Draft, under review

Privacy notice

Version 0.2. Last updated 5 November 2026

This notice explains what Specter Labs Ltd does with personal data. Go straight to the part that applies to you: you've booked a call, we've contacted you, call transcripts and AI or your rights.

Who we are

Specter Labs Ltd is the controller of this data. We're registered in England and Wales, company no. 16781604. Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Our registration number with the Information Commission's Office (ICO) is ZC114570. For anything about your data, email privacy@specterlabs.co.uk.

If you book a call

We collect your name, email, studio and your answers to the three questions on the form. These are needed to book. Your website and mobile are optional. We also keep the time and time zone you choose, and a scrambled version of your internet address, which we use to limit repeat or automated bookings.

We use these details to arrange and hold your call, send you reminders and prepare for the conversation. We won't use them for anything else unless you ask. Our lawful basis is legitimate interests: running the call you asked for, and taking the steps you'd expect before any agreement between us.

Your mobile. We only ask for it to send text reminders: up to two, one the day before and one an hour before. They're reminders only, never marketing. If you don't give it, you won't get any texts, and your email reminder still goes.

If we've contacted you, or might

We call, and sometimes email, owners, founders and directors of UK interior design studios about our services. You didn't give us your details yourself, so this is where they came from:

We hold your name, job title, studio name, business phone number and email, website, Companies House number, whether your number is on the Telephone Preference Service (TPS) or the Corporate TPS and when we checked, and the outcomes, notes, recordings and transcripts of our calls.

Our lawful basis is legitimate interests: telling businesses about a service that's relevant to them. We check numbers against the TPS and the Corporate TPS before we call, and again at least every 28 days. You can ask to see our legitimate interests assessment.

If you ask us to send you an email, we'll send it, followed by up to three short follow-ups. These stop as soon as you reply or book a call.

You can object at any time, and we will stop. Say so on a call, reply "stop" to any of our emails or texts, or email us. We'll stop calling and emailing you, and keep your number and your studio's web address on a do-not-contact list so that it stays that way.

Calls, transcripts and AI

Our sales calls are recorded on Zoom Phone and transcribed, and the transcripts are processed by AI. On a sales call, a speech-to-text service (ElevenLabs or Deepgram) turns what you say into text as you speak. Anthropic's Claude then uses it to show our caller suggested replies during the call, summarise the call, suggest how it ended and draft a follow-up email. Discovery calls on Zoom are transcribed by Zoom's own transcription, and may be summarised in the same way.

We do this to keep accurate notes, to follow up on what was said, and to review and improve how we make our calls. Our lawful basis is legitimate interests. You can object at any time, as above.

A person checks how the call ended and approves the first email before it's sent. We don't make any decision about you by automated means alone that has a legal or similarly significant effect on you. An internal AI assistant may also see your name, your studio and the time of a booked call when it helps us plan our day.

If you visit this site

Cloudflare hosts this site and handles your internet address and browser details to serve its pages and keep it secure. On the booking form, Cloudflare's security check stops bots using it. Our lawful basis is legitimate interests: keeping the site and the form secure. There's more on our Cookies page.

If you work for one of our clients

We use your business contact details, and what we need to deliver the work, for as long as we work together and as long as the law requires afterwards. Our lawful basis is legitimate interests: delivering our contract with your employer.

Who handles your data, and where

These companies handle your data on our instructions. We don't sell your data, and we'll share it with others only if the law requires it.

CompanyWhat forWhereSafeguard
SupabaseOur databaseIrelandUK adequacy for Ireland; UK Addendum
CloudflareHosting; bot checkGlobal, including the USUK-US data bridge
GoogleEmail and calendar invitesGlobal, including the USUK-US data bridge
ZoomVideo and phone calls; call recording; transcription of discovery callsUSUK-US data bridge
TwilioText reminders; calls from our browser phoneUSUK-US data bridge
ElevenLabsSpeech to textUSUK-US data bridge
DeepgramSpeech to textUSUK Addendum, in place before any live call
AnthropicAI summaries, suggestions and draftsUSUK Addendum
TPSClearChecking numbers against the TPS and Corporate TPSUKIn the UK

The UK-US data bridge and the UK Addendum to the EU's standard contractual clauses are the legal mechanisms for sending data from the UK to the US. Ask us if you'd like details or a copy.

How long we keep it

Your rights

You can ask us for a copy of your data, and ask us to correct it, delete it or limit how we use it. Where it applies, you can ask for the data you gave us in a form you can take elsewhere. You can object to how we use your data. If you object to direct marketing, we must stop, with no exceptions. To do any of this, email us. It's free, and we'll reply within one month.

Complaints

If you're unhappy with how we've handled your data, please tell us first. We'll acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.

You can also complain to the Information Commission's Office (ICO), the UK regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this notice

We'll post any changes on this page and update the version and date at the top.