Saltara AI is a limited company registered in England and Wales. We provide AI-powered WhatsApp booking and administration services to businesses across a range of industries, including trades, professional services, health and fitness, and activity providers.
For the purposes of UK GDPR, Saltara AI acts as a data processor on behalf of our business clients, who are the data controllers. Our clients are responsible for their own compliance with data protection law in respect of their end users.
Data protection contact:
Email: help@saltaraai.com
Address: Suite 195-197 Wood Street, London E17 3NU
This Privacy Policy explains how Saltara AI collects, uses, stores, and shares personal data when individuals interact with our WhatsApp-based booking service on behalf of our business clients.
This policy applies to any person who uses our WhatsApp booking bot to request a service, make an appointment, or submit an enquiry via a business that has engaged Saltara AI to operate its booking service.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The specific data collected will depend on the nature of the service being booked. Typically this may include:
We do not collect payment or financial information, government identification numbers, or any data not necessary for the booking or enquiry being made.
Where our service is used by a client whose business involves working with individuals under 18 (such as sports coaching or activity providers), additional data may be collected including:
In these cases, the booking service is designed to be used only by a parent or guardian on behalf of the child. We do not knowingly interact directly with children via our service.
The above obligations apply in addition to all standard clauses in this document.
We process personal data under the following lawful bases under UK GDPR Article 6:
Where children's personal data is processed, we rely on parental or guardian consent as the lawful basis. By submitting a child's details through the booking service, the parent or guardian confirms they have legal authority to provide this data on the child's behalf. Children's data is never used for profiling, marketing, or automated decision-making.
The above obligations apply in addition to all standard clauses in this document.
We use the data we collect solely for:
We do not use personal data for unsolicited marketing, selling to third parties, or any purpose beyond what is necessary to fulfil the booking or enquiry.
We share the personal data you provide with the business on whose behalf we operate the booking service. That business is the data controller for the purposes of delivering their service, and their own privacy policy will apply to how they use and store your data.
To operate our service, we use the following third-party data processors:
We do not sell, rent, or trade personal data with any third parties for commercial purposes.
Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR Chapter V, including Standard Contractual Clauses approved by the ICO.
After the applicable retention period, data is securely deleted. You may request early deletion at any time.
Children's personal data (name and date of birth) is retained for a maximum of 12 months from the date of booking and is subject to the same 90-day conversation log deletion schedule. Children's data is never retained beyond what is strictly necessary, is not used for any secondary purpose, and is subject to enhanced deletion procedures.
The above obligations apply in addition to all standard clauses in this document.
Under UK GDPR, you have the following rights:
To exercise any of these rights, contact us at help@saltaraai.com. We will respond within one calendar month.
Parents and guardians may exercise any of the above rights on behalf of a child whose data we hold. This includes the right to access, correct, or request deletion of the child's personal data at any time.
The above obligations apply in addition to all standard clauses in this document.
We implement appropriate technical and organisational measures to protect personal data, including encrypted data transmission, access controls, regular review of data processing practices, and Data Processing Agreements with all third-party processors.
If you are unhappy with how we have handled your personal data, you may lodge a complaint with the Information Commissioner's Office (ICO):
We would appreciate the opportunity to address your concerns directly first. Please contact us at help@saltaraai.com.