Privacy Policy

1. Who we are

We Are SMS provides AI-assisted outreach, SMS messaging, lead engagement, customer communication, webchat, WhatsApp and campaign management services for businesses.

For data protection purposes, We Are SMS may act as a data controller when it uses personal information for its own business purposes. This may include website enquiries, sales conversations, account management, supplier management and service improvement.

We Are SMS may act as a data processor where it processes personal data on behalf of a client to deliver agreed messaging, lead generation, webchat, WhatsApp or outreach services. In those circumstances, the client remains responsible for deciding how and why the personal data is used.

2. Personal information we may collect

Depending on the interaction, We Are SMS may collect personal information such as name, business name, job title, email address, phone number, enquiry details, account information, communication preferences and service usage information.

Campaign activity may include message delivery status, replies, opt-outs, engagement activity, links clicked, campaign source, web form submissions, webchat activity, WhatsApp messages and other interaction records.

Technical information may include IP address, browser type, device information, pages visited, usage logs and security information.

3. How information is collected

Personal information may be collected when someone submits a website form, contacts We Are SMS by phone or email, interacts through SMS, WhatsApp, webchat or social media, requests information, becomes a client or supplier, or uses the platform.

We Are SMS may also receive personal data from clients where that data is needed to deliver agreed services. Clients are responsible for ensuring they have the appropriate lawful basis, consent or permission to provide data to We Are SMS.

4. How information is used

Personal information may be used to respond to enquiries, provide information about services, manage accounts, deliver campaigns, process replies and opt-outs, monitor service performance, improve systems, prevent misuse, comply with legal obligations and protect the rights of We Are SMS, clients and recipients.

We Are SMS does not sell personal data.

5. Lawful basis for processing

We Are SMS only uses personal data where there is a lawful basis to do so. This may include consent, contract, legitimate interests, legal obligation or another lawful basis that applies to the specific activity.

Where We Are SMS sends marketing for its own business, it will only do so where the correct permission or lawful route applies.

Where We Are SMS sends communications on behalf of a client, the client is responsible for confirming that the recipient data can lawfully be used for the intended campaign.

6. Marketing communications

Marketing communications should be permission-led, transparent and relevant. SMS, WhatsApp, email and other electronic marketing must comply with applicable data protection and electronic marketing rules.

Marketing messages should identify the sender and provide a clear way to opt out. Where someone opts out, that request should be processed promptly and suppression records should be respected.

7. Sharing information

We Are SMS may share personal information with trusted service providers that help operate the business and deliver services. This may include messaging providers, CRM systems, hosting providers, analytics services, payment and accounting providers, professional advisers, security providers and compliance support providers.

Personal information may also be shared where required by law, regulation, court order, law enforcement request, contractual requirement or to protect legal rights.

8. International transfers

Some technology providers may process information outside the United Kingdom. Where this happens, We Are SMS will take reasonable steps to ensure appropriate safeguards are in place.

9. Retention

Personal information is kept only for as long as necessary for the purpose it was collected, including to provide services, manage client relationships, support compliance, resolve disputes, meet legal obligations and maintain suppression records.

Campaign data may be retained in line with client instructions, contractual requirements, technical needs and compliance requirements. Opt-out records may be retained where necessary to prevent further unwanted contact.

10. Security

We Are SMS takes reasonable technical and organisational steps to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.

Controls may include secure systems, access permissions, password protection, audit logs, supplier checks, staff controls and data handling procedures.

11. Individual rights

Individuals may have rights under data protection law, including the right to access personal data, correct inaccurate data, request deletion, restrict processing, object to certain processing, request portability and withdraw consent where consent is the lawful basis.

Where We Are SMS acts as a processor for a client, rights requests may need to be handled by or with the relevant client.

12. Complaints

Anyone with concerns about how personal information is handled should contact We Are SMS using the contact details published on the website. Individuals also have the right to complain to the Information Commissioner's Office.

13. Changes to this policy

This Privacy Policy may be updated from time to time. The latest version should be made available on the We Are SMS website.