Last updated: August 2026
Calloto operates a missed-call text-back service for tradespeople. This policy explains how we collect, use, and protect personal data in line with the UK GDPR.
Business account holders: business name, email address, phone number, trade, message template, price range, and booking link. We also collect billing information through our payment provider (we do not store card details).
Callers: phone number, call timestamp, and call status. We do not store caller names, addresses, or call recordings unless you provide them.
We use account data to provide the Service, send text-backs, process payments, and show your dashboard. We use caller numbers to send the transactional text-back that is triggered by the caller's own inbound call (under PECR, this is a transactional response, not marketing).
We process account data to perform our contract with you. We process caller numbers based on legitimate interest (responding to the caller's own contact attempt) and to provide the Service you have subscribed to.
Missed-call records are retained for up to 12 months, after which they are deleted or anonymised. Account data is retained while your account is active and for as long as needed for legal or accounting purposes.
We share data only with providers needed to run the Service: our telephony/WhatsApp provider (to send text-backs), our payment provider (to process payments), and our hosting provider. We do not sell personal data.
We use encryption in transit and access controls to protect data. Caller numbers are stored only where necessary to provide the Service.
You can request access to, correction of, or deletion of your data. Callers whose number was texted may contact us to have their number removed. To exercise any right, email [email protected].
Our website uses only essential cookies needed for the dashboard to function. We do not use advertising trackers.
Privacy enquiries: [email protected]