Privacy policy

Last updated: October 2026

This policy explains how Alphatalk Ltd (“Alphatalk”, “we”, “us”) collects and uses personal data when you visit this website, contact us, place an order or use our services. We are committed to protecting your privacy and handle personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

Alphatalk Ltd is the data controller for the personal data described in this policy. We are a company registered in England and Wales (company number 04828811) with our office at Digbeth Court, 162–164 High Street, Deritend, Birmingham B12 0LD. We are registered with the Information Commissioner's Office (registration number [to be confirmed]).

2. What we collect

• Enquiries. When you use a form on this website, call or email us: your name, email address, phone number, company, the services you are interested in and the details of your request.
• Orders. When you buy from us: your name, company, email address, phone number, billing address, the numbers and services you order, and the phone numbers you ask your new numbers to divert to.
• Payments: card payments are taken on our payment provider's secure page. We receive confirmation of payment but we do not see or store your full card number.
• Customer account data. When you use our services: account and contact details, billing and payment history, call detail records (such as numbers called, dates, times and durations) that we need to provide and bill your services, and the information needed to move (port) numbers between providers.
• Support records: notes of calls and emails with our team so we can help you and keep an accurate record of your account.
• Website data: the contents of your cart are stored in your own browser. See our cookie policy for details.

3. How we use it, and why

What we do	Lawful basis
Answer your enquiry and prepare a quote	Taking steps at your request before entering a contract; our legitimate interest in responding to enquiries
Process your order, set up and provide your services, move your numbers	Performance of a contract
Bill you, take payment and recover unpaid amounts	Performance of a contract; our legitimate interests
Provide technical support and keep records of our dealings with you	Performance of a contract; our legitimate interests
Prevent fraud and misuse of our network and services	Our legitimate interests; legal obligation
Meet our legal and regulatory obligations, including Ofcom requirements, tax and accounting rules, and lawful requests from authorities	Legal obligation
Send you news and offers by email	Your consent, which you can withdraw at any time using the unsubscribe link in each email

4. Who we share it with

We only share personal data where we need to, and never sell it. We may share it with:

• Network operators and carriers: to route your calls, provide your numbers and move numbers to or from other providers.
• Our payment provider: to take card payments securely.
• IT and hosting providers: who run our systems and email on our behalf, under contract and confidentiality obligations.
• Credit reference and debt collection agencies, and financial institutions: where needed to check credit, take payment or recover money owed, as set out in our terms and conditions.
• Professional advisers: such as accountants and lawyers.
• Authorities: including law enforcement and regulators, where the law requires us to.

5. Transfers outside the UK

Some of our suppliers may process data outside the UK. Where they do, we make sure your data is protected by UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement.

6. How long we keep it

We keep personal data only for as long as we need it for the purposes above. Customer, billing and call records are kept for the length of your contract and afterwards for as long as required by law, accounting records, for example, are normally kept for six years. Enquiries that do not lead to an order are deleted when they are no longer needed. [Retention periods to be confirmed]

7. How we protect it

We follow the ISO 27001 security standards for data protection and best-practice guidance. Access to personal data is limited to the people who need it, and our systems are protected by technical and organisational security measures. Where we have given you login details for myAlphaTalk, please keep them confidential.

8. Your rights

You have the right to:

• ask for a copy of the personal data we hold about you: free of charge, and normally within one month;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data, or to restrict how we use it, in certain circumstances;
• object to our use of your data where we rely on legitimate interests, and to direct marketing at any time;
• ask us to transfer data you gave us to another organisation (data portability);
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, contact us using the details below. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, though we would appreciate the chance to put things right first.

9. Call recording

If you use the call recording feature of our cloud phone system, you decide which calls are recorded and why, and you are responsible for telling callers that calls may be recorded and for handling the recordings lawfully. We store recordings on your behalf.

10. Cookies

This website uses only what it needs to work, such as remembering the contents of your cart. Our cookie policy explains exactly what is stored and how to control it.

11. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated at the top.

12. Contact us