Privacy Policy

1. Who we are

Numeratel — [Registered company name], registered in [country] under number [company registration number], with its registered office at [registered address] — is the controller of the personal information described in this policy.

Where we carry your communications on your instruction, we may act as a processor in respect of certain data. Where that is the case, a separate data processing agreement will set out the applicable terms.

Privacy enquiries: privacy@numeratel.com. [If you have appointed a Data Protection Officer or an EU/UK representative, add their contact details here.]

2. Information we collect

2.1 Information you give us

• Contact details — name, business email, telephone number, and role.
• Organization details — company name, registered address, registration and tax numbers, and website.
• Request details — the service, markets, expected usage, intended use, and technical requirements you describe.
• Verification material — identity documents, proof of address, and supporting documentation where the service or market requires it.
• Correspondence — the content of emails and support tickets you send us.

2.2 Information generated by the services

• Call detail records — calling and called numbers, date, time, duration, direction, routing, and completion status.
• Technical and signalling data — SIP signalling information, IP addresses used to connect, codec and session data, and error records.
• Usage and billing data — volumes, destinations, and charges.
• Security and fraud-prevention records — alerts, investigation notes, and related evidence.

2.3 Information from other sources

• Company registries, sanctions and screening tools, and identity-verification providers.
• Carriers, platforms, regulators, and other third parties, including complaints and abuse reports.

3. Why we use it, and our legal basis

Under the [UK GDPR / EU GDPR / applicable law], we rely on the following bases. Confirm the correct framework and wording for your jurisdictions.

• To review requests and onboard customers — necessary to take steps at your request prior to entering a contract, and to comply with legal obligations.
• To provide, configure, and support the services — necessary for the performance of a contract.
• To bill and collect payment — necessary for the performance of a contract, and our legitimate interest in recovering sums due.
• To prevent fraud and abuse, and to secure our network — our legitimate interest in protecting our network, our customers, and call recipients, and compliance with legal and carrier obligations.
• To meet regulatory, carrier, and legal obligations — compliance with a legal obligation, including record-keeping and lawful requests.
• To communicate with you about your account or request — performance of a contract, and our legitimate interest in responding to enquiries.
• To improve our services — our legitimate interest in operating and developing our business, using aggregated or minimised data where practicable.

We do not sell personal information, and we do not use the content of customer communications for marketing or profiling.

4. Communications content

We operate security and compliance monitoring across our network. That monitoring is directed at traffic and usage patterns — such as volumes, destinations, durations, completion rates, and signalling behaviour — together with call detail records and technical logs.

We do not listen to or read the content of customer communications indiscriminately or as a routine practice. Where access to content is required — for example under a valid legal process, or where a service you have expressly requested involves handling content — it is limited to what is necessary, restricted to authorised personnel, and recorded.

If you record calls using our services, you are responsible for obtaining the consents and giving the notices required by law in the relevant jurisdictions.

5. Who we share it with

We share personal information only where necessary, with:

• Carriers and interconnect partners — signalling and routing information required to complete calls, and information required to resolve faults or investigate abuse.
• Numbering authorities and regulators — where required for number assignment, registration, or compliance.
• Service providers — hosting, monitoring, identity verification, accounting, and support tooling, each under contract and permitted to use the data only for the agreed purpose.
• Professional advisers — legal, accounting, and audit advisers under duties of confidentiality.
• Lawful authorities — where we are required to respond to a valid legal request, or where disclosure is necessary to establish, exercise, or defend legal claims.
• A successor — in connection with a merger, acquisition, or transfer of our business, subject to equivalent protections.

Where we receive a request from a lawful authority, we assess its validity and scope, and disclose only what is required.

6. International transfers

Telecommunications is international by nature, and providing the services may involve transferring information to countries outside your own — including to carriers in the destination country of a call.

Where personal information is transferred outside [the UK / EEA / your jurisdiction], we rely on an adequacy decision where one applies, or on appropriate safeguards such as standard contractual clauses, together with any additional measures needed. You may request details of the safeguards in place by writing to privacy@numeratel.com.

7. How long we keep it

We keep personal information only as long as necessary for the purposes described above, and to meet legal, regulatory, and carrier obligations. Indicative periods — confirm against the requirements in your jurisdictions:

• Request and onboarding records — [x] years from the date of the request, whether or not it was approved.
• Verification documents — for the duration of the service and [x] years afterwards.
• Call detail records and technical logs — [x] months, or longer where required by law or retained for an active investigation.
• Billing and accounting records — [x] years, as required by tax and company law.
• Abuse and fraud investigation records — for as long as necessary for the investigation and any resulting proceedings.
• General correspondence — [x] years.

Where records are subject to a legal hold or an ongoing investigation, they are retained until that matter concludes.

8. Security

We apply technical and organisational measures appropriate to the risk, including access controls, authentication requirements, encryption in transit, network segregation, logging, and staff confidentiality obligations. Access to verification documents and investigation records is restricted to personnel who need it.

No system is completely secure. If a personal data breach occurs that is likely to result in a risk to individuals, we will notify the relevant supervisory authority and, where required, affected individuals, within the applicable timeframes.

9. Your rights

Subject to applicable law, you may have the right to request access to your personal information, to have inaccurate information corrected, to request erasure, to restrict or object to processing, to receive your information in a portable format, and to withdraw consent where processing is based on consent.

Some rights are qualified. We may be unable to erase records we are required to retain — call detail records, billing records, and verification documents in particular — or where they are needed to establish, exercise, or defend legal claims.

To exercise a right, write to privacy@numeratel.com. We may need to verify your identity. We will respond within the period required by applicable law, normally one month.

If you are not satisfied with our response, you may complain to your local data protection authority. In the [UK] this is the [Information Commissioner's Office]. Please update this reference for your jurisdiction.

10. Website and cookies

This website is intentionally simple. It loads no third-party scripts, embedded trackers, advertising pixels, or external fonts, and it does not set cookies for analytics or advertising.

Standard server logs may record the IP address, browser type, and pages requested, for security and to keep the site running. If you later add analytics, embedded content, or a hosted form provider, update this section and add a cookie notice where one is required.

The request form sends the information you enter either through your own email application or to the form provider configured by the site operator. In either case, only the fields you complete are transmitted.

11. Changes and contact

We may update this policy to reflect changes in law, our services, or our practices. The version and date at the top of this page indicate the current edition. Material changes will be notified to customers using the contact details held for their account.

Privacy enquiries and rights requests: privacy@numeratel.com
Compliance and legal matters: compliance@numeratel.com
Postal: [Registered company name], [registered address].