Privacy Policy

Last updated: 4 July 2026

1. Who We Are

Precixa is a trading name of Thinkbig Technologies, a company registered in England and Wales. Our registered address is in Leicester, UK. We provide AI-powered automation services for UK businesses, including WhatsApp assistants, voice agents, chatbots, and workflow automation.

For the purposes of UK GDPR, Thinkbig Technologies is the data controller for personal data we collect directly. Where we process data on behalf of our clients (e.g. handling their customer enquiries), we act as a data processor and a Data Processing Agreement (DPA) is available on request.

2. What Data We Collect

We collect and process the following categories of personal data:

• Client data: Name, email address, phone number, business name, business address, payment details (processed via Stripe — we do not store card numbers).
• End-customer data: Name, phone number, email address, enquiry details, appointment details, and call/chat transcripts — collected through WhatsApp, voice, email, or web chat interactions handled by our AI systems on behalf of our clients.
• Website data: IP address, browser type, pages visited, and referral source — collected via standard web analytics.

3. How We Use Your Data

We use personal data for the following purposes:

• To provide and maintain our AI automation services
• To handle enquiries, bookings, and follow-ups on behalf of our clients
• To send appointment reminders, quote follow-ups, and payment reminders via WhatsApp, SMS, email, or voice
• To generate reports and analytics for our clients
• To communicate with clients about their account, billing, and support
• To comply with legal obligations

4. Legal Basis for Processing

We process personal data under the following legal bases:

• Contract: Processing necessary to fulfil our service agreement with clients.
• Legitimate interest: Processing necessary for the legitimate interests of our clients (e.g. responding to customer enquiries, chasing overdue payments).
• Consent: Where required, we obtain explicit consent before processing (e.g. marketing communications, WhatsApp opt-in).
• Legal obligation: Where processing is required by law.

5. WhatsApp and Messaging

Our AI systems may communicate with end-customers via WhatsApp, SMS, email, or web chat. For WhatsApp communications:

• End-customers must have opted in to receive messages via WhatsApp.
• We comply with Meta's WhatsApp Business Platform policies.
• Messages are processed via the WhatsApp Business API through authorised Business Solution Providers.
• We do not send unsolicited marketing messages via WhatsApp.

6. Call Recordings and Transcripts

Where our AI voice agents handle calls:

• Callers are informed that the call may be recorded and/or transcribed.
• Call recordings are retained for 90 days then permanently deleted.
• Call transcripts are retained for up to 12 months for service improvement and dispute resolution.
• Recordings and transcripts are accessible only to the relevant client and authorised Precixa personnel.

7. Data Sharing

We do not sell personal data. We share data only with:

• Service providers: OpenAI (AI processing), Meta/WhatsApp (messaging), Twilio (voice/SMS), ElevenLabs (voice synthesis), Google (workspace and analytics), Netlify (hosting). All providers are contractually bound to protect personal data.
• Our clients: End-customer data collected on behalf of clients is shared with those clients as part of our service.
• Legal authorities: Where required by law or legal process.

8. Data Retention

• Client account data: retained for the duration of the service agreement plus 12 months.
• Call recordings: 90 days, then permanently deleted.
• Call/chat transcripts: up to 12 months.
• Website analytics: 26 months.
• Financial records: 6 years (as required by UK tax law).

9. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

• Encryption in transit (TLS) and at rest
• Access controls and authentication
• Regular security reviews
• Data processed within the UK and EU where possible

10. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (where applicable)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent (where processing is based on consent)

To exercise any of these rights, contact us at info@precixa.co.uk. We will respond within 30 days.

11. ICO Registration

Thinkbig Technologies is registered with the Information Commissioner's Office (ICO) as required under UK GDPR. Our registration number is [TODO — to be completed on registration].

12. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Significant changes will be communicated to clients by email.

13. Contact

For any questions about this privacy policy or our data practices, contact:

Email: info@precixa.co.uk
Address: Precixa (Thinkbig Technologies), Leicester, UK