Privacy policy
In short: Fuzzy Studio Ltd runs the Fuzzy Logic® platform. We only collect what we need to run our website, provide the app and support our customers. We never sell your data, and it is never used to train generalised, public AI models. When our customers store their own clients' data in Fuzzy Logic, we process it only on their instructions under our Data Processing Agreement.
- 1. Who we are
- 2. Our two roles
- 3. What we collect
- 4. How we use it and why
- 5. Cookies and ad tracking
- 6. Marketing
- 7. Who we share it with
- 8. International transfers
- 9. How long we keep it
- 9a. AI features
- 10. Security
- 11. Your rights
- 12. Children
- 13. Changes to this policy
- 14. Contact and complaints
1. Who we are
This policy explains how Fuzzy Studio Ltd ("Fuzzy Logic", "we", "us", "our") collects and uses personal data when you visit fuzzylogic.systems, contact us, book a call, start a free trial or subscribe to the Fuzzy Logic App (including our web, desktop and mobile apps).
Fuzzy Studio Ltd is registered in England and Wales under company number 16128918. Our registered office is Horizon House, Sittingbourne Road, Maidstone, Kent ME14 3EN. We're registered with the Information Commissioner's Office (ICO) under reference ZB832686.
If you have any questions about this policy or how we handle your data, email [email protected].
2. Our two roles
When we are the controller
We are the controller of personal data about our website visitors, people who enquire or book calls, our customers and their account users, and people on our marketing lists. This policy covers that data.
When we are the processor
Our customers use Fuzzy Logic to store and manage data about their own clients, leads and contacts. For that data, our customer is the controller and we are a processor. We process it only on their instructions, under the Fuzzy Studio Data Processing Agreement. If you are a contact of one of our customers and want to exercise your rights, please contact that business directly. We will help them respond.
3. What we collect
- Contact and identity data: your name, business name, job title, email address, phone and mobile number, and business address.
- Account data: login details, user profiles, your plan, account settings and support history.
- Billing data: billing address, VAT number, subscription, wallet and invoice history, and usage records such as messages sent, call minutes and AI usage. Card payments are handled by Stripe, and we never see or store your full card number.
- Communications: messages you send us by email, website chat, WhatsApp, SMS, phone or forms, and notes from calls and meetings we have with you.
- Booking data: the date, time and details you give when booking a call with us.
- App data: if you use our mobile or desktop apps, we collect device type, operating system, app version, push notification tokens and crash reports. This keeps the app working and sends you the notifications you choose.
- Call data: if you call us, or we call you, we may record the call and create a transcript. We do this for training, quality and record-keeping. We tell you when a call is being recorded.
- Technical and usage data: IP address, device and browser type, pages viewed, links clicked, the ad or campaign that brought you to us (such as UTM tags and click IDs), and how you use the app.
- Marketing preferences: your consent choices and whether you open or click our emails.
We don't intentionally collect special category data (such as health information) about our visitors or customers.
4. How we use it and why
| What we do | Lawful basis |
|---|---|
| Set up and run your account, free trial and subscription, and provide the app | Contract |
| Take payments, send invoices and keep financial and tax records | Contract; legal obligation |
| Reply to enquiries, run booked calls and demos, and provide support and onboarding | Contract (or steps before a contract); legitimate interests |
| Send service messages such as account, security, billing and product updates | Contract; legitimate interests |
| Send marketing emails, SMS or WhatsApp messages | Consent, or legitimate interests for existing customers (soft opt-in). See section 6. |
| Measure and improve our website, ads and app, and prevent fraud and misuse | Legitimate interests |
| Use non-essential cookies and ad pixels | Consent |
| Comply with the law and respond to lawful requests | Legal obligation |
Where we rely on legitimate interests, we have balanced our interests against your rights. You can ask us for details of that assessment.
5. Cookies and ad tracking
Our website uses cookies and similar technologies. Some are strictly necessary to make the site, chat widget and booking calendar work. Others help us understand how the site is used and measure our advertising. These may include Google Analytics, Google Ads, Meta (Facebook and Instagram) Pixel, TikTok Pixel and LinkedIn Insight Tag.
We only use non-essential cookies with your consent, which you can change at any time. You can also block cookies in your browser settings, although parts of the site may not work properly if you do.
6. Marketing
If you're a customer, or you have enquired about our services, we may send you marketing about similar products and services. You can opt out at any time. We will only send other marketing if you have given consent. Every marketing email includes an unsubscribe link, and you can also reply STOP to SMS or WhatsApp messages or email [email protected]. We will still send service messages about your account.
7. Who we share it with
We never sell your personal data. We share it only with trusted service providers who help us run our business, and only as much as they need:
- HighLevel Inc.: the software platform the Fuzzy Logic App is built on. It covers hosting, CRM, email and SMS delivery, chat, booking, phone, mobile app and AI features. HighLevel uses its own vetted sub-processors, such as cloud hosting, email, telephony and AI model providers, under contract.
- Stripe: payment processing, subscriptions and tax calculation.
- Meta (WhatsApp, Facebook, Instagram): for messaging with us and, with your consent, advertising measurement.
- Google: for analytics, advertising, email and video meetings.
- Apple and Google app stores: when you download our mobile apps, under their own privacy terms.
- Professional advisers: such as our accountants, lawyers and insurers.
- Any other providers you use, such as Microsoft 365, Zoom or Make.com.
We may also share data if the law requires it, to protect our rights or the safety of others, or as part of a sale or restructure of our business. Anyone who receives it in a sale would be bound by this policy.
8. International transfers
Some of our providers, including HighLevel, Stripe, Meta and Google, process data in the United States or other countries outside the UK. Some support and engineering functions are in countries such as India. When that happens, we make sure a lawful transfer mechanism is in place, such as:
- certification under the UK Extension to the EU-US Data Privacy Framework, which HighLevel participates in;
- the UK International Data Transfer Addendum to the EU Standard Contractual Clauses; or
- the ICO's International Data Transfer Agreement.
9. How long we keep it
- Customer account data: for as long as your subscription is active, then up to 90 days so you can export or reactivate, after which it is deleted.
- Billing and tax records: 6 years after the end of the financial year they relate to, as required by UK law.
- Enquiries and leads who don't become customers: up to 24 months after our last contact.
- Marketing lists: until you unsubscribe. We keep a suppression record so we don't contact you again.
- Analytics data: in line with each provider's retention settings, typically 14 months.
9a. AI features
Some features use artificial intelligence, for example chat and voice agents, review replies and content writing. Where we use AI to reply to you, such as in website chat or on the phone, we'll make that clear. AI features are provided through specialist AI providers under contract. Personal data isn't used to train generalised, public AI models. We don't use AI to make decisions about you that have legal or similarly significant effects.
10. Security
We use appropriate technical and organisational measures to protect personal data. These include encryption in transit and at rest, multi-factor authentication, least-privilege access, encrypted devices and confidentiality commitments from everyone with access. No system is completely secure, so if we ever become aware of a breach that affects you, we'll tell you and the ICO where the law requires it.
11. Your rights
Under UK data protection law, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted in certain circumstances;
- restrict or object to our processing, including objecting at any time to direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email [email protected]. We'll respond within one month. We won't usually charge a fee.
12. Children
Fuzzy Logic is a business service and is not intended for anyone under 18. We don't knowingly collect data from children.
13. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make significant changes that affect our customers, we'll let them know by email.
14. Contact and complaints
Fuzzy Studio Ltd, Horizon House, Sittingbourne Road, Maidstone, Kent ME14 3EN
Email: [email protected] · Phone: 01634 919119
If you're unhappy with how we've handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
