Privacy Policy
Effective Date: 06/04/2026 | Last Updated: 16/04/2026
Legal Information for Optevo
Company Name: Optevo Limited.
Company Number: 16271659
Registered Address: 41 Newcombe Court, Burgess Springs, Chelmsford, Essex CM11QN
Contact Phone No.: 07544805674
Email Address: [email protected]
Website: https://optevo.tech
Data Protection contact: email - [email protected]
Introduction & Scope
This sets out the privacy policy applicable to the Optevo website, mailing list and systems. trading as Optevo his privacy policy explains what is being done with your personal data. Personal data (“data”) is anything that can be linked to you. Any personal data which you provide to us will be treated with appropriate standards of security and confidentiality and in accordance with the General Data Protection Regulation 2016/679 and associated national legislation.
All references to “you” or “your” mean you, the user of a Optevo service, and all references to “we”, “us” or “our” refer to Optevo.
This privacy notice explains:
What personal information we collect about you;
What we use your personal data for;
How and when you can withdraw your consent;
When personal information may be transferred outside the UK;
Our use of cookies;
Our mobile messaging & SMS marketing practices;
Optevo’s data security practices
how long your personal information is retained by us;
your rights under data protection laws;
What you should do if your personal information changes;
your right to object;
how to contact us.
2. What Information We Collect
We collect personal information that you voluntarily provide, including:
Personal Information: including full name, business title, and company name so that we know who you are.
Contact Information: such as an email address and mobile phone number so that we can contact you and keep in touch in regard to our products and services.
Session Information: such as browser type, and interaction data, to better understand how you interact with us.
3. What we use this information for
We use your data to:
Provide our business automation and consultancy services.
Send transactional and marketing communications (SMS/Email).
Keep our records accurate and updated
Improve site security and the Optevo Platform performance.
4. Information transferred outside of the UK
We are based in the UK, but will process your personal data both within and outside the European Economic Area (EEA) where your data is transferred to our contracted suppliers who provide services to us. We will implement appropriate and suitable safeguards to ensure that such personal information will be protected as required by applicable data protection laws. Where it is necessary to transfer your personal information outside of the UK, we will only do so where:
transferring personal data to countries that have been deemed to provide an adequate level of protection for personal information by the European Commission under Article 45 of the UK General Data Protection Regulation (UK GDPR); or
transferring personal data where the recipient has agreed to a European Commission approved data transfer agreement in the form of the standard data protection clauses under Article 46 of the UK General Data Protection Regulation (UK GDPR).
5. Cookies and Tracking Technologies
Optevo Limited uses cookies, web beacons, and other tracking technologies to collect and store information about your browsing behaviour and interaction with our website. This includes tracking information used for analytics and marketing purposes. You can view our full list of trackers here: Cookie Declaration.
6. Mobile Messaging & SMS Communications Policy
Optevo Limited operates a strict privacy standard for all mobile communications. The following terms apply to our SMS messaging programme:
Opt-In Methods Users may opt in to SMS communications exclusively via the web form located at https://optevo.tech. No other opt-in methods are currently in use. Opt-in is not shared with any third party.
Types of Messages We operate two SMS programmes:
Transactional/Service messages — including enquiry follow-ups, appointment reminders, and service updates related to your interaction with Optevo Limited.
Marketing messages — including promotional content, special offers, and automation tips. Separate consent is required for marketing messages.
Message Frequency Message frequency varies depending on your interaction with us. Transactional messages are sent in response to your enquiry or appointment activity. Marketing messages are sent no more than a few times per month.
Message & Data Rates Standard message and data rates may apply depending on your mobile carrier and plan.
How to Opt Out You may cancel SMS communications at any time by replying STOP to any message you receive from us. After sending STOP, you will receive one final confirmation message and no further SMS will be sent.
How to Get Help Reply HELP to any message for assistance, or contact us directly at [email protected].
Third Party Sharing SMS opt-in data, mobile numbers, and consent records collected via our web form will never be sold, rented, or shared with any third party or affiliate for marketing or promotional purposes.
