Aresals

Privacy Policy

Last updated: 5 October 2026

1. Who is responsible for your data

Aresals Limited is a company registered in Wales, company number 16637863. Registered office: 34 Baywood Avenue, Swansea, SA3 5LJ, United Kingdom. Aresals Limited is the controller of your personal data. Contact: contact@aresals.co.uk.

2. What data we collect

  • When you buy a service: your name, business name, email address, business website and, if you give it, your Google Maps listing link. Payment is handled by Stripe; we do not see or store your full card details.
  • When you email us: your email address and whatever you include in your message.
  • For the audit: information that is publicly available about your business online (website, Google listing, review sites).
  • When you message one of our AI assistants on WhatsApp, on Telegram or in the chat on a website: see section 9.
  • This website does not use cookies, analytics or tracking. If you use the chat on this website, it keeps a random identifier in your browser so that your conversation can continue; see section 9.

3. Why we use it and on what legal basis

  • To deliver the service you paid for and to contact you about it (performance of a contract).
  • To answer your enquiries (legitimate interests / steps before a contract).
  • To keep accounting and tax records (legal obligation).
  • To contact businesses about our services using their publicly available business contact details (legitimate interests). You can ask us to stop at any time and we will.

We do not sell your data or use it for advertising.

4. Who we share it with

We only use service providers needed to run the business:

  • Stripe – payment processing.
  • Google (Gmail) and Cloudflare – email and website hosting.
  • Brevo – sending emails from our domain.
  • Anthropic (Claude) – the AI model we use to help prepare audit reports (we review every report before it is sent), and to generate our assistants' replies and describe the images you send them. We may also use it to summarise the emails we receive, so that we can see which ones need a reply; a person reads and answers your email.
  • Meta (WhatsApp Business Platform) and Telegram – delivering messages to and from our AI assistants. We also receive our own internal notices on Telegram, including a daily list of the emails that have arrived (sender and subject, and a short summary if we use one).
  • Our accountant or HMRC, where required by law.

Some of these providers are based outside the UK (for example in the United States). Where that happens, transfers are covered by the safeguards those providers use, such as UK adequacy regulations or standard contractual clauses.

5. How long we keep it

  • Order and payment records: 6 years, for tax purposes.
  • Audit reports and related working files: 2 years after delivery, unless you ask us to delete them earlier.
  • Emails not linked to an order: up to 12 months.
  • Conversations with our AI assistants: see section 9.

6. Your rights

You have the right to access, correct or delete your data, to object to or restrict its use, and to receive a copy of it. To use any of these rights, email contact@aresals.co.uk. We will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk). If you live in the EU, you can also contact your local data protection authority.

7. Security

We store data in password-protected accounts and on our own private systems, and only we have access to client files.

8. Automated assistants and your choices

Our assistants on WhatsApp, on Telegram and in website chats are automated. They say so in their first message and never claim to be a person. They do not make decisions that have legal or similarly significant effects on you: they answer questions and pass your enquiry on. You can ask to speak to a person at any time, and a person will take over the conversation.

9. AI assistants on WhatsApp, Telegram and website chat

We run AI assistants that answer messages on WhatsApp, on Telegram and in the chat window of a website. This section applies when you message one of them.

Whose assistant it is. When the assistant is our own (you are writing to Aresals), we are the controller of your data. When the assistant belongs to another business that uses our service, that business is the controller and we act on its behalf as its processor: its own privacy policy applies, and the assistant gives you a link to it in its first message. You can use your rights with that business or by writing to us, and we will pass your request on.

What is collected.

  • Your identifier on the channel: your phone number or WhatsApp user ID, or your Telegram user ID, and the profile name shown on that channel. In a website chat there is no account: the chat creates a random identifier and keeps it in your browser's local storage, only once you send a message. It is not a cookie, it is not used to follow you on other websites, and you can remove it by clearing this site's data in your browser.
  • The messages you send and the replies you receive, with their date and time. Images are described in text so the assistant can answer. Voice notes are not transcribed at present: the assistant asks you to write instead. We do not keep the audio or the image files you send.
  • Contact details you choose to give in the conversation, such as your name or email address.
  • Whether you have asked to speak to a person or asked not to receive more messages.
  • In a website chat, your IP address is used for a short time to limit abuse. It is not stored with your conversation.

Why and on what basis. To answer your enquiry and take steps at your request before a possible contract, and for the legitimate interest of the business in answering its customers promptly. We do not use your conversations for advertising or to build profiles, and we do not send unsolicited marketing through these channels.

AI provider. Your messages are sent to Anthropic (Claude) to generate a reply. Anthropic processes them on our behalf, does not use them to train its models, and deletes them from its systems within 30 days, unless it has to keep them longer to comply with the law or to investigate misuse of its service.

How long it is kept. The conversation is deleted automatically 12 months after its last message, or earlier if you ask or the business deletes it. If you write again, the 12 months start again. The original copy of each incoming message received from the channel is emptied after 7 days. Backups are kept for up to 30 days, so deleted data may remain in a backup for that time.

How to stop or delete. Send STOP in the conversation and the assistant will not message you again unless you write first. To have your conversation and details deleted, ask in the conversation or email contact@aresals.co.uk.

Please do not send sensitive information (such as health details or card numbers) to an assistant.

10. Changes

We may update this policy. The latest version will always be on this page.