• Payment information (processed securely through our payment provider, Stripe)
• Children's information: name, age, interests, behaviour notes, gift preferences, and special notes (to personalise calls)

1.2 Call Information

When you book and receive a Wonder Call, we collect:

• Call scheduling information
• Call duration and completion status
• Call recordings (in wav/mp3 format)
• AI-generated call summaries and transcripts (to improve our service)

1.3 Technical Information

We automatically collect certain information when you visit our website:

• IP address, browser type, and operating system (for security and analytics)
• Pages visited and time spent on our website (to improve user experience)
• Cookies and similar tracking technologies (see Section 7)

We use the information we collect for the following purposes:

• To provide our Service: Deliver personalised Wonder Calls to your specified phone number
• To process payments: Handle token purchases and transaction records
• To communicate with you: Send booking confirmations, updates, and customer support responses
• To improve our Service: Analyse usage patterns and call quality to enhance user experience
• To comply with legal obligations: Meet regulatory requirements and respond to lawful requests
• To prevent fraud: Protect against unauthorised access and misuse of our Service

Under UK data protection law, we process your personal data on the following legal bases:

• Contract performance: Processing is necessary to provide the Wonder Calls service you've requested
• Consent: You have given explicit consent for us to process children's information for personalised calls
• Legal obligation: Processing is necessary to comply with UK laws and regulations
• Legitimate interests: We process data to improve our service, prevent fraud, and ensure security, while balancing your rights and interests

We do not sell your personal data. We may share your information with the following third parties:

• Vapi AI: Our voice technology provider that delivers Wonder Calls using the information you provide
• Stripe: Our payment processor for secure token purchases (they handle payment data independently)
• Supabase: Our database and authentication provider for secure data storage
• Vercel: Our hosting provider for website infrastructure
• Legal authorities: When required by law or to protect our rights and safety

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

We retain your personal data for as long as necessary to:

• Provide our Service and maintain your account (while your account is active)
• Comply with legal obligations (typically 6-7 years for financial records)
• Resolve disputes and enforce our agreements (as required by law)

Call recordings are stored whilst your account is active. We may delete recordings if your account is inactive for more than 12 months or if the recording contains offensive or inappropriate content.

When you close your account, we will delete or anonymise your personal data within 30 days, except where we must retain it for legal or regulatory purposes.

Under UK data protection law, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Request a copy of your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for processing at any time (where consent is the legal basis)

To exercise any of these rights, please contact us at hello@wondercall.co.uk. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority, at www.ico.org.uk.

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device.

7.1 Types of Cookies We Use

• Essential cookies: Required for the website to function (e.g., authentication, security)
• Analytics cookies: Help us understand how visitors use our website (e.g., page views, session duration)
• Marketing cookies: Track discount codes and promotional campaigns

You can manage cookie preferences through our cookie banner or your browser settings. Note that disabling essential cookies may affect website functionality.

Our Service is designed for use by adults (18+) to arrange calls for children. We do not knowingly collect personal data directly from children under 18.

By providing children's information, you confirm that you are the parent or legal guardian (or have obtained consent from the parent/guardian) and consent to our processing of that information to deliver personalised Wonder Calls.

Children's data is processed with the same protections as adult data and is only used to personalise calls. We do not use children's data for marketing purposes.

We take the security of your personal data seriously and implement appropriate technical and organisational measures:

• Encryption of data in transit and at rest (TLS/SSL)
• Secure authentication and password protection
• Regular security audits and vulnerability assessments
• Access controls and staff training on data protection
• Secure backup and disaster recovery procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

Your personal data may be transferred to and processed in countries outside the United Kingdom. When we transfer data internationally, we ensure appropriate safeguards are in place:

• EU/EEA countries (which have adequacy decisions from the UK government)
• Countries with UK-approved standard contractual clauses
• Service providers certified under recognised data protection frameworks

For more information about our international data transfers, please contact us.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date at the top of this policy
• Sending an email notification for significant changes (if you have an account)

We encourage you to review this Privacy Policy periodically. Your continued use of our Service after changes are posted constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data protection enquiries specifically, you may also contact our Data Protection Officer at the above email address with "Data Protection" in the subject line.