Big Bear Agency ("we", "us", "our") respects your privacy. This policy explains what personal data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
Who we are
Big Bear Agency is the data controller for personal data collected through our website and services. You can contact us at hello@thebigbear.app.
What we collect
- Contact details you submit through forms (name, email, phone, business name).
- Account information if you sign up for our services.
- Billing information processed via our payment provider (Stripe).
- Call recordings, transcripts, and lead summaries handled by your AI receptionist.
- Technical data (IP address, device, browser) and usage data.
How we use your data
- To provide and improve our services.
- To respond to enquiries and provide support.
- To process payments and manage subscriptions.
- To send service updates and, with consent, marketing.
- To meet legal and regulatory obligations.
Lawful bases
We rely on contract, legitimate interests, consent (where required), and legal obligation.
Sharing
We share data with trusted processors who help us run our services, including hosting and database providers (Supabase / Lovable Cloud), payment processing (Stripe), and voice and telephony providers used for the AI receptionist. We do not sell your data.
Retention
We keep personal data only as long as needed for the purposes above or as required by law, typically up to 7 years for billing and accounting records.
Your rights
You have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. To exercise these rights email hello@thebigbear.app. You can complain to the ICO at ico.org.uk.
International transfers
Some of our processors are outside the UK. Where this happens we use appropriate safeguards such as the UK International Data Transfer Addendum.
Changes
We may update this policy from time to time. The "last updated" date above shows the latest version.