Privacy Policy

1. Introduction

YesTalk Ltd ("YesTalk", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our UK telephone number and communication services.

2. Data Controller

YesTalk is the data controller for your personal data. Our contact details are:

3. Information We Collect

3.1 Personal Information

When you register for our services or contact us, we may collect:

• Name and contact details (email, phone, address)
• Account credentials and preferences
• Payment and billing information
• Business information (if applicable)
• Communication preferences

3.2 Service Usage Data

When you use our telephone services, we collect:

• Call detail records (numbers called, duration, time)
• Call recordings (when enabled)
• Service configuration and preferences
• Account usage and billing records
• Technical logs and performance data

3.3 Website and Technical Data

When you visit our website or use our web portal:

• IP address and browser information
• Cookies and similar technologies
• Website usage analytics
• Security and fraud prevention data

4. How We Use Your Information

4.1 Service Provision

We process your data to:

• Provide UK telephone number services
• Process and route calls
• Manage call forwarding and recording
• Maintain your account and preferences
• Process payments and billing

4.2 Customer Support

We use your information to:

• Respond to enquiries and support requests
• Investigate and resolve complaints
• Provide technical assistance
• Improve our services

4.3 Legal and Regulatory

We may process data to:

• Comply with telecommunications regulations
• Prevent fraud and abuse
• Respond to legal requests
• Maintain service security

5. Legal Basis for Processing

We process your personal data based on:

• Contract: To provide our telecommunications services
• Legitimate Interest: For service improvement and fraud prevention
• Legal Obligation: To comply with telecommunications regulations
• Consent: For marketing communications (where required)

6. Data Sharing and Disclosure

6.1 Third Party Service Providers

We may share data with trusted partners who help us provide services:

• Telecommunications carriers and network providers
• Payment processors (Mollie B.V. — see Section 9)
• Cloud hosting and IT service providers
• Customer support platforms

6.2 Legal Requirements

We may disclose information when required by:

• Court orders or legal processes
• Law enforcement requests
• Regulatory investigations
• Emergency situations

6.3 Call Recording Sharing

Call recordings are only shared:

• With account holders who initiated recording
• When required by legal obligations
• With explicit consent from all parties

7. Data Retention

We retain your data for different periods depending on its purpose:

• Account Information: While your account is active plus 7 years
• Call Detail Records: 12 months (as required by regulations)
• Call Recordings: As configured by you (up to 12 months)
• Billing Records: 7 years for tax and legal purposes
• Website Analytics: Up to 24 months

8. Data Security

We implement appropriate security measures including:

• Encrypted data transmission and storage
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Incident response procedures

9. Payment Processing & Card Data

9.1 Our Payment Provider — Mollie

All payments made through YesTalk — including credit top-ups, number purchases, and automatic renewals — are processed securely by Mollie B.V., a leading European payment service provider headquartered in Amsterdam, Netherlands.

9.2 No Card Details Stored by YesTalk

YesTalk does not store, process, or have access to your full payment card details at any time. When you enter your card information during checkout, it is transmitted directly and securely to Mollie. YesTalk only receives a payment confirmation token and the last four digits of your card for reference purposes.

9.3 Saved Cards for Renewals and Auto Top-Ups

If you choose to save your payment method for automatic renewals or credit top-ups, your card details are stored securely by Mollie — not by YesTalk. Mollie operates under the following regulatory frameworks and security standards:

• PCI DSS Level 1 — The highest level of Payment Card Industry Data Security Standard compliance, independently audited annually
• Licensed Payment Institution — Regulated by De Nederlandsche Bank (DNB), the Dutch Central Bank, under the Payment Services Directive
• PSD2 Compliant — Fully compliant with the EU Payment Services Directive 2, including Strong Customer Authentication (SCA) requirements
• GDPR Compliant — Processes personal data in accordance with the General Data Protection Regulation across all EU/EEA operations
• UK FCA Authorised — Authorised by the Financial Conduct Authority (FCA) for payment services in the United Kingdom
• ISO 27001 Certified — Certified for information security management systems

For more information about how Mollie handles your data, please refer to Mollie's Privacy Statement.

11. International Transfers

Your data is primarily processed within the UK. Where international transfers are necessary, we ensure adequate protection through:

• Adequacy decisions by the UK authorities
• Standard contractual clauses
• Appropriate safeguards

10. Your Rights

Under UK data protection law, you have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Object: Object to certain processing activities

10.1 Exercising Your Rights

To exercise these rights, contact us at [email protected]. We will respond within one month of receiving your request.

12. Cookies and Tracking

Our website uses cookies and similar technologies for:

• Essential website functionality
• Analytics and performance monitoring
• Security and fraud prevention
• User preferences and settings

You can manage cookie preferences through your browser settings.

13. Marketing Communications

We may send you marketing communications about our services if:

• You have given explicit consent
• You are an existing customer and we have legitimate interest

You can opt out of marketing communications at any time by:

• Clicking unsubscribe links in emails
• Contacting us directly
• Updating your account preferences

14. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

15. Complaints

If you have concerns about how we handle your personal data:

1. Contact us first at [email protected]
2. If unsatisfied, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk

16. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be notified via email or through our services. The latest version will always be available on our website.

17. Contact Us

For any questions about this Privacy Policy or our data practices: