Privacy Policy

Who we are

This Privacy Policy explains how CallNinja ("CallNinja", "we", "us", "our"), a trading name of Armen Ferdzhulyan, operated from Bristol, United Kingdom, collects and uses personal data when you visit our website, use our contact form, or use our Google review removal service ("Service"). Armen Ferdzhulyan, trading as CallNinja, is the data controller for the personal data described in this policy.

What data we collect

We collect personal data you give us directly, mainly through our contact form, which asks for:

• Your full name
• Your email address
• Your phone number, if you choose to give it (optional)
• Your business name
• A link to your Google Business Profile or to the review(s) you'd like audited
• Any further details you include in your message

If we go on to provide the Service, we also hold records of the quote you approve, correspondence about your request, and billing records relating to successfully removed reviews. Billing data, such as your card or bank details, is collected and processed directly by Stripe, our payment processor. We do not collect or store this data ourselves. We also collect the information shown in our server and hosting logs that is standard for any website (such as IP address and browser type), used only for basic security and reliability.

If you sign a service agreement with us online, we also collect your name, email address, a signature image, and the date, time and IP address at which you signed, as a record of that agreement.

Why we collect it

We use the information above to:

• Respond to your enquiry and provide a free audit and quote
• Carry out the Service, including filing removal requests with Google where you've approved a quote
• Issue invoices through Stripe for reviews that are successfully removed
• Communicate with you about your request, quote, or invoice
• Meet our legal, tax, and accounting obligations

Our legal basis for processing

Under UK GDPR, we rely on the following legal bases:

• Contract: processing your enquiry, preparing a quote, and carrying out the Service once you've approved it, because this is necessary to provide what you've asked for.
• Legitimate interests: responding to general enquiries sent through our contact form, and keeping our website secure and working correctly, where this doesn't override your own rights and interests.
• Legal obligation: keeping billing and accounting records for as long as UK tax law requires.

How long we keep it

We keep contact-form enquiries that don't turn into a client relationship for up to 12 months, so we can follow up or refer back to them. If you become a client, we keep records relating to your quotes, removal requests, and invoices for as long as necessary to provide the Service and to meet our legal and accounting obligations (UK tax law generally requires financial records to be kept for at least 6 years), after which they are securely deleted. Signed service agreements, including the signature image, date, time and IP address recorded when you sign, are stored with Cloudflare and kept for 6 years for the same legal and tax reasons.

Who we share it with

We only share personal data with the service providers (data processors) needed to run our contact form and deliver the Service:

• Formspree: processes and delivers the information you submit through our contact form, so we receive it by email. See Formspree's own privacy policy for how it handles that data in transit.
• Stripe: processes payments and issues invoices. Stripe acts as an independent data controller for payment data it collects directly from you. See Stripe's own privacy policy for details.
• Cloudflare: our hosting provider, serves this website to your browser, processes standard web server log data such as IP address as part of doing so, and stores signed service agreements.
• Resend: delivers transactional emails on our behalf, including sending you a copy of a service agreement once it's signed.
• Google: where we submit a removal request on your behalf, Google receives the review details necessary to process that request.

We do not sell personal data, and we do not share it with anyone else for their own marketing purposes.

International transfers

Some of our service providers, including Stripe and Formspree, may process data outside the United Kingdom, including in the United States. Where this happens, we rely on the safeguards those providers have in place, such as the UK's International Data Transfer Agreement or standard contractual clauses, to protect your data to UK standards.

Cookies

This website does not use cookies. We do not use advertising or tracking cookies, and we do not run any analytics on your browsing activity.

Your rights

Under UK GDPR, you have the right to:

• Ask us what personal data we hold about you, and get a copy of it (right of access)
• Ask us to correct inaccurate or incomplete data (right to rectification)
• Ask us to delete your data, where we're not required to keep it for legal reasons (right to erasure)
• Ask us to restrict or object to certain processing (rights to restriction and objection)
• Ask for a copy of your data in a portable format, where applicable (right to data portability)

Making a request or complaint

To exercise any of the rights above, email contact@callninja.tech. We'll respond within one month. If you're unhappy with how we've handled your data, you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk, though we'd appreciate the chance to put things right directly first.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.

Contact

Questions about this Privacy Policy, or requests about your personal data, can be sent to contact@callninja.tech or by phone on +44 7723 613438.