Privacy Policy

Last Updated: October 23, 2025

1. Introduction

Welcome to BubblyPhone. This Privacy Policy explains how Inhype Live Limited ("we," "us," or "our"), a company registered in the United Kingdom (Company Number: 13379772), collects, uses, discloses, and protects your personal information when you use our VoIP calling service at bubblyphone.com (the "Service").

We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

Contact Information:

Email: hello@bubblyphone.com
Company: Inhype Live Limited
Registration Number: 13379772

2. Information We Collect

2.1 Information You Provide to Us

Account Information:

Name and email address
Payment information (processed securely through Stripe)
Profile information you choose to provide

Communication Data:

Phone numbers you call (Call Detail Records)
Call duration and timestamps
Account balance and transaction history

2.2 Information Collected Automatically

Technical Information:

IP address and device information
Browser type and version
WebRTC connection data
Usage statistics and analytics
Cookies and similar tracking technologies

Call Quality Data:

Network performance metrics
Audio quality indicators
Connection diagnostics

3. How We Use Your Information

We process your personal information on the following legal bases:

3.1 Contract Performance (Article 6(1)(b) GDPR)

We use your information to:

Provide and maintain the VoIP calling service
Process your calls and route them to destinations
Manage your account and billing
Provide customer support

3.2 Legitimate Interests (Article 6(1)(f) GDPR)

We may use your information to:

Improve our service quality and user experience
Detect and prevent fraud and abuse
Ensure network security and stability
Analyze usage patterns to optimize our infrastructure

3.3 Legal Obligations (Article 6(1)(c) GDPR)

We may process your information to:

Comply with legal and regulatory requirements
Respond to lawful requests from authorities
Maintain records as required by telecommunications regulations

3.4 Consent (Article 6(1)(a) GDPR)

With your consent, we may:

Send you marketing communications
Use non-essential cookies for analytics
Share information with third parties for specific purposes

4. Data Retention

We retain your personal information only as long as necessary:

Call Detail Records (CDR): 90 days from call completion
Account Information: Duration of your account plus 6 years (for tax/legal compliance)
Payment Records: 7 years (legal and accounting requirements)
Technical Logs: 30 days
Marketing Consent Records: Until consent is withdrawn

5. Data Sharing and Disclosure

We may share your information with:

5.1 Service Providers

Stripe: Payment processing (PCI-DSS compliant)
Telnyx: VoIP carrier services for call routing
Cloud Infrastructure: Hosting and storage providers
Analytics Services: Usage and performance monitoring

All third-party service providers are bound by data protection agreements and process data only on our instructions.

5.2 Legal Requirements

We may disclose information when required by law, including:

Court orders or subpoenas
Law enforcement requests
National security requirements
Protection of our legal rights

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. International Data Transfers

Your information may be transferred to and processed in countries outside the UK/EEA. When we transfer data internationally, we ensure appropriate safeguards:

Standard Contractual Clauses (SCCs): EU-approved contractual terms
Adequacy Decisions: Transfers to countries with adequate data protection
Your Explicit Consent: For specific transfers with your knowledge

7. Your Rights Under GDPR

You have the following rights regarding your personal information:

7.1 Right to Access (Article 15)

Request a copy of the personal data we hold about you.

7.2 Right to Rectification (Article 16)

Correct inaccurate or incomplete information.

7.3 Right to Erasure (Article 17)

Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.

7.4 Right to Restrict Processing (Article 18)

Limit how we use your information in certain circumstances.

7.5 Right to Data Portability (Article 20)

Receive your data in a machine-readable format and transfer it to another provider.

7.6 Right to Object (Article 21)

Object to processing based on legitimate interests or direct marketing.

7.7 Right to Withdraw Consent (Article 7(3))

Withdraw consent at any time for consent-based processing.

7.8 Right to Lodge a Complaint

File a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

To exercise your rights, contact us at: hello@bubblyphone.com

We will respond to your request within 30 days.

8. Security Measures

We implement appropriate technical and organizational measures to protect your data:

Technical Safeguards:

End-to-end encryption for call signaling (WebRTC)
TLS/SSL encryption for data transmission
Secure storage with encryption at rest
Regular security audits and penetration testing

Organizational Measures:

Access controls and authentication
Employee training on data protection
Data processing agreements with vendors
Incident response procedures

9. Call Recording

BubblyPhone does not record calls by default. If we introduce call recording features in the future:

We will obtain your explicit consent
You will be clearly notified before recording begins
You will have control over recording settings
Recordings will be encrypted and retained per our retention policy

10. Children's Privacy

Our Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately at hello@bubblyphone.com.

11. Cookies and Tracking Technologies

We use cookies and similar technologies. See our Cookie Policy for detailed information about:

Types of cookies we use
Cookie management and opt-out options
Third-party cookies

12. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms:

We will notify the ICO within 72 hours of becoming aware
We will notify you without undue delay if the breach poses a high risk
Notifications will include the nature of the breach and remedial actions

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will:

Post the updated policy on our website
Update the "Last Updated" date
Notify you of material changes via email or Service notification
Obtain consent if required by law

14. Contact Us

For privacy-related questions, requests, or concerns:

Email: hello@bubblyphone.com Subject Line: Privacy Request

Data Protection Officer: Available upon request

Postal Address: Inhype Live Limited United Kingdom Company Number: 13379772

UK Supervisory Authority: Information Commissioner's Office (ICO) Website: https://ico.org.uk Helpline: 0303 123 1113