7. Data Security Practices
We implement industry-standard encryption and secure servers to protect your personal information against unauthorised access.
8. Data Retention & Deletion
We only retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Our standard retention periods are as follows:
Lead & Marketing Data: We retain your contact information for 24 months from the date of your last interaction with us (e.g., last email opened or SMS received), after which it is securely deleted unless you have become a client.
Client Account Data: For active clients, we retain data for the duration of your contract plus 6 years following the termination of our services to comply with UK statutory limitation periods for legal claims and tax purposes.
SMS & Communication Logs: Metadata and logs for mobile messaging are retained for 12 months to ensure A2P compliance and dispute resolution.
Technical & Analytics Data: Anonymised technical data and cookie information are typically retained for a maximum of 24 months, in accordance with our Cookie Declaration.
9. Your Legal Rights
The following is a list of the rights that all individuals have under the data protection laws. They do not apply in all circumstances. If you wish to use any of them, we will explain at that time if they are engaged or not.
The right to be informed about the processing of your personal information.
The right to rectification if your personal information is inaccurate and to have incomplete personal information rectified.
The right to object to processing of your personal information.
The right to restrict processing of your personal information.
The right to erasure and have your personal information erased (“the right to be forgotten”).
The right to data portability which allows you to move, copy or transfer your personal information.
The right of access to your personal information.
Rights related to automated decision-making and profiling which has a legal effect or otherwise significantly affects you.
You have the right to request access to your personal information that we hold about you. Please email us at the Data Protection Contact at the top of the page. Once you have submitted your request, we’ll aim to respond without undue delay and at the latest, within one month of receiving the request. If you have a complaint or concern about how we use your personal data, please contact us in the first instance and we will attempt to resolve the issue as soon as possible.
You also have the right to complain to the Information Commissioner’s Office (ICO) which enforces data protection laws – visit https://ico.org.uk/ for more information.
10. Changes in personal information
You should advise us of any changes to personal information so that we can update our records. This means we can continue to administer services to you. You can do this using your chosen contact method in the Contact Us section of the privacy policy. We will then update your records.
11. Your Right to Object
You have the right to object to certain purposes for processing data for direct marketing purposes and to data processed for certain reasons based on your legitimate interests. We are unable to provide you with our products or services if you do not provide certain information to us, for example your name, business name, phone number etc.
You can do this by using the Contact Us information at the end of this document to exercise your rights.
12. Contact Us
If you have any questions/ concerns about this privacy notice, or if you wish to exercise your rights, contact [email protected], or sent a letter to 41 Newcombe Court, Burgess Springs, Chelmsford Essex CM11QN
How Optevo Ltd uses your details, and how to tell us to stop.
Optevo Ltd, registered in England and Wales as Optevo Limited, company number 16271659.
Registered office: 41 Newcombe Court, Burgess Springs, Chelmsford, Essex CM1 1QN.
For our own sales and marketing, we decide how your details are used. That makes us the controller of them.
Contact us about anything in this notice:
James Haughey, a director, looks after privacy at Optevo.
If you rang a business and Sophie answered, that business is in charge of your details, not us. We run Sophie for them as their processor, under our service agreement with them. We only use your details to provide their service. Their own privacy notice explains what they do with them. If you contact us about it, we’ll pass your request to the business straight away.
| Source | What we take from it |
|---|---|
| Google Maps listings | Business name, address, phone number, website, and Google’s ID for the listing. We don’t collect your Google rating, reviews or opening hours. |
| Your own website | A business email address, the owner’s name if the site gives it, and enough to check what kind of work you do. |
| Companies House | Whether you’re a limited company or LLP, your company number, and your directors’ names. |
| TPS and CTPS screening | Whether your number is on either register, and when we last checked. |
| Our own records | Whether we already have you, so we don’t add you twice or contact you after you’ve asked us not to. |
| You | What you tell us on a call, in a form, when you book a demo, by email or by text. |
| Our website | Where you came from and the pages you looked at, if you fill in our form (see “Our website”). |
We don’t ask for sensitive information, such as health details. If you mention something like that on a call, it stays in the recording and transcript until they’re deleted.
