Privacy notice

Version 1.3 — 27 September 2026. This notice covers our website, our business contact, the AI phone-ordering service, and our WhatsApp number.

Who we are

heyjessie Ltd, registered in England & Wales, company no. 17322231, registered office 23 Ashburne House, Oxford Place, Manchester, M14 5SF. ICO registration: in progress. Contact: hello@heyjessie.co.uk.

"Jessie" is our AI phone assistant that answers the phone for participating takeaways and restaurants ("the shop").

If you phoned a shop and spoke to Jessie

What we process: your phone number, your name if you give it, your order, the collection or delivery time you ask for, any message you ask us to pass to the kitchen, a delivery address if you order delivery, any allergy information you tell us, and a recording and transcript of the call. Calls are recorded for quality monitoring.
Why (lawful basis): to take and fulfil your order for the shop (performance of a contract / the shop's legitimate interest in serving its customers). Allergy information is processed to keep you safe when preparing your food.
Who's who: the shop is the controller of your order and call data — including your order details, any delivery address, allergy information you tell us, and the call recording and transcript; we process all of this on the shop's behalf, as their processor. We also keep anonymous, aggregated statistics about call quality (never linked back to you) to help us improve the service — for call/order data, heyjessie is the controller only of those statistics (see below for our WhatsApp number, where heyjessie is the controller of the message itself).
Sub-processors: telephony by Twilio; voice AI by ElevenLabs; website and email routing by Cloudflare; hosting with a cloud infrastructure provider; call-recording storage by Dropbox. Some providers may process data outside the UK under appropriate safeguards (e.g. UK/EU standard contractual clauses).
Retention: order details including phone number and address, and any message for the kitchen, are anonymised after 90 days; call recordings and transcripts kept up to 90 days, then deleted (residual copies in our providers' backups and deleted-file recovery systems clear automatically afterwards); order totals (no personal data) are kept for the shop's records.
Jessie is AI and will tell you so if you ask. You can ask to speak to a person at any time during a call.

If you asked Jessie to call you (demo line / call-back form)

What we process: your name, shop name, and phone number, plus a record of your consent (what you agreed to and when).
Why: your explicit consent to receive an automated AI demonstration call. You can withdraw it any time — reply STOP, or contact hello@heyjessie.co.uk — and we will not call again.
Retention: consent and contact records kept while relevant to our conversation with you, then deleted; withdrawal records (the fact you said stop) are kept so we never call you again.

If you message our WhatsApp number

What we process: your phone number, your WhatsApp profile name, and the text of your message (and whether it included an attachment, though we don't store the attachment itself).
Why (lawful basis): our legitimate interest in reading and responding to people who contact us — you got in touch and expect a reply.
Who's who: heyjessie is the controller of this data; it isn't a shop's order.
Where it goes: your message reaches us via WhatsApp/Meta and Twilio (our messaging provider) and is sent straight to Vaheed on Telegram; an automatic reply lets you know Vaheed has it and will reply himself, and he then does. We don't otherwise store the message text on our systems.
Retention: we keep a record that we replied to you (not its content), tied to Twilio's own message reference rather than your number, in a tamper-evident log we do not currently purge on a fixed schedule; it carries no other personal data about you.

If you're a shop owner we're talking to

We keep your business contact details and notes of our conversations to manage our relationship (legitimate interest). If your shop is live with Jessie and you send shop commands to our WhatsApp number (for example to pause orders or mark an item sold out), we keep those commands, and the number they came from, in your shop's own records so we can show what was changed and when. Live sales calls are made by a human, screened against the TPS and CTPS registers; we keep a do-not-call list and honour objections immediately.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to processing, or complain to the ICO (ico.org.uk). Email hello@heyjessie.co.uk — we respond within one month. If your request concerns a specific shop's orders, we may route it via that shop as controller.

Security

Data is encrypted in transit, access is restricted (and logged on our core systems), and systems are tenant-separated per shop. If a breach ever affects your rights, we will notify the ICO and affected people as the law requires.