1. Who we are
HeyTinsley is a product of Sommie LLC, registered at 30 N Gould Str, Sheridan, WY 82801 (company number 2026-002073051). In this notice, "we" and "us" mean that company.
For questions about this notice or anything in it, email legal@sommiehq.com.
2. Two different roles, and why it matters
We handle personal information in two distinct capacities, and your rights differ depending on which applies.
When you visit this site or sign up, we decide what to collect and why. In data protection terms we are the controller, and this notice tells you what we do.
When Tinsley answers calls for one of our customers, the information in those calls belongs to that business, not to us. They decide what is collected and why; we only process it on their instructions. They are the controller and we are the processor. If you called a plumber and reached Tinsley, the business you rang is who you should contact about your information — though we will help them respond, and you can contact us and we will pass it on.
The rest of this notice covers the first role. Our customers' own obligations are set out in the data processing agreement we sign with them.
3. What we collect
If you fill in the early access form
- Your name and business name
- Your phone number
- Your trade or industry
- Roughly how many calls you miss a week, if you tell us
- The exact wording of the consent you agreed to, the time you agreed it, and the page you were on
We keep that consent record because if we ever have to show that you asked us to call you, "they ticked a box" is not an answer.
If you ring our demo line
Demo calls are recorded and transcribed. Tinsley says so at the start of every call, before anything else. We collect:
- The number you called from
- An audio recording of the call and a written transcript
- The time and length of the call
We use these to check the assistant is working properly and to improve it. If you would rather not be recorded, please don't ring the demo line — use the form instead, or email us.
Ringing the demo line does not give us permission to call you back for marketing. If you want a callback, Tinsley will ask, or you can use the form.
When you browse the site
- IP address, browser and device type, and the pages you looked at
- Which site or advert sent you here
We use a third-party analytics service for this. We don't use cookies or store anything on your device, so there's no cookie banner to dismiss.
4. Why we are allowed to have it
Under UK and EU data protection law we need a lawful basis for each use. Ours are:
| What | Why | Lawful basis |
|---|---|---|
| Early access form | To call you back about the product | Your consent |
| Consent records | To show we had permission | Legal obligation |
| Demo call recordings | To check and improve the assistant | Legitimate interests |
| Site analytics | To see what works | consent |
| Security logs | To stop abuse of the demo line | Legitimate interests |
Where we rely on consent you can withdraw it at any time, and that does not affect anything we did before you withdrew it. Where we rely on legitimate interests you can object, and we will stop unless we have a good reason not to.
5. Who else sees it
We do not sell your information, and we do not share it for anyone else's marketing. We do use suppliers who process it for us under contract:
| What they do | What they receive | Where |
|---|---|---|
| Telephone network and call connection | Phone numbers, call times and durations, call audio in transit | US/EU |
| Voice platform | Call audio while the call is in progress | US/EU |
| Speech recognition | Call audio, converted to text | US/EU |
| Language processing | Call transcripts, in order to work out a reply | US/EU |
| Speech synthesis | The text of what the assistant says | US/EU |
| Hosting and storage | Account details, recordings, transcripts | US/UK |
| Payment processing | Billing details. We never see or store your full card number | US/EU/UK |
| Email and SMS delivery | Your contact details and the message being sent | US |
| Website analytics | No cookies, no profile | EU |
We will also disclose information if we are legally required to, or to protect someone's safety.
6. Information leaving the UK
Some of those suppliers are based outside the UK, mainly in the United States. Where information is transferred out of the UK or EEA we rely on the UK Extension to the EU–US Data Privacy Framework where our supplier is certified under it, or the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses where it is not and take the additional steps the law requires. You can ask us for details of the safeguards in place.
7. How long we keep it
| What | How long |
|---|---|
| Early access enquiries | 24 months from last contact |
| Consent records | 6 years — evidence, outlives the lead record |
| Demo call recordings | 30 days |
| Demo call transcripts | 12 months |
| Analytics | 14 months |
After that we delete it or strip anything that identifies you.
8. Keeping it safe
Information is encrypted in transit and at rest. Access is limited to people who need it. Recordings and transcripts are stored in the following region US and UK (for UK customers). We will tell you and the relevant regulator about a breach where the law requires it.
9. Your rights
United Kingdom and Europe
You can ask us to give you a copy of your information, correct it, delete it, restrict what we do with it, or send it to someone else. You can object to us using it, and withdraw consent at any time. We will respond within one month.
If you are unhappy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first.
Canada
You can ask for access to your information and to have it corrected. Complaints can go to the Office of the Privacy Commissioner of Canada. Residents of Quebec have further rights under Law 25.
Australia
You can request access and correction under the Australian Privacy Principles, and complain to the Office of the Australian Information Commissioner.
United States
Depending on your state you may have the right to know what we collect, to delete it, to correct it, and to opt out of it being sold or shared. We do not sell personal information and we do not share it for cross-context behavioural advertising. We will not treat you differently for exercising any of these rights.
To exercise anything above, email legal@sommiehq.com. We may need to check who you are first.
10. Call recording, specifically
Recording law varies. Our approach is the same everywhere: Tinsley identifies herself as automated and states that the call is recorded, at the start of every call, before anything else is discussed. We do this on every call rather than trying to work out where a caller is.
If you do not want to be recorded, hang up and contact the business another way, or ask to be transferred to a person.
11. Children
This is a product for businesses. It is not directed at children and we do not knowingly collect their information. If you think we have, tell us and we will delete it.
12. Changes
If we change this notice we will update the date at the top. If the change is significant we will tell people it affects directly.
13. Contact
Sommie LLC
30 N Gould Str, Sheridan, WY 82801
legal@sommiehq.com