Security & data
How we handle your calls and data.
A plain-English summary of the controls behind The First Contact — ICO registration, UK/EU storage, retention windows, sub-processors, and the rights you have over your data. For the legal version, see our Privacy Policy.
ICO registered, UK GDPR compliant
We are registered with the UK Information Commissioner's Office as a data controller. Our processing, retention, and your rights as a data subject all follow UK GDPR.
UK and EU data residency
Account data, call recordings, and transcripts are stored on servers located in the UK or EU. We do not transfer your data outside the UK/EU.
Short retention by default
Call recordings are deleted after 30 days. Transcripts after 90 days. Account data is held for 12 months after you close your account. Billing records are retained for 7 years to meet UK legal requirements.
No selling, no advertising
We do not sell your data, your callers' data, or any data about you. We do not use any of it for advertising or marketing to third parties.
Payments handled by Stripe
Card details are entered directly into Stripe — we never see or store them. Stripe is PCI DSS Level 1 certified.
Plain-English data rights
Access, correction, deletion, objection, and portability — all standard UK GDPR rights. Email hello@thefirstcontact.com and we respond within 30 days.
Sub-processors we rely on
We use a small number of vetted suppliers to deliver the service. Each only sees the data they need to do their job.
| Provider | Purpose | Region / note |
|---|---|---|
| Twilio | Call routing and SMS delivery | UK/EU infrastructure |
| Stripe | Payment processing | UK GDPR compliant |
| Retell | AI voice processing during a call | Per-call processing, then deleted |
Requests, deletion, and complaints
To access, correct, port, or delete your data, email hello@thefirstcontact.com. We respond within 30 days, often the same week.
You can also ask us to delete a specific call recording or transcript at any time — even before the 30/90-day automatic deletion.
If you have a concern we have not resolved, you can contact the UK Information Commissioner's Office at ico.org.uk or 0303 123 1113.
Looking for the full legal document? Read the Privacy Policy for every clause, definition, and right in full detail.