Draft, under review
Privacy notice
Version 0.2. Last updated 5 November 2026
This notice explains what Specter Labs Ltd does with personal data. Go straight to the part that applies to you: you've booked a call, we've contacted you, call transcripts and AI or your rights.
Who we are
Specter Labs Ltd is the controller of this data. We're registered in England and Wales, company no. 16781604. Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Our registration number with the Information Commission's Office (ICO) is ZC114570. For anything about your data, email privacy@specterlabs.co.uk.
If you book a call
We collect your name, email, studio and your answers to the three questions on the form. These are needed to book. Your website and mobile are optional. We also keep the time and time zone you choose, and a scrambled version of your internet address, which we use to limit repeat or automated bookings.
We use these details to arrange and hold your call, send you reminders and prepare for the conversation. We won't use them for anything else unless you ask. Our lawful basis is legitimate interests: running the call you asked for, and taking the steps you'd expect before any agreement between us.
Your mobile. We only ask for it to send text reminders: up to two, one the day before and one an hour before. They're reminders only, never marketing. If you don't give it, you won't get any texts, and your email reminder still goes.
If we've contacted you, or might
We call, and sometimes email, owners, founders and directors of UK interior design studios about our services. You didn't give us your details yourself, so this is where they came from:
- your studio's own website
- the public Companies House register
- web search results that led us to your studio's website
We hold your name, job title, studio name, business phone number and email, website, Companies House number, whether your number is on the Telephone Preference Service (TPS) or the Corporate TPS and when we checked, and the outcomes, notes, recordings and transcripts of our calls.
Our lawful basis is legitimate interests: telling businesses about a service that's relevant to them. We check numbers against the TPS and the Corporate TPS before we call, and again at least every 28 days. You can ask to see our legitimate interests assessment.
If you ask us to send you an email, we'll send it, followed by up to three short follow-ups. These stop as soon as you reply or book a call.
You can object at any time, and we will stop. Say so on a call, reply "stop" to any of our emails or texts, or email us. We'll stop calling and emailing you, and keep your number and your studio's web address on a do-not-contact list so that it stays that way.
Calls, transcripts and AI
Our sales calls are recorded on Zoom Phone and transcribed, and the transcripts are processed by AI. On a sales call, a speech-to-text service (ElevenLabs or Deepgram) turns what you say into text as you speak. Anthropic's Claude then uses it to show our caller suggested replies during the call, summarise the call, suggest how it ended and draft a follow-up email. Discovery calls on Zoom are transcribed by Zoom's own transcription, and may be summarised in the same way.
We do this to keep accurate notes, to follow up on what was said, and to review and improve how we make our calls. Our lawful basis is legitimate interests. You can object at any time, as above.
A person checks how the call ended and approves the first email before it's sent. We don't make any decision about you by automated means alone that has a legal or similarly significant effect on you. An internal AI assistant may also see your name, your studio and the time of a booked call when it helps us plan our day.
If you visit this site
Cloudflare hosts this site and handles your internet address and browser details to serve its pages and keep it secure. On the booking form, Cloudflare's security check stops bots using it. Our lawful basis is legitimate interests: keeping the site and the form secure. There's more on our Cookies page.
If you work for one of our clients
We use your business contact details, and what we need to deliver the work, for as long as we work together and as long as the law requires afterwards. Our lawful basis is legitimate interests: delivering our contract with your employer.
Who handles your data, and where
These companies handle your data on our instructions. We don't sell your data, and we'll share it with others only if the law requires it.
| Company | What for | Where | Safeguard |
|---|---|---|---|
| Supabase | Our database | Ireland | UK adequacy for Ireland; UK Addendum |
| Cloudflare | Hosting; bot check | Global, including the US | UK-US data bridge |
| Email and calendar invites | Global, including the US | UK-US data bridge | |
| Zoom | Video and phone calls; call recording; transcription of discovery calls | US | UK-US data bridge |
| Twilio | Text reminders; calls from our browser phone | US | UK-US data bridge |
| ElevenLabs | Speech to text | US | UK-US data bridge |
| Deepgram | Speech to text | US | UK Addendum, in place before any live call |
| Anthropic | AI summaries, suggestions and drafts | US | UK Addendum |
| TPSClear | Checking numbers against the TPS and Corporate TPS | UK | In the UK |
The UK-US data bridge and the UK Addendum to the EU's standard contractual clauses are the legal mechanisms for sending data from the UK to the US. Ask us if you'd like details or a copy.
How long we keep it
- Studios we've found or contacted: kept while they're in our calling and email cycle. If there's been no engagement for 24 months after the last contact, we delete them.
- Bookings and call notes: 12 months after the last contact, unless we go on to work together.
- Call recordings and transcripts: 12 months.
- The do-not-contact list: for as long as we make calls, with only the number and web address, so that we can keep to it.
Your rights
You can ask us for a copy of your data, and ask us to correct it, delete it or limit how we use it. Where it applies, you can ask for the data you gave us in a form you can take elsewhere. You can object to how we use your data. If you object to direct marketing, we must stop, with no exceptions. To do any of this, email us. It's free, and we'll reply within one month.
Complaints
If you're unhappy with how we've handled your data, please tell us first. We'll acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.
You can also complain to the Information Commission's Office (ICO), the UK regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
We'll post any changes on this page and update the version and date at the top.