Privacy Policy

PRIVACY POLICY

Last Updated: 2 October 2026

1. ABOUT THIS PRIVACY POLICY

This Privacy Policy explains how A1 Legacy Labs (“A1 Legacy”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal information when you visit our website, contact us, submit a form, book a consultation, communicate with one of our AI-powered systems or use our technology and automation services.

A1 Legacy provides AI automation, business automation, CRM automation, AI voice agents, conversational AI, workflow automation, lead qualification and follow-up systems, appointment automation, API and system integrations and custom AI solutions.

This Privacy Policy applies to information processed through our website and through services that A1 Legacy operates directly.

Where A1 Legacy processes information solely on behalf of a client, the client may act as the data controller or business responsible for that information and A1 Legacy may act as a service provider or processor on that client’s behalf.

2. INFORMATION WE MAY COLLECT

The information we collect depends on how you interact with A1 Legacy and which services are being used.

We may collect information such as:

• Full name
• Business email address
• Telephone number
• Company name
• Job title
• Country or region
• Business requirements
• Information submitted through website forms
• Consultation or appointment information
• Messages and correspondence
• Support requests
• Communication preferences
• Marketing preferences where applicable

3. INFORMATION PROCESSED THROUGH AI AND AUTOMATION SYSTEMS

Depending on the service being provided, A1 Legacy systems may process information generated through automated or AI-assisted workflows.

This may include:

• Website chat conversations
• SMS or messaging conversations
• AI voice-agent interactions
• Call details
• Call recordings where recording is enabled and lawful
• Call transcripts
• Appointment information
• Lead information
• CRM records
• Contact and opportunity information
• Qualification responses
• Customer enquiries
• Workflow activity
• Tasks and follow-up records
• Information transferred between connected business systems

The exact information processed depends on the configuration agreed with the relevant client.

4. CLIENT CRM AND CUSTOMER DATA

A1 Legacy builds and integrates systems that may connect to customer relationship management platforms, calendars, communication tools, forms, APIs and other business systems.

Where we process personal information contained within a client’s systems, that information remains subject to the client’s own privacy responsibilities and instructions.

A1 Legacy does not claim ownership of client customer data.

We process such information only where reasonably necessary to configure, operate, support or maintain the services being provided, subject to the applicable agreement and legal requirements.

5. TECHNICAL AND WEBSITE INFORMATION

When you use our website or digital services, certain technical information may be collected automatically.

This may include:

• Internet Protocol address
• Browser type
• Device type
• Operating system
• Pages visited
• Date and time of access
• Referring website or source
• General interaction information
• Website performance information
• Cookie identifiers where applicable

This information may be used for security, website operation, analytics and service improvement.

6. HOW WE USE INFORMATION

We may use personal information to:

• Respond to enquiries
• Understand business requirements
• Provide requested services
• Arrange consultations and appointments
• Configure AI and automation systems
• Operate CRM and workflow integrations
• Provide technical support
• Maintain customer relationships
• Communicate service information
• Manage projects
• Process requests and support tickets
• Monitor system performance
• Improve our services
• Protect our systems against misuse or security threats
• Maintain appropriate business records
• Comply with applicable legal obligations
• Establish, exercise or defend legal rights

We will not use personal information for a materially unrelated purpose without an appropriate legal basis.

7. LEGAL BASIS FOR PROCESSING

Where applicable data-protection law requires a lawful basis, the basis used will depend on the circumstances.

Processing may be based on:

• Your consent
• Steps taken at your request before entering into a contract
• Performance of a contract
• Compliance with a legal obligation
• Legitimate business interests where permitted by law
• Establishment, exercise or defence of legal rights
• Another lawful basis available under applicable law

Where we rely on consent, you may withdraw that consent where legally permitted.

Where UK GDPR applies, organisations should explain their processing purposes, lawful bases, recipients, international transfers and other relevant privacy information to individuals. :chatgpt-content-reference{index="1"}

8. AI-ASSISTED PROCESSING

Some A1 Legacy services use artificial intelligence to assist with activities such as:

• Responding to enquiries
• Summarising information
• Classifying enquiries
• Lead qualification
• Drafting communications
• Routing conversations
• Scheduling workflows
• Analysing business information
• Supporting customer-service processes

AI-generated outputs may be based on information supplied by users, clients or connected systems.

AI outputs can contain errors and should not automatically be treated as professional, legal, financial, medical or other regulated advice.

Where appropriate, clients remain responsible for implementing suitable human review and oversight for decisions that materially affect individuals.

9. VOICE AI AND COMMUNICATION SYSTEMS

Where an AI voice agent or automated communication system is used, information may include:

• Caller telephone number
• Name
• Contact details
• Reason for calling
• Conversation content
• Appointment requirements
• Call transcript
• Call recording where enabled
• Follow-up actions generated from the conversation

Where recording or monitoring requires notice or consent under applicable law, the relevant business deploying the system is responsible for ensuring the appropriate notice or consent process is in place.

10. HOW WE SHARE INFORMATION

We may share information with service providers that help us operate our business and deliver our services.

