Legal
Privacy Policy
Voice Technology Systems (VTS)
Last updated: 21 October 2026
1. Who we are
Voice Technology Systems, also known as VTS, is a trading name of Blam Websites Ltd, registered in England and Wales under company number 09381351.
Our registered office is 167–169 Great Portland Street, 5th Floor, London, England, W1W 5PF.
In this policy, “we”, “us” and “our” mean Blam Websites Ltd. It explains how we handle personal information in connection with the VTS website, enquiries, demonstrations and services.
For privacy questions or to exercise your rights, email support@blamwebsites.com with “VTS Privacy” in the subject line, or write to our registered office.
2. When we control the information
We are the data controller when we decide why and how personal information is used for our own activities. These include responding to VTS enquiries, arranging demonstrations, managing customer relationships, billing, supporting our services and carrying out our own marketing.
When a business uses our services to handle its calls, messages, appointments or follow-up, that business will usually be the data controller for the information processed on its behalf. We act as its data processor where we follow its documented instructions under a data processing agreement. If a reseller is involved, the relevant agreement identifies the parties’ roles.
If you speak to an AI agent acting for another business, that business’s privacy notice explains its purposes and lawful basis, the information it collects and your choices. This policy explains VTS’s role; it does not replace the business’s notice. We remain responsible for any separate processing for which we act as controller, such as our own account administration and security records.
3. Information we handle
The information involved depends on how you interact with us and which services are enabled. It may include:
| Category | Examples |
|---|---|
| Contact and business details | Name, business name, job title, email address, telephone number and business address |
| Enquiries and correspondence | Information you submit through a form, email, meeting, support request or demonstration |
| Customer administration | Orders, account details, invoices, payment status and service preferences |
| Voice and messaging interactions | Telephone numbers, call times, duration, outcomes, messages, recordings and transcripts where enabled, summaries and information shared in a conversation |
| Service instructions and actions | Scripts, knowledge sources, appointment details, contact records, AI responses and actions taken through an authorised integration |
| Technical and security records | IP address, browser and device information, access logs, error records and service usage |
| Preferences and permissions | Marketing choices, opt-outs, consent records and cookie preferences |
Do not give a demonstration real customer information, payment card details or sensitive personal information unless we have expressly agreed that use and the necessary protections are in place. Test information is normally sufficient.
Information about health or other sensitive matters can be shared during a call even when it was not requested. For client services, the client must identify any intended sensitive processing and establish the necessary lawful basis, additional legal condition and safeguards. For processing under our control, we must establish those requirements ourselves before intentionally using such information.
4. Where information comes from
We receive information directly when you contact us, complete a form, interact with a demonstration, buy a service or request support. Some technical information is collected when you use the website or service.
We may also receive business contact information through an introduction, referral, event, publicly available business source or an authorised advertising or enquiry channel. If we obtain your information indirectly, we will provide the required privacy information within the applicable time limit, normally no later than our first communication with you or one month after obtaining it, unless a legal exception applies.
For client services, information may come from the client’s authorised contact lists, CRM, calendar or other connected system, and from people interacting with its AI agent. We process that information on the client’s documented instructions.
5. Why we use information and our lawful basis
For activities where we are the controller, the following purposes and lawful bases apply:
| Purpose | Lawful basis |
|---|---|
| Answer enquiries, arrange meetings and explain our services | Our legitimate interests in responding to people who contact us and developing relevant business relationships. If you personally are a prospective contracting party, steps requested before entering a contract may apply instead |
| Supply services and manage accounts | Performance of a contract where you personally are the contracting party. For employees and representatives of a business customer, our legitimate interests in delivering and administering that business relationship |
| Process invoices and maintain accounting records | Our legitimate interests in collecting payments and administering our business, and legal obligations for accounting and tax records |
| Operate demonstrations and assess their functionality | Our legitimate interests in explaining and testing the service, subject to clear information about any recording and any additional consent required by law |
| Investigate faults, protect systems and prevent misuse | Our legitimate interests in maintaining a reliable and secure service, and legal obligations where applicable |
| Send relevant business marketing | Consent where required by communications law. Where consent is not required, our legitimate interests in promoting relevant services, subject to your right to object |
| Use advertising or analytics technologies requiring consent | Your consent, obtained through the relevant website controls |
| Handle legal claims and comply with binding requirements | Our legitimate interests in establishing or defending legal claims, or the relevant legal obligation |
Where we rely on legitimate interests, we must consider the impact on you and balance those interests against your rights. You can ask us for more information or object to the processing.
The lawful basis for a client’s calling or messaging campaign is determined by that client. Our processing on its behalf is governed by the data processing agreement and its lawful instructions.
Reading this policy or visiting the website does not, by itself, give consent to marketing, recording or other processing that requires consent.
6. AI conversations, recordings and integrations
An AI voice interaction involves processing audio to understand speech and generate a response. Audio processing during a call is distinct from storing a recording afterwards. Where recording or transcription is enabled, information may also be stored for the purposes explained in the relevant notice.
For our own demonstrations or calls, we will explain whether recording or stored transcription takes place before it starts and obtain consent where legally required. For a client’s service, those notices and settings must be agreed with the client before launch.
Depending on the configuration, AI may summarise conversations, capture contact details, classify an enquiry, make a booking or pass information into an authorised system. AI can make mistakes. If information about you is inaccurate, or you need human assistance, contact the business responsible for the interaction or contact us using the details above if it concerns VTS directly.
Access to a connected CRM, calendar or other system is limited to the permissions and functions authorised for the service. Disconnecting an integration may stop future access but does not automatically delete records already lawfully created or retained.
Any use of personal information for AI model development or supplier model improvement must be specifically identified and supported by the appropriate legal arrangements. Permission to provide a call-handling service is not blanket permission to train general-purpose models.
7. Who receives information
Information is made available only where needed for the purposes described in this policy or otherwise lawfully permitted. Recipients may include:
- Authorised staff and contractors delivering or supporting the service.
- Website hosting, CRM, communications, telephony, speech processing, AI model and cloud infrastructure suppliers.
- Providers of authorised calendar, booking and other integrations.
- Billing, payment, accounting, legal and other professional service providers.
- Analytics and advertising providers where their tools are enabled and the required permissions are in place.
- Regulators, courts, law enforcement or other recipients where disclosure is legally required or necessary to establish or defend a legal claim.
- A prospective purchaser or successor in a business transaction, subject to appropriate confidentiality and data protection safeguards.
For calls handled for a client, the client and its authorised users receive the information produced through the agreed service. Client data is not made available to unrelated customers.
Where a supplier acts as our processor, it must operate under appropriate contractual restrictions. Some recipients, such as payment providers or professional advisers, may act as independent controllers for their own legally defined purposes.
8. International transfers
Some providers or authorised support teams may process information outside the UK. The protections available in another country may differ from those in the UK.
Where a restricted transfer takes place, it must be covered by a valid mechanism under the applicable data protection law. This may be UK adequacy regulations covering the recipient, or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s standard contractual clauses, together with the required assessment and any additional measures.
You can contact us for details of the safeguards applicable to your information and a copy or explanation of the relevant protection, subject to necessary redactions for security or confidentiality.
9. How long we keep information
We keep identifiable information only for as long as needed for its stated purpose, including any applicable legal, accounting, complaint-handling or legal-claim requirements. Retention depends on the type of record, the purpose, the sensitivity and whether a dispute or legal hold applies.
For information we process on a client’s behalf, the client’s instructions and data processing agreement determine the retention period and return or deletion arrangements. Details should be available in the client’s privacy notice. We may retain separate records where legally required, but only for that purpose.
Where an objection or opt-out is received, we may keep a minimal suppression record to ensure the preference continues to be respected. Deleted information in backups must remain protected and be removed through the applicable backup cycle rather than restored into routine use.
10. Cookies and similar technologies
Websites and embedded tools may use cookies, pixels, local storage or similar technologies to operate the service, remember choices, understand use or measure advertising.
Strictly necessary technologies can operate without consent where they meet the legal exception. For technologies requiring consent, we must obtain it before they operate. Advertising and retargeting technologies must not be enabled merely because you continue browsing.
Where a permitted statistical or other exception is used instead of consent, its conditions must be met, including clear information and a simple free means of objecting where required. An exception for one limited purpose does not authorise advertising or unrelated tracking.
You can also manage cookies through your browser. Blocking strictly necessary technologies may prevent some requested functions from working. Browser controls do not replace the website’s obligation to provide appropriate information and choices.
11. Marketing and your choices
Where we market VTS services, we follow the rules applicable to the recipient and communication channel. A business email address or publicly available telephone number does not remove all privacy and communications requirements.
You can object to our direct marketing at any time by using the unsubscribe route provided or emailing support@blamwebsites.com. We will stop the affected marketing and retain only the information needed to respect the preference. Withdrawing marketing consent does not affect processing already carried out lawfully.
We may still send necessary service, billing or security messages relating to an active account. Marketing permissions given to VTS do not automatically authorise a client’s marketing, or the other way around.
12. Your rights
Depending on the circumstances and applicable law, you may have rights to:
- Access your personal information and receive information about its use.
- Correct inaccurate information or complete incomplete information.
- Request deletion or restriction of processing.
- Object to processing based on legitimate interests, and object to direct marketing at any time.
- Receive certain information in a portable format.
- Withdraw consent where processing relies on it.
- Obtain the protections that apply to qualifying automated decisions, including human intervention where required by law.
Contact us using the details in section 1. We may need proportionate information to verify your identity and locate the relevant records. Requests are normally free and handled within one month, subject to any lawful extension, clarification or other applicable rules. We will explain any restriction or refusal.
Where the information belongs to a client’s service, contact that business first. If you contact us, we will help identify the responsible controller and assist it as required by our agreement and the law.
You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. You do not have to complain to us first, although we welcome the opportunity to resolve your concern. If another supervisory authority has jurisdiction, you may also have the right to complain to it.
13. Security and children’s information
Appropriate technical and organisational measures must protect the information we handle. These include restricting access to authorised people, protecting accounts and assessing the safeguards used by relevant suppliers. No system can be guaranteed completely secure.
Our website and business purchasing services are intended for adults acting in a business capacity. This does not mean that a client’s callers will always be adults. Any service intended to process children’s information must be assessed and configured with the client for that purpose, with appropriate safeguards and notices.
If you believe information about a child has been shared inappropriately, contact us so the responsible controller can assess and address it.
14. Changes and contact
We may update this policy as our services, suppliers or legal requirements change. The publication date above identifies the current version. We will give additional notice where required for a material change. An updated policy does not itself provide consent or a lawful basis for a new use of information.
For questions, requests or complaints, contact:
Blam Websites Ltd, trading as Voice Technology Systems (VTS)
Email: support@blamwebsites.com, with “VTS Privacy” in the subject line.
Registered office: 167–169 Great Portland Street, 5th Floor, London, England, W1W 5PF.
Company number: 09381351.