Privacy notice

Version 1.1 — 8 August 2026. This notice covers our website, our business contact, and the AI phone-ordering service, now live in pilot with our first partner shop.

Who we are

heyjessie Ltd, registered in England & Wales, company no. 17322231, registered office 23 Ashburne House, Oxford Place, Manchester, M14 5SF. ICO registration: in progress. Contact: hello@heyjessie.co.uk.

"Jessie" is our AI phone assistant that answers the phone for participating takeaways and restaurants ("the shop").

If you phoned a shop and spoke to Jessie

  • What we process: your phone number, your name if you give it, your order, a delivery address if you order delivery, any allergy information you tell us, and a recording and transcript of the call. Calls are recorded for quality monitoring.
  • Why (lawful basis): to take and fulfil your order for the shop (performance of a contract / the shop's legitimate interest in serving its customers). Allergy information is processed to keep you safe when preparing your food.
  • Who's who: the shop is the controller of your order and call data — including your order details, any delivery address, allergy information you tell us, and the call recording and transcript; we process all of this on the shop's behalf, as their processor. We also keep anonymous, aggregated statistics about call quality (never linked back to you) to help us improve the service — heyjessie is the controller of those statistics only.
  • Sub-processors: telephony by Twilio; voice AI by ElevenLabs; website and email routing by Cloudflare; hosting with a cloud infrastructure provider; call-recording storage by Dropbox. Some providers may process data outside the UK under appropriate safeguards (e.g. UK/EU standard contractual clauses).
  • Retention: order details including phone number and address are anonymised after 90 days; call recordings and transcripts kept up to 90 days, then deleted (residual copies in our providers' backups and deleted-file recovery systems clear automatically afterwards); order totals (no personal data) are kept for the shop's records.
  • Jessie is AI and will tell you so if you ask. You can ask to speak to a person at any time during a call.

If you asked Jessie to call you (demo line / call-back form)

  • What we process: your name, shop name, and phone number, plus a record of your consent (what you agreed to and when).
  • Why: your explicit consent to receive an automated AI demonstration call. You can withdraw it any time — reply STOP, or contact hello@heyjessie.co.uk — and we will not call again.
  • Retention: consent and contact records kept while relevant to our conversation with you, then deleted; withdrawal records (the fact you said stop) are kept so we never call you again.

If you're a shop owner we're talking to

We keep your business contact details and notes of our conversations to manage our relationship (legitimate interest). Live sales calls are made by a human, screened against the TPS and CTPS registers; we keep a do-not-call list and honour objections immediately.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to processing, or complain to the ICO (ico.org.uk). Email hello@heyjessie.co.uk — we respond within one month. If your request concerns a specific shop's orders, we may route it via that shop as controller.

Security

Data is encrypted in transit, access is restricted (and logged on our core systems), and systems are tenant-separated per shop. If a breach ever affects your rights, we will notify the ICO and affected people as the law requires.