Privacy notice.
How Stak Group handles personal data when you visit stakgroup.co.uk, ask us for a demo, or ring the Stak AI Receptionist demo line.
01Who we are
Stak Group (“Stak”, “we”, “us”) is a company based in London. We provide Stak AI Receptionist, an AI phone answering service for UK businesses.
- Legal entity: [TO CONFIRM before first client]
- Data protection registration number: [PENDING]
- Privacy contact: privacy@stakgroup.co.uk [TO CONFIRM]
For the personal data described in this notice, Stak is the controller.
02What this notice covers
This notice covers:
- visitors to stakgroup.co.uk;
- people who request a demo through our website booking form or by email;
- people who ring our own demo line to try the service.
If you called a business that uses Stak AI Receptionist, that business is the controller of your call data and Stak handles it on their behalf as a processor. Their privacy notice applies, and you should contact them first about your data. We will help them answer your request.
03What we collect
When you request a demo
- your name, firm name and email address;
- your phone number and any note you add, if you choose to give them;
- the demo slot you picked and the page you booked from;
- the time of the request and your browser’s user-agent string;
- a one-way hashed form of your IP address, used only to limit repeated submissions. We do not store the IP address itself with your request.
When you ring the demo line
- your phone number;
- your name and any contact details you give;
- a recording of the call, if recording is switched on for the demo line [TO CONFIRM];
- a written transcript and a short summary of the call;
- the type of enquiry and how urgent it is, as described by you.
Please don’t share sensitive details (for example about your health or a criminal matter) on the demo line. It is for trying the service, not for real enquiries.
When you browse the site
Our hosting provider processes technical data such as your IP address to deliver pages and protect the service [TO CONFIRM: Netlify log retention]. Our pages load fonts from Google Fonts, so your browser sends your IP address to Google when a page loads. We do not use advertising or analytics cookies [TO CONFIRM].
04The demo line is answered by AI
Calls to the demo line are answered by an AI assistant, not a person. It will tell you it is an AI assistant if you ask [TO CONFIRM: ElevenLabs’ agent terms require telling callers up front, see the SRA data sheet]. It uses speech recognition and a language model to understand you, reply, and write up a summary.
The assistant takes details and passes them on. It does not make decisions about you that have legal or similarly significant effects [TO CONFIRM].
We do not use your call data to train AI models. Our providers’ own policies on model training are listed in our sub-processor list [TO CONFIRM].
05Why we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Arranging and running a demo you asked for, and replying to you | Steps at your request before entering a contract; otherwise our legitimate interest in responding to business enquiries [TO CONFIRM] |
| Answering demo-line calls and sending the summary to our team | Legitimate interest in showing how the service works [TO CONFIRM] |
| Checking the quality of demo calls and fixing problems | Legitimate interest in running a reliable service [TO CONFIRM] |
| Preventing spam and abuse of our forms and phone line | Legitimate interest in keeping our service secure |
| Meeting legal, tax and accounting duties, and handling legal claims | Legal obligation; legitimate interest |
We do not sell your data or use it for advertising.
07Transfers outside the UK
Your data may be processed outside the UK, including in the United States and the European Union. Where it is, we rely on the safeguards UK GDPR provides: the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or the UK–US data bridge where the US provider is certified under it. The UK recognises the EU as providing adequate protection. Which safeguard applies to each provider is set out in our sub-processor list [TO CONFIRM].
08How long we keep it
| Data | Proposed retention |
|---|---|
| Demo-line call logs and summaries | 90 days [TO CONFIRM] |
| Demo-line transcripts | 90 days [TO CONFIRM] |
| Demo-line call audio | 30 days, or not stored if recording is off [TO CONFIRM] |
| Demo requests from the website form | [TO CONFIRM] |
| Emails and business correspondence | [TO CONFIRM] |
After that, we delete the data or make it anonymous, unless we need to keep it to meet a legal duty or deal with a claim.
09Your rights
You have the right to:
- ask for a copy of your data;
- ask us to correct it;
- ask us to delete it;
- ask us to restrict how we use it;
- object to our use of it where we rely on legitimate interests;
- receive data you gave us in a portable format, where that right applies.
Email privacy@stakgroup.co.uk [TO CONFIRM]. We will reply within one month, as the law requires. We may need to check your identity first.
10How we protect it
Data is encrypted in transit (TLS). Access is limited to the people who need it, and access is logged. Stored call logs are encrypted at rest by our hosting provider. More detail is in Schedule 3 of our DPA.
11Complaints
Please contact us first so we can try to put things right. You can also complain to the UK data protection regulator, the Information Commission (formerly the Information Commissioner’s Office), at ico.org.uk/make-a-complaint [TO CONFIRM: regulator name and URL after the 30 Sep 2026 changeover].
12Changes to this notice
We will update this page when our practices change and show the date of the latest version at the top.