We ring trades businesses that could use Sophie, starting with plumbing and heating firms.
Calls to our Optevo number ring James. If he can’t answer, you can leave a voicemail and he’ll ring you back.
Calls to and from our Optevo number are recorded, and our phone system may make a written transcript. We tell you at the start of the call. We use recordings to check what was said and agreed, and to train ourselves.
We show Sophie live on a Microsoft Teams call, using a demo account set up for a made-up firm.
We only send you marketing emails or texts if you’ve said yes. You can say yes by ticking the box on our website form, or when we ask on a call: “Would it be OK for Optevo to send you the odd email or text about Sophie? You can opt out at any time.” We keep a note of when and how you said yes.
The law lets us email a company’s business address without asking first.
Our emails don’t track whether you open them or which links you click.
We only send marketing texts if you’ve said yes, and then only the odd one alongside our follow-up emails. Reply STOP to any of them and they stop.
If you fill in a form or book a demo, we send you the reply, and booking confirmations and reminders, whether or not you ticked the box. You asked for them, so they aren’t marketing.
The site stores a few small things in your browser:
| What | Set by | What it’s for | How long |
|---|---|---|---|
| A visitor ID cookie (msgsndr_id) and a record of your visit in your browser’s storage | HighLevel | Links your visits to the form if you fill it in, so we can see where you came from and which pages you looked at | The cookie lasts a year. The record stays until you clear your browser. |
| A note of where you came from, in your browser’s session storage | Us | Passes the advert, post or website that sent you to the form | Until you close the tab |
| Answers you’ve started typing into the form | HighLevel | Lets you pick up where you left off | Until you send the form or clear your browser |
Cloudflare also counts visits and measures page speed for us (Cloudflare Web Analytics). It doesn’t use cookies or store anything in your browser, and it doesn’t identify you.
We don’t use advertising cookies, and we don’t share what the site records with advertisers.
To say no: block or delete cookies and site data for optevo.tech in your browser’s settings, or use a private window. The site and the form still work. A content blocker stops Cloudflare’s visit counts.
The law says we need a reason (a “lawful basis”) for each use. We’ve weighed each “legitimate interests” use against your interests in a written legitimate interests assessment. You can ask for a copy.
| What we do | Our legal reason |
|---|---|
| Finding and researching businesses, and ringing them about Sophie | Legitimate interests: telling businesses that could use Sophie about it |
| Keeping your record and ringing you again every few months, until you buy or tell us to stop | Legitimate interests: firms often want Sophie months after the first call |
| Emailing limited companies and LLPs we haven’t spoken to | Legitimate interests |
| Recording and transcribing calls | Legitimate interests: an accurate record of what was said and agreed, and training |
| Answering your calls and voicemails, booking demos and arranging call backs | Steps you ask us to take before a contract, and legitimate interests |
| Follow-up emails to limited companies and LLPs after we’ve spoken | Legitimate interests (the law doesn’t need your consent for a company address, and every email lets you unsubscribe) |
| Marketing texts to anyone, and marketing emails to sole traders and partnerships | Your consent, which you can withdraw at any time |
| Replying to your form or booking | Steps you ask us to take before a contract, and legitimate interests |
| Noting where website visitors came from and which pages they looked at | Legitimate interests: knowing which adverts and posts bring enquiries |
| Providing and billing our service to clients | Contract |
| Keeping accounts and tax records | Legal obligation |
| Keeping our do-not-contact list | Legal obligation (to respect objections) and legitimate interests |
These companies handle details for us, under contract, and only as we instruct. Some hold data outside the UK, mostly in the United States, and HighLevel’s support team is in India. Where details leave the UK, they’re protected by the UK–US “data bridge” (the UK Extension to the EU–US Data Privacy Framework) or by contract clauses the ICO approves. Ask us if you’d like to know which applies to a company, or want a copy of the safeguard.