These may include providers of:

• Cloud infrastructure
• Website hosting
• CRM systems
• Automation infrastructure
• Artificial-intelligence services
• Voice and telephony services
• Email and messaging services
• Scheduling systems
• Data storage
• Analytics
• Cybersecurity
• Technical support
• Professional advisory services

We aim to provide service providers only with information reasonably necessary for the service they perform.

We may also disclose information where required by law, legal process or a valid regulatory request.

11. CLIENT-SELECTED THIRD-PARTY SERVICES

Some A1 Legacy implementations integrate with software, platforms or service providers selected by the client.

Those third parties may operate under their own privacy policies, contracts and security practices.

A1 Legacy is not responsible for the independent privacy practices of third-party platforms that it does not control.

12. INTERNATIONAL DATA TRANSFERS

A1 Legacy supports businesses across multiple international markets and may use technology providers operating in different countries.

As a result, personal information may be processed or stored outside the country in which it was originally collected.

Where applicable data-protection legislation requires safeguards for international transfers, appropriate lawful mechanisms should be used.

A1 Legacy’s public business profile states that it supports organisations across the USA, UK, Canada, Europe, Turkey and the Middle East. :chatgpt-content-reference{index="2"}

13. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to contractual, security, legal, accounting, dispute-resolution and regulatory requirements.

Retention periods may differ depending on:

• The type of information
• The service being provided
• Client instructions
• Contractual requirements
• Applicable law
• Security requirements
• Whether information is needed to establish or defend legal rights

When information is no longer required, it may be deleted, anonymised or securely archived as appropriate.

Privacy notices should explain why information is processed, how long it will be retained and who it may be shared with. :chatgpt-content-reference{index="3"}

14. DATA SECURITY

We use reasonable technical and organisational measures intended to protect information against:

• Unauthorised access
• Accidental loss
• Misuse
• Unauthorised disclosure
• Alteration
• Destruction

Measures may include access controls, authentication, role-based permissions, secure infrastructure, system monitoring, credential management and other appropriate safeguards.

No internet-connected system or electronic transmission method can be guaranteed to be completely secure.

15. PASSWORDS, API KEYS AND CREDENTIALS

Clients and users should not send passwords, private API keys, authentication tokens or other sensitive credentials through unsecured communication channels.

Where credentials are required to configure integrations, appropriate secure methods should be used wherever available.

Access credentials should be limited to what is reasonably necessary for the relevant integration or service.

16. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies or similar technologies for:

• Essential website functionality
• Security
• Session management
• Preference storage
• Analytics
• Performance measurement
• Marketing technologies where enabled

Where applicable law requires consent for non-essential cookies, those technologies should be controlled through an appropriate consent mechanism.

More information should be provided in the A1 Legacy Labs Cookie Policy.

17. MARKETING COMMUNICATIONS

Where permitted by applicable law, we may send information about A1 Legacy services, updates or relevant business communications.

Where consent is required, marketing communications will be sent on the basis of appropriate consent.

Recipients may unsubscribe from marketing communications using the available unsubscribe mechanism or by contacting us.

Operational or contractual communications may still be sent where necessary.

18. YOUR PRIVACY RIGHTS

Depending on where you are located and which law applies, you may have rights relating to your personal information.

These may include rights to:

• Be informed about how information is processed
• Request access to personal information
• Request correction of inaccurate information
• Request deletion where legally available
• Request restriction of processing
• Object to certain processing
• Withdraw consent
• Request data portability where applicable
• Submit a complaint to an appropriate data-protection authority

Under the GDPR, these rights include access, rectification, erasure, restriction, portability and objection in applicable circumstances. :chatgpt-content-reference{index="4"}

Some rights may be subject to legal limitations or exemptions.

19. CLIENT END-CUSTOMER REQUESTS

If your information is held within a system operated by one of our clients, you should normally direct your privacy request to that client.

Where A1 Legacy acts as a processor or service provider, we may assist the relevant client in responding to a valid privacy request in accordance with our contractual obligations.

20. CHILDREN

A1 Legacy’s business services are primarily intended for organisations and professional users.

Our website and services are not designed to intentionally collect personal information directly from children without an appropriate lawful basis.

If you believe a child has provided information to us improperly, please contact us.

21. THIRD-PARTY LINKS

Our website may contain links to third-party websites and services.

A1 Legacy does not control those websites and is not responsible for their independent privacy practices.

Visitors should review the privacy information provided by the relevant third party.

22. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy when our:

• Services change
• Technology changes
• Data-processing practices change
• Security procedures change
• Legal requirements change

The latest version will be published on this page with the updated revision date.

Privacy information should be kept under review and updated when processing activities change. :chatgpt-content-reference{index="5"}

23. CONTACT AND PRIVACY REQUESTS

For privacy questions, requests concerning your personal information or questions about this Privacy Policy, contact A1 Legacy Labs through the official contact details published on:

https://a1legacylabs.com/

We may request reasonable information to verify identity before responding to certain privacy requests.

If your request concerns data held by an A1 Legacy client, we may direct you to the relevant client as the appropriate organisation responsible for that information.