Skip to main content

phoenix://privacy

Privacy policy

Last updated:

Status: draft. This policy is a structural stub awaiting legal review. Topics are correct and complete to the best of our understanding; phrasing will be refined by a qualified UK data-protection adviser before launch. The chat widget on this site stays disabled until that review is complete.

1. Who we are

Global Phoenix Solutions Ltd ("Phoenix Solutions", "we", "us") is a UK-registered company. For privacy questions or data-deletion requests, contact us at help@globalphoenix.co.uk.

We act as the data controller for any personal data processed via this website.

2. What data we collect

We collect data in three narrow categories:

  • Chat conversation content if you choose to use the sitewide chat widget. Each message you send (and the assistant's reply) is sent to Anthropic (Claude API) for processing and is stored on our database for up to thirty days.
  • Booking data if you use our scoping-call link. The booking flow runs on Google Calendar Appointment Schedules; you submit your name, email, and any context you choose to share via Google's form. Google acts as the data processor for that submission.
  • Anonymous analytics via Vercel Analytics. No cookies are set, no IP addresses are persisted by us, and no individual-level identifiers are stored.

We do not run advertising trackers, third-party analytics, or any form of cross-site profiling.

3. The chat widget specifically

When you send a message through the chat widget on this site:

  1. Your message is transmitted to Anthropic (the operator of the Claude API) in order to generate a response. Anthropic acts as a data processor on our behalf under Standard Contractual Clauses.
  2. Your message and the assistant's reply are written to our Postgres database, hosted by Neon, alongside a randomly-generated anonymous session ID and minimal metadata (timestamps, token counts, latency).
  3. Conversation logs are deleted automatically thirty days after the session began.
  4. You can use the chat without providing any identifying information. If you choose to share personal data inside a message, we treat it the same way as any other message content.

You can request deletion of your chat logs at any time by emailing help@globalphoenix.co.uk with the approximate date or time window of the session.

4. Legal basis for processing

  • Legitimate interest for the chat widget and analytics (operating a website, understanding aggregate use).
  • Contract for booking-related data (delivering the scoping call you requested).

You can object to processing under legitimate interest by ending the session — closing the chat panel or navigating away — and by requesting log deletion as described above.

5. Data retention

  • Chat logs: thirty days from session start, then deleted by a nightly cleanup job.
  • Booking submissions: handled in accordance with Google Workspace retention. We do not duplicate booking data into our own systems except to add the call to a calendar.
  • Analytics: aggregate-only, no individual-level retention.

6. Third parties

We rely on the following processors:

  • Anthropic — Claude API (chat).
  • Google — Google Workspace (email and calendar) and Google Calendar Appointment Schedules (booking flow).
  • Vercel — hosting, deployment, and privacy-first Analytics.
  • Neon — managed Postgres for chat logging.
  • Upstash — Redis for chat rate limiting and cost-cap accounting (no message content stored).

No advertising partners. No data sales. No data brokers.

7. Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Request erasure ("right to be forgotten") — for chat logs, email us with the session timestamp or rough date range.
  • Restrict or object to processing.
  • Data portability.

Exercise any of these rights by emailing help@globalphoenix.co.uk. We aim to respond within thirty days.

8. Cookies

This site does not use tracking cookies, advertising cookies, or any cross-site cookies.

We use only strictly-necessary browser storage:

  • sessionStorage — to hold the current chat conversation so the widget keeps state when you minimise and reopen it.

Under PECR and UK GDPR, strictly-necessary storage of this kind does not require a consent banner. We display a one-time dismiss-only notice anyway as a transparency gesture.

9. International transfers

The chat backend transmits messages to Anthropic, which processes them in the United States. We rely on Standard Contractual Clauses (SCCs) for this transfer, supplemented by Anthropic's published security and data-handling practices.

Google Calendar Appointment Schedules data is governed by Google's own Privacy Policy.

10. Changes to this policy

When we make material changes to this policy, we update the "Last updated" date at the top of the page. For minor edits we may not announce the change separately. You can always read the current version at /privacy.

11. Complaints

If you believe we have mishandled your personal data, you can contact us at help@globalphoenix.co.uk and we will work to resolve the issue.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Last updated: 2026-05-21.