Privacy Policy

1. Introduction

This Privacy Policy explains how askjohngeorge.com ("we," "our," or "us") collects, uses, and protects your personal information when you use our website and AI voice assistant services. This policy is designed to comply with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as well as the EU General Data Protection Regulation (GDPR) and relevant US privacy laws.

2. Information We Collect

We collect the following types of information:

• Voice recordings and transcripts from interactions with our AI voice assistant
• Information shared during voice interactions (such as your use case and project details)
• Information you provide when booking a consultation via Cal.com (name, email, and scheduling preferences)
• Website usage data through Vercel Analytics (anonymized, non-personally identifiable)
• Browser and device information collected by Google reCAPTCHA for spam prevention on our contact form

3. AI and Voice Technology Disclosure

Our AI voice assistant uses natural language processing to interact with users. During these interactions, the AI:

• Records and processes your voice input
• Generates real-time responses based on your input
• Creates transcripts of the conversation

The AI does not make automated decisions that have legal or similarly significant effects on users.

4. How We Use Your Information

We use your information to:

• Demonstrate AI voice capabilities to potential clients
• Improve our AI services through analysis of interactions
• Schedule and manage consultation bookings
• Communicate with you about your enquiries
• Analyze website traffic and usage patterns to improve our services

5. Legal Basis for Processing and Consent

For users in the UK and EU, we process your personal data on the following legal bases:

• Consent: Before using the AI voice assistant, you are informed via an on-page notice that calls are recorded and reviewed. By proceeding to use the voice assistant, you consent to the recording and processing of your voice interaction as described in this Privacy Policy.
• Consent: When you book a consultation, you consent to us processing your contact information for scheduling purposes.
• Legitimate Interests: For website analytics and service improvement.

You can withdraw your consent at any time by ending the call or by contacting us through our website.

6. Data Storage, Security, and Retention

We implement appropriate technical and organisational measures to protect your data:

• Voice recordings are stored in Google Cloud Storage with encryption at rest and in transit.
• Metadata from voice calls is stored in Google Workspace.
• Booking data is processed by Cal.com, which implements industry-standard security measures.
• Website analytics data is hosted on Vercel, which is SOC 2 Type 2 compliant.
• Data is retained only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Security measures include encryption of data in transit and at rest, regular security audits, access controls and authentication measures, and employee training on data protection.

7. Third-Party Service Providers

We use the following service providers:

• Google Cloud Storage: Stores voice recordings with encryption and secure storage. They comply with major privacy and security standards.
• Google Workspace: Stores call metadata with robust security measures and compliance with major privacy and security standards.
• Google reCAPTCHA: Protects our contact form from spam and abuse. Collects browser and device information and uses cookies to distinguish humans from bots. See Google's Privacy Policy for details.
• Cal.com: Handles consultation scheduling. For their privacy practices, see their privacy policy.
• Vercel: Provides website hosting and anonymized analytics. They are SOC 2 Type 2 compliant and ISO 27001:2013 certified.

For more detailed information on how these services handle your data, please refer to their respective privacy policies.

8. Your Rights

Depending on your location, you may have the following rights:

• Access your personal information
• Have inaccurate information corrected
• Have information erased in certain circumstances
• Restrict processing of your information
• Data portability
• Object to processing based on legitimate interests

To exercise these rights, please contact us through the contact form on our website. We will respond to your request within one month. To verify your identity, we may require additional information before processing your request.

9. Age Restrictions

Our services are not intended for use by individuals under the age of 18. We do not knowingly collect or process data from anyone under this age. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information as quickly as possible.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. We ensure appropriate safeguards are in place for these transfers in compliance with applicable data protection laws, such as Standard Contractual Clauses approved by the European Commission.

11. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). Please contact us for more information.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.

13. Contact Us

For any questions about this Privacy Policy or to exercise your rights, please use the contact form on our website.

14. Complaints

If you have a concern about our use of your information, please contact us first. If you are not satisfied with our response, you have the right to complain to your local data protection authority, such as the Information Commissioner's Office (ICO) in the UK.