| Company | What it does for us | Where it holds data |
|---|---|---|
| HighLevel (LeadConnector) | Our CRM, phone line and call recording, website, forms, booking calendar, and the emails and texts we send. It uses its own suppliers for some of this, including Twilio (calls and texts), Mailgun (email) and AI providers including OpenAI (call transcripts, and Sophie in our demos, which use made-up details). | United States (Google Cloud and Amazon Web Services); HighLevel’s support team in India |
| Instantly | Sends our first emails to limited companies and LLPs | United States and other countries |
| Google Workspace | The mailbox on our getoptevo.co.uk address | Google’s data centres, in the United States and other countries |
| Google Maps Platform | Finding businesses | United States |
| Microsoft 365 | Our own email, Teams demos and calendars | Mainly the United Kingdom |
| Data Soap | Checks numbers against TPS and CTPS | United Kingdom |
| GitHub | Runs our lead-finding scripts; working files deleted after 7 days | United States and other countries |
| Cloudflare | Our domain names, the website’s bot check and visit counts | Worldwide network |
| Stripe | Payments and Direct Debit for clients | United States and other countries |
| Xero | Our accounts | United States (Amazon Web Services) |
We also use Claude, an AI assistant made by Anthropic in the United States, to help build and check our systems and draft documents. It can see contact details while it works.
We never sell your details or share them for anyone else’s marketing. We may share them if the law requires it, or with our professional advisers.
| Details | How long | Why |
|---|---|---|
| Call recordings and voicemails | 90 days, then deleted automatically | Long enough to check what was said and agreed. |
| Call transcripts and notes | Kept on your record, and deleted with it | They’re the record of what you asked for. |
| Businesses we’re still trying to reach or win, including after “not now” or “not interested” | For as long as we’re still trying: we try again about every three months, or about every six months after “not interested” | Firms often want Sophie months after the first call. It ends the moment you ask us to stop. |
| Businesses we’ve stopped contacting because Sophie isn’t for them, the number doesn’t work, or the number is on TPS or CTPS and we never spoke | 2 years after we stop, then cut down to the do-not-contact details below | So we don’t add you again as “new” from the next list. |
| Callers who aren’t potential clients (wrong numbers, homeowners, suppliers) | 1 month | We don’t need them, so we clear them out monthly. |
| Records of your yes to emails and texts | While we rely on it, then 2 years | To show you agreed, and what you agreed to. |
| Cold-email records in Instantly | 3 months after the last email | Long enough to handle replies. Unsubscribes stay on Instantly’s blocklist. |
| Lead-finding working files on GitHub | 7 days | Only needed while a batch is checked and imported. |
| Clients’ contract and billing records | 6 years after the end of the financial year the contract ends | HMRC requires company tax records to be kept for 6 years. |
| Our do-not-contact list | For as long as we market, with only your business name, number, email and the date you asked | So we never contact you again by mistake, for example if your business turns up in a new list. |
You can tell us to stop using your details for marketing at any time. We will always stop. No questions, no exceptions.
How to tell us:
We act on it straight away, and within one month at the latest. An unsubscribe or a STOP stops that kind of message. If you want all marketing from us to stop, calls included, just say so and it will: we take you out of our follow-up calls and emails for good. We keep only your name, number and email on our do-not-contact list so it stays stopped.
If you’d just rather we left it longer, tell us you’re not interested for now and we’ll wait about six months before trying again.
You can ask us to:
If we’re relying on your consent, you can withdraw it at any time. It’s free. We’ll reply within one month. We may need to check who you are first.
We don’t make any decisions about you by automated means that have a legal or similarly significant effect on you.
If you’re unhappy with how we’ve handled your details, please tell us first: [email protected] or 07426 944077. We’ll acknowledge your complaint within 30 days, look into it, and tell you what we’ve done.
You can also complain to the UK regulator, the Information Commissioner’s Office (ICO), at any time: ico.org.uk/concerns or 0303 123 1113.
We’ll update this notice when the way we use details changes, and change the date below.
Version 1.6 · Last updated 27 October 2026