Privacy Policy

Privacy Policy — Content Horizon Ltd

Last updated: 24 October 2025

1. Who We Are

Content Horizon Ltd (Company No. 15782951)
Registered Office: 3 Bards Corner, Hemel Hempstead, England, HP1 3RR
Contact Email: info@contenthorizon.co.uk

We provide AI-powered content generation, voice assistants, and automation solutions for businesses.

2. Purpose and Scope

This Privacy Policy explains how we collect, use, and protect personal data from clients, platform users, and end-users interacting with our AI systems, websites, or automation services.

It applies to all personal data processed by Content Horizon Ltd, whether collected directly or on behalf of our business clients.

3. Our Role

When we provide AI assistants and automation for business clients, Content Horizon Ltd acts as a Data Processor, processing data under their instructions.
For our own operations (such as our website, billing, analytics, or customer support), we act as the Data Controller.

4. What Data We Collect

We may process the following categories of data:

Contact details (e.g. name, email, phone number)
End-user data collected through AI assistants or forms
Audio data (e.g. call recordings, transcriptions)
Technical and event logs
Payment data (processed securely via Stripe)

We do not intentionally collect special-category data (e.g. health, religion, biometric data).

5. Legal Bases for Processing (GDPR Art. 6)

Contract necessity: to deliver products and services.
Legitimate interest: to maintain, secure, and improve our systems.
Consent: where explicitly required (e.g. marketing or call recording).

6. How We Use Data

We process personal data to:

Deliver and manage AI content and automation tools
Improve quality and security of our systems
Manage billing, subscriptions, and client accounts
Conduct analytics and performance tracking

We never sell or rent personal data.

7. Retention Periods

Data is retained only as long as necessary for the purposes stated:

Data TypeRetention Period

AI assistant transcripts & logs30–180 days

Billing and transaction records6 years (legal requirement)

Support correspondence12 months

Security logs90 days

Audio recordings30–180 days or per client instruction

All data is securely deleted or anonymised once retention limits expire.

8. Sub-Processors and Data Locations

We use GDPR-compliant third-party providers, including:
Supabase, Make.com, Vapi, Twilio, OpenAI, Lovable/Vercel, Cal.com, Stripe.

All providers process data under signed Data Processing Agreements (DPAs) with encryption in transit and at rest.

9. Cross-Border Transfers

Data is primarily hosted in the UK and EU.
Any transfers outside the UK/EU are covered by Standard Contractual Clauses (SCCs) and appropriate DPAs to ensure GDPR compliance.

10. Security Measures

We apply industry-standard safeguards, including:

TLS encryption in transit
Encryption at rest
Role-based access controls
Daily backups and restoration tests
Regular access reviews and penetration testing

Supabase database activity is continuously monitored. Triggers log deletions and updates to sensitive tables in a dedicated security_events log. Administrators review logs weekly and receive real-time alerts for high-risk changes, ensuring GDPR Article 32 compliance.

11. Audio Recording & Consent

Where applicable, calls or voice interactions may be recorded with prior notice.
Recordings are securely stored, encrypted, and automatically deleted after their retention period.

11A. Voice Recording & Transcription

If you enable the “voice recording & transcription” option within our AI assistants, we will record your spoken input and convert it into text for the purpose of improving assistant responses, maintaining quality assurance, and supporting customer interactions.

Lawful Basis: Consent (where the user enables this feature) or Contract Necessity (for business clients using this feature as part of their workflow).
Retention: Audio and transcripts are retained for 30 days by default, after which they are securely deleted or anonymised.
Security: All audio and transcript data are encrypted at rest and in transit, with access restricted to authorised personnel only.
Your Rights: You may withdraw consent or request deletion of recordings or transcripts at any time by contacting info@contenthorizon.co.uk.
Processor: We use Vapi as our voice-processing and transcription provider. Data may be processed or stored in the UK/EU region and transferred internationally only under approved safeguards (such as Standard Contractual Clauses).
Use Limitations: Transcripts are used solely to deliver and maintain our AI assistant services. We will not use transcripts for marketing or unrelated analytics unless you explicitly consent.

If you choose not to enable transcription, no voice recordings or transcripts are stored or processed.

12. Automated Decision-Making & AI

Our AI systems may assist in generating content, transcribing audio, or routing customer requests automatically.
No decisions with legal or significant effects are made without human oversight.
You may request human review of any automated outcome by contacting us.

13. Your Rights

You have the right to:

Access your personal data
Request correction or deletion
Restrict or object to processing
Request data portability

To exercise any data rights, please email info@contenthorizon.co.uk with the subject line “Data Rights Request”. We may verify your identity before fulfilling your request.

14. Data Breach Procedure

In the event of a personal data breach, we will notify the ICO and affected users within 72 hours, if legally required.

15. Cookies & Analytics

We only use cookies essential for site functionality or anonymous analytics.
You can manage cookie preferences via your browser settings.

16. Children’s Data

Our services are not directed to individuals under 16 years of age, and we do not knowingly collect personal data from minors.

17. Updates

We may update this Privacy Policy periodically. Material changes will be posted on our website with an updated “Last Revised” date.

18. Contact & Complaints

For any questions or concerns regarding this policy or our data practices:
Email: info@contenthorizon.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk