This notice explains what personal information Everymessage Limited collects, why, how long we keep it, who we share it with, and the rights you have. It covers visitors to everymessage.com, people who contact us or book a call, our customers’ staff, and people who receive messages sent through our platform.
Last updated: 10 October 2026
Who we are
Everymessage Limited (company number 04647164), Grenville Court, Britwell Road, Burnham, Slough, SL1 8DF, is the controller of the personal information described in this notice, except where we process message data on behalf of our customers (see “Messages sent through our platform” below).
For any question about this notice or your personal information, contact our data protection team at dpo@everymessage.com or write to us at the address above.
Information we collect and why
| Who | What we collect | Why we use it | Lawful basis |
|---|---|---|---|
| Website visitors | IP address, browser and device details, pages visited; analytics data only if you accept analytics cookies | To run, secure and fix the website, and with your consent to understand how it is used | Legitimate interests (security and running the site); consent (analytics) |
| People who contact us | Name, email address, phone number, country and your message | To reply to your enquiry and follow up on it | Legitimate interests (responding to enquiries); steps before a contract where you are considering our services |
| People who book a call | Name, email address, phone number and appointment details | To arrange and hold the call, and send confirmations and reminders | Legitimate interests; steps before a contract |
| Customers’ staff and account users | Name, business contact details, login details, account activity, billing and payment information | To provide the platform, support you, keep accounts secure and bill for services | Contract; legal obligation (accounting and tax); legitimate interests (security and service improvement) |
| Business contacts | Name, job title, company and business contact details | To send relevant updates about our services, which you can opt out of at any time | Legitimate interests, and consent where the law requires it |
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
Messages sent through our platform
When our customers send SMS, RCS, WhatsApp, email, letters or voice calls through everymessage, they decide who to contact and what to say. For that message data, our customer is the controller and we act as their processor, under a contract that only allows us to use the data to deliver their service.
If you received a message from an organisation using everymessage and have a question about your data, please contact that organisation first. We will help them respond to you.
How long we keep information
| Information | How long we keep it |
|---|---|
| Message data processed for customers | 90 days, except where a payment is outstanding, when we keep the data needed to resolve the billing query until it is settled |
| Website server logs | 14 days |
| Google Analytics data (with consent) | Up to 14 months |
| Enquiries and contact form messages | 18 months from our last contact with you |
| Booked calls | 18 months from the date of the call |
| Business contacts for updates | 18 months from our last interaction, or until you opt out |
| Customer account and billing records | For the length of the contract, then 6 years to meet accounting and tax requirements |
Who we share information with
We do not sell or rent personal information. We share it only with trusted providers who help us run our services, under contracts that protect it, and only as far as needed:
- Hosting and infrastructure: Amazon Web Services, with data held in UK data centres and high availability across the UK and EU
- Email delivery: Amazon Simple Email Service and a specialist email delivery provider
- Website analytics (only with your consent): Google
- Booking calendar: Microsoft, where booked calls are added to our team’s Outlook calendars
- Message delivery for our customers: mobile networks and messaging providers, including Meta for WhatsApp and Google for RCS
- Professional advisers, such as accountants, auditors and lawyers, where needed
- Authorities such as courts, regulators and law enforcement, where the law requires us to
International transfers
Most information is held in the UK. Some providers, such as Google and Meta, may process information outside the UK, including in the United States. When that happens, we rely on UK adequacy regulations (including the UK–US data bridge) or the UK’s approved contract clauses (the International Data Transfer Agreement or Addendum) to protect it.
How we protect information
everymessage has been certified to ISO 27001, the international standard for information security, since 2009. Our services are hosted in UK data centres with high availability across the UK and EU, connections are encrypted, and access to our systems is restricted and protected by two-factor authentication for administrators.
Your rights
You have the right to:
- Ask for a copy of the personal information we hold about you
- Ask us to correct information that is wrong or incomplete
- Ask us to delete your information
- Ask us to restrict how we use your information
- Object to how we use your information, including for direct marketing at any time
- Ask for your information in a portable format
- Withdraw consent at any time, where we rely on it (for cookies, use the Manage consent button on our website)
To use any of these rights, email dpo@everymessage.com. We will respond within one month. Some rights have conditions, which we will explain if they apply.
Complaints
If you are unhappy with how we have handled your personal information, please tell us first at dpo@everymessage.com. We will acknowledge your complaint within 30 days and let you know the outcome.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Cookies
We only use analytics cookies if you agree. Our Cookie Policy lists every cookie we use, what it does and how long it lasts, and explains how to change your choice at any time.
Children
Our website and services are for businesses and are not aimed at children.
Changes to this notice
We will update this notice when our practices change. The date at the top shows when it was last updated.