Privacy Policy

1. Who We Are

Social Boost Agency is a UK-based digital marketing and business automation provider offering website development, advertising, customer relationship management, automation and AI-powered receptionist services under the Hire-Lexi brand.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal information.

Legal entity: SCIAL BSST AGNCY LTD

Trading name: Social Boost Agency

Business address: 374 Penny Lane Business Centre, Smithdown Road, Liverpool, England, L15 5AN

Privacy email: privacy@socialboostagency.co.uk

Website: https://www.socialboostagency.co.uk

We are registered with the UK Information Commissioner's Office (ICO).

We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

2. Scope of This Policy

This policy applies to personal information processed through:

• Our website and online forms
• Sales enquiries, demonstrations and consultations
• Digital marketing and advertising services
• CRM and business automation services
• Hire-Lexi AI receptionist demonstrations
• Hire-Lexi services provided to client businesses
• Business communications, billing and customer support

Where we process information on behalf of another business, that business's privacy policy may also apply.

3. Personal Information We Collect

Depending on your interaction with us, we may collect:

Contact and business information: Names, business names, job titles, telephone numbers, email addresses, business sectors and enquiry details.

Website information: IP addresses, device and browser information, referral sources, website interactions, analytics identifiers and advertising attribution information.

Client information: Contract details, service configurations, billing records, correspondence and technical support information.

Marketing information: Business contact details, publicly available professional information, lead sources, marketing preferences and records of communication or objections.

Hire-Lexi information: Caller telephone numbers, audio recordings, transcripts, conversation summaries, appointment details, enquiries and information supplied during calls.

In some deployments, Hire-Lexi may process health-related or other sensitive personal information on behalf of a client business.

We ask users not to provide unnecessary sensitive information when interacting with our own website or general sales demonstrations.

4. How We Obtain Information

We collect personal information when you submit a website form, contact us, request a demonstration, become a client, interact with Hire-Lexi or communicate with our team.

We may also obtain business contact information from professional networking platforms, business websites, publicly accessible directories, referrals and third-party lead generation sources.

We may receive customer information from systems connected to our services where authorised by the relevant client.

5. How We Use Personal Information

We use personal information to:

• Respond to enquiries and callback requests
• Arrange demonstrations and consultations
• Provide and manage contracted services
• Configure and operate Hire-Lexi
• Handle calls, appointments and customer enquiries
• Maintain client relationships and provide support
• Manage payments, invoicing and accounting
• Conduct lawful business development and marketing
• Measure website and advertising performance
• Maintain security, prevent misuse and investigate incidents
• Meet legal and regulatory obligations

We do not sell personal information to data brokers.

6. Lawful Bases for Processing

We rely on appropriate lawful bases under UK GDPR depending on the activity.

Contract: To take steps requested before entering into a contract or to fulfil contractual obligations.

Legitimate interests: For activities such as responding to business enquiries, maintaining security, improving services and certain permitted business-to-business marketing activities, where those interests are not overridden by individuals' rights.

Consent: Where required for activities such as non-essential tracking, certain marketing communications or other processing that depends on permission.

Legal obligation: Where processing is necessary to comply with applicable laws and regulatory requirements.

Where sensitive or special-category personal data is involved, an additional applicable condition under Article 9 UK GDPR must be established.

Our client businesses are responsible for determining the lawful basis and any additional special-category condition for processing they instruct Hire-Lexi to undertake.

7. Hire-Lexi AI Receptionist

Hire-Lexi is an AI-powered receptionist service that can answer telephone calls, respond to enquiries, assist with bookings, collect information and carry out configured business workflows.

Callers are informed that they are interacting with AI and that calls may be recorded.

Hire-Lexi calls may be recorded and transcribed. The resulting information may be used to fulfil the caller's request, support the relevant business, maintain records, troubleshoot issues and provide the contracted service.

Call recording and transcript retention: Our standard intended retention period is 90 days, subject to applicable legal obligations, verified platform configuration and any agreed client-specific requirements.

Social Boost Agency does not use customer call recordings or transcripts to train its own AI models. Any separate processing by third-party AI providers is governed by their applicable contractual terms and data handling arrangements.

Hire-Lexi may process health-related information where a client business has configured the service for that purpose and established the necessary safeguards.

8. Data Controller and Data Processor Responsibilities

For our own website, sales, marketing, billing and business administration, Social Boost Agency generally acts as a data controller.

When Hire-Lexi processes callers' information on behalf of a client business and under its documented instructions, Social Boost Agency generally acts as a data processor.

The client business will normally act as controller for its customers' information and is responsible for determining the purposes and lawful basis of that processing.

Appropriate contractual arrangements, including a Data Processing Agreement where required, govern the handling of client-controlled personal information.

9. Service Providers and Data Sharing

We may share personal information with trusted service providers where necessary to deliver our services, including:

• Google Workspace for business communications and administration
• Stripe for payment processing
• CRM and business automation providers
• Website hosting and infrastructure providers
• Telephony, voice AI and transcription providers
• Advertising and analytics providers
• Authorised booking, practice management and other client-integrated systems
• Professional advisers and relevant authorities where required

Our service providers may act as processors, subprocessors or independent controllers depending on the service and applicable contractual arrangements.

We do not disclose client information to unrelated third parties for their independent marketing purposes without an appropriate lawful basis.

10. Website Analytics and Advertising

Our website uses or is configured to use technologies including:

• Google Analytics 4 (GA4)
• Google Tag Manager
• Google Ads conversion tracking
• Meta Pixel and Conversions API

These technologies may process website interaction information, device identifiers, referral information and advertising conversion data.

Where legally required, non-essential cookies and similar tracking technologies must not operate until appropriate consent has been obtained.

Visitors should be provided with an appropriate mechanism to accept, reject or manage non-essential tracking.

Further information will be available in our Cookie Policy.

11. Direct Marketing

We may contact business prospects through cold email, telephone calls, SMS, newsletters and online advertising where permitted by law.

Our marketing activities are subject to UK GDPR and applicable PECR requirements.

The rules may differ depending on the communication method and whether the recipient is a corporate subscriber, sole trader or other individual subscriber.

Where consent is required, we will obtain it before sending the relevant marketing communications.

We maintain appropriate records of marketing preferences and objections.

You have the right to object to processing of your personal information for direct marketing at any time.

You can exercise this right by using an available unsubscribe method or contacting privacy@socialboostagency.co.uk.

12. International Data Transfers

Our intended primary storage location for customer and call information is the United Kingdom.

However, certain service providers, support personnel or connected systems may process or access information from other countries.

Where UK personal information is transferred internationally, we will assess whether an appropriate lawful transfer mechanism is required and implement applicable safeguards.

These may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses or other legally recognised mechanisms.

Information about applicable safeguards can be requested using our privacy contact email.

13. Information Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration and disclosure.

These may include restricted access, account authentication, access management, secure transmission, supplier controls and security incident procedures.

We review safeguards according to the nature and sensitivity of the information processed.

No method of electronic storage or transmission is completely risk-free.

14. How Long We Keep Information

We retain personal information only for as long as necessary for its relevant purpose, subject to legal, regulatory and contractual obligations.

Our intended standard retention period for Hire-Lexi call recordings and transcripts is 90 days.

Other categories of information, including client contracts, billing records, marketing preferences, support communications and website analytics, may have different retention periods.

Where a fixed period is not specified, retention is determined by the purpose of processing, applicable legal requirements, contractual obligations and the need to protect individuals' rights.

At the end of a client relationship, personal information processed on behalf of that client will be returned or deleted in accordance with applicable contractual instructions and legal requirements.

15. Your Data Protection Rights

Subject to applicable law, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of information
• Restrict certain processing
• Object to processing
• Receive certain information in a portable format
• Withdraw consent where consent is the lawful basis
• Exercise rights relating to qualifying automated decisions

To make a request, email privacy@socialboostagency.co.uk.

Where your information is controlled by a Hire-Lexi client business, we may refer your request to that business or assist it in responding.

We will respond within applicable legal timeframes.

16. Automated Processing

Hire-Lexi uses AI technology to interpret conversations and respond to requests.

Its functions may include collecting information, answering questions, booking appointments and carrying out authorised administrative actions.

The service is not intended to replace qualified professional judgement or independently make legally significant decisions about individuals.

Client-specific uses involving solely automated decisions with legal or similarly significant effects require appropriate legal assessment and safeguards.

17. Children's Information

Our website and commercial services are primarily intended for businesses and professional users.

However, client deployments of Hire-Lexi may involve information relating to children.

Where this occurs, the relevant controller and processor must apply safeguards appropriate to the circumstances and applicable legal requirements.

18. Third-Party Websites

Our website may contain links to external websites and services.

Independent third parties are responsible for their own privacy practices. We recommend reviewing their privacy notices before providing information.

19. Complaints

If you have concerns about our use of personal information, please contact:

privacy@socialboostagency.co.uk

You also have the right to raise a complaint with the UK Information Commissioner's Office.

Information Commissioner's Office

Website: https://ico.org.uk

20. Updates to This Policy

We may update this Privacy Policy to reflect changes in our services, technology, data processing practices or applicable law.

The latest version will be published on this website with an updated date.

21. Contact Details

Social Boost Agency

Legal entity: SCIAL BSST AGNCY LTD

Address: 374 Penny Lane Business Centre, Smithdown Road, Liverpool, England, L15 5AN

Email: privacy@socialboostagency.co.uk

Website: https://www.socialboostagency.co.uk