Sales Lift Ltd ("we", "us", "our") is committed to protecting the privacy and security of personal data. This policy explains how we collect, use, share and protect personal data when you visit our website (https://evie.help) or use Evie, our AI receptionist service for domiciliary care providers.
This policy applies to three groups of people, who are dealt with in separate sections below: (1) visitors to our website, (2) our care provider customers and their staff, and (3) individuals whose calls are handled by Evie on behalf of a care provider client (including care recipients, their families, and other callers).
1. Who we are
Data controller: Sales Lift Ltd, registