Your data, plainly.
No legal fog. This page says what we collect, why, where it goes and how to make us delete it.
Who we are
Zone Ten AI is operated by Zone Ten AI Ltd, registered in England and Wales. We are the data controller for this website and for enquiries made directly to Zone Ten AI. Questions or privacy requests: hello@zoneten.ai.
What we collect, and why
The free admin audit asks how your business week runs and takes an email address so we can follow up. Your report is generated and shown on screen, and you can download it as a PDF. We do not currently email it to you. We process the audit because you chose to request it.
The enquiry form takes your name, business name, email address, optional phone number and message so we can reply. The form records your privacy acknowledgement and consent at the time you submit it. If you email us, we keep the correspondence needed to answer and remember what we discussed.
If you call, text or WhatsApp our published number, we receive the caller or sender identifier, receipt time, message, permitted attachments and delivery information. A voicemail or voice note contains your audio and may be automatically transcribed. We use this information only to receive, secure, route and respond to your enquiry and to detect spam or toll abuse.
Where you ask for a quote, a service or another step before a contract, processing is necessary to take that step at your request. For general enquiries, correspondence routing, service security and fraud prevention, we rely on our legitimate interests in receiving, protecting and answering business communications. You can use email instead of leaving a recording, and you can object to processing based on legitimate interests.
We do not ask for special-category information. If you volunteer sensitive information that is not needed to answer the enquiry, we restrict it and assess whether it must be erased promptly rather than treating an ordinary enquiry as permission to retain it.
Telephone recording notice
Before voicemail recording begins, callers hear: “Your message will be recorded and may be automatically transcribed so Zone Ten AI can respond to your enquiry. Recordings are normally kept for 30 days and related message records for 90 days. See zoneten.ai/privacy, or email hello@zoneten.ai if you prefer not to leave a recording.”
The AI part, honestly
Your audit answers are processed by Claude, an AI model from Anthropic, to write your report. Voicemail and voice-note audio may be processed by Deepgram to create a transcript. Under the commercial services used by Zone Ten AI, this enquiry data is not supplied for public-model training. We send only the information needed for the specific audit or transcription task.
Who processes it
We use Twilio to carry calls, SMS, WhatsApp and source media; Deepgram for transcription; Google Workspace for email; OVHcloud to host our private UK collaboration service and self-hosted customer-relationship records; and encrypted backup storage for recovery. Slack remains a temporary collaboration destination while the private Buzz channel is tested. Cloudflare provides protected connectivity to our public services. These organisations process data for the functions described here, under their applicable data-processing terms.
Some suppliers or their sub-processors may process data outside the UK. Where UK data-protection law treats that as a restricted transfer, we require an applicable adequacy decision or contractual safeguard such as the UK Addendum or IDTA. Supplier, sub-processor and transfer details are reviewed before a new live data route is enabled.
Where it lives, how long
Website audit and enquiry records are stored on our own servers. A website enquiry's temporary source file is deleted after committed transfer into our private customer-relationship record. Enquiry records are scheduled for deletion after no more than 12 months unless they become a customer matter or formal case. You can ask us to delete yours sooner.
- Voicemail, voice notes and caller-supplied attachments: normally 30 days.
- Related transcripts, notification text, email copies and delivery state: normally 90 days.
- Daily mailbox-digest notifications: normally 90 days.
- Content-free operational logs: normally 90 days.
- Encrypted backups: deleted data may remain beyond normal use for up to 35 additional days before backup expiry.
If an enquiry becomes a customer matter or formal case, we copy only what is necessary into the approved system of record and apply its documented retention or legal hold. We do not keep raw recordings “just in case”.
What we never do
Sell your data. Add you to a marketing list you did not ask for. Send “just checking in” drip campaigns. Share your information except with the processors needed to provide, secure and recover the services described above, or where the law requires it.
Your rights
UK GDPR gives you rights to see what we hold about you, correct it, delete it, restrict its use, object where we rely on legitimate interests, or receive applicable data in a portable form. Email hello@zoneten.ai and we will handle the request. If we get it wrong, you can complain to the ICO at ico.org.uk.
Client work
When we build for you, access to your systems and data is governed by your service agreement, which is more specific than this page and takes precedence for that work. The standing commitments hold everywhere: your data is not used to train public AI models, everything the admin agent sends is approved by you first, and chat or voice agents reply only from answers you signed off when we built them.
Last updated 3 August 2026.