ghostshopper.ai

Legal

Privacy notice

Last updated 8 September 2026

This notice explains what personal data we collect through this website, why we collect it, who we share it with and what rights you have. It is written for visitors to ghostshopper.ai and for people who use our free test or setup call. Our product app at app.ghostshopper.ai has its own notice.

1. Who we are

The data controller for this website is EZ Voice Limited, company number 17401126, registered at 4th Floor, Silverstream House, Fitzroy Street, London W1T 6EB, United Kingdom (“GhostShopper”, “we”, “us”). You can contact us about anything in this notice at hello@ghostshopper.ai. We do not take enquiries by phone.

2. What we collect and why

The free-test form

When you complete the “Test my locations free” form we collect:

  • your name, company name and work email address;
  • a phone number, only if you choose to give one;
  • your answers to the questions about how many locations you have, your typical enquiry volume, your sector and how you check call handling today;
  • attribution data from the address you arrived on: UTM parameters, advertising click identifiers (for example gclid or fbclid), the landing page and the referring site.

We use this to reply to your enquiry, prepare your free test, and understand which campaigns bring people to the site. Lawful basis: taking steps at your request before entering into a contract (UK GDPR Article 6(1)(b)) for the enquiry itself, and our legitimate interest in measuring our marketing (Article 6(1)(f)) for the attribution data.

The single-location waitlist

If you tell us you have one location we only ask for an email address so we can let you know when a product for single sites is available. Lawful basis: your consent, which you can withdraw at any time by emailing us.

Booking a setup call

Setup calls are booked through Cal.com. When you pick a time we pass your name and email to Cal.com to pre-fill the booking, and Cal.com collects the time you choose and any notes you add. Lawful basis: Article 6(1)(b), steps before a contract.

Emailing us

If you email us we keep the correspondence for as long as needed to deal with it and for our records. Lawful basis: our legitimate interest in responding to and recording correspondence.

Website analytics

With your consent we use Google Analytics 4 to understand how the site is used: pages viewed, approximate location, device and browser, and how far visitors get through the free-test form. If you reject cookies, Google Analytics runs in a cookieless mode that sends no identifiers and sets no cookies. See our cookie policy for details. Lawful basis: your consent (Article 6(1)(a)) for cookies, and our legitimate interest in aggregate, non-identifying measurement otherwise.

3. Mystery shop call recordings

GhostShopper places recorded mystery shop calls to the locations of business clients who have engaged us and given us written authorisation to call their own locations. In doing so we act on the client’s instructions. The client is the data controller for those recordings, transcripts and scores; GhostShopper is a processor. The recordings are the client’s data: we hold them to deliver the service, we do not use them for any other purpose, and we delete or return them in line with our agreement with the client.

If you work at a location that has been called and want to know more about how a recording is used, please ask your employer, who decides how those recordings are kept and used. You can also contact us and we will pass your request to the client.

4. Who we share data with

We use the following service providers, who process data on our behalf:

  • Formspree (Formspree, Inc.) receives free-test form and waitlist submissions and forwards them to us by email.
  • Cal.com (Cal.com, Inc.) handles setup-call bookings.
  • Google Analytics (Google Ireland Ltd / Google LLC) processes analytics data when you have consented to analytics cookies.
  • Vimeo hosts the product video on the home page. It is embedded with “do not track” enabled and sets no cookies.
  • Our email and document providers, for handling correspondence and records.

We do not sell personal data. We may disclose it if required by law or to protect our rights.

5. International transfers

Some of the providers above store data in the United States. Where personal data leaves the UK we rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or on the UK International Data Transfer Agreement or Addendum, so that your data has protection equivalent to UK law.

6. How long we keep data

  • Free-test enquiries and correspondence: up to 24 months after our last contact with you, unless you become a client, in which case the client agreement applies.
  • Waitlist email addresses: until the single-location product launches and you are told, or until you ask us to remove you.
  • Google Analytics data: up to 14 months, Google’s longest standard retention setting.
  • The cookie-consent choice itself: 12 months.
  • Mystery shop recordings: as set out in the client agreement, since they are the client’s data.

7. Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased, where there is no good reason for us to keep it;
  • restrict or object to how we use it, including for marketing;
  • receive the data you gave us in a portable format;
  • withdraw consent at any time where we rely on consent.

To exercise any of these, email hello@ghostshopper.ai. We will respond within one month. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, although we would welcome the chance to resolve any concern first.

8. Security

Data is transmitted over encrypted connections and stored with providers that maintain recognised security standards. Access within GhostShopper is limited to the people who need it to respond to you or deliver the service.

9. Changes to this notice

We will update this page when our practices change and revise the date at the top. If a change materially affects how we use your data we will tell you by email where we have an address for you.