Privacy Policy

BritishText Ltd (“BritishText”, “we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website at britishtext.com and our business messaging platform at app.britishtext.com (collectively, the “Service”).

Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service. BritishText Ltd is the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

1.1 Account and registration information

When you create an account with BritishText, we collect:

• Your name and email address
• Your company name and, where applicable, company registration number
• Billing name and address
• Payment method details (processed securely by our payment provider; we do not store full card numbers)
• Your chosen username and password (passwords are stored as a one-way hash)

1.2 Usage and platform data

When you use the BritishText platform, we collect:

• Log data including your IP address, browser type, pages visited, and time and date of visits
• SMS and WhatsApp message content sent through the platform (stored to provide the service and for your message history)
• Contact lists and contact data that you upload to the platform
• Campaign data and messaging analytics (delivery rates, click-throughs, etc.)
• API access logs where you use our API

1.3 Information collected automatically

We automatically collect certain technical information when you visit our website, including your IP address, browser type and version, operating system, referring URLs, and pages you view. We may use cookies and similar tracking technologies. Please see our Cookie Policy for details.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the BritishText Service
• Process transactions and send related billing information
• Send transactional communications such as account confirmations, invoices, and security alerts
• Respond to customer support requests and enquiries
• Send service updates, product announcements, and marketing communications (where you have opted in or where we have a legitimate interest)
• Monitor and analyse usage and performance of the Service
• Detect, prevent, and address fraud, abuse, and security incidents
• Comply with legal obligations including PECR, UK GDPR, and HMRC requirements
• Enforce our Terms of Service

3. Legal Basis for Processing

Under UK GDPR we process your personal data on the following legal bases:

• Contract performance — processing necessary to provide the Service you have contracted for
• Legitimate interests — fraud prevention, product improvement, direct marketing to existing customers
• Consent — marketing emails to prospects and optional analytics cookies
• Legal obligation — compliance with applicable law including financial record keeping

4. Data Storage and Security

All data processed by BritishText is stored on servers located in the United Kingdom. We do not transfer personal data outside the UK or European Economic Area except as described in Section 5.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of sensitive data at rest
• Access controls limiting who can access your data within our team
• Regular security assessments and penetration testing
• Employee data protection training

5. Third-Party Services

We use a limited number of carefully selected third-party service providers to help us operate the Service. These include:

• Payment processors for billing (your payment data is processed under their own privacy policies)
• Cloud infrastructure providers hosting our UK-based servers
• Email delivery services for transactional and support emails
• Analytics tools for understanding platform usage (subject to your cookie consent)

We have data processing agreements in place with all third-party processors and require them to handle your data in accordance with UK GDPR. We do not sell your personal data to any third party.

6. Your Rights Under UK GDPR

As a UK data subject you have the following rights in relation to your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data in certain circumstances
• Right to restriction of processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making — we do not use solely automated decision-making that produces legal or similarly significant effects

To exercise any of these rights, email us at support@britishtext.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Data Retention

We retain personal data for as long as necessary to provide the Service and comply with our legal obligations:

• Account data is retained for the duration of your account and for 2 years after account closure
• Billing and financial records are retained for 7 years in accordance with HMRC requirements
• Message logs are retained for 12 months by default; you may delete them earlier from your dashboard
• Audit logs for security purposes are retained for 90 days

8. Cookies

We use cookies and similar tracking technologies on our website. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

9. Children's Privacy

The BritishText Service is intended for use by businesses and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page and, where the changes are material, notify you by email or by a prominent notice on the Service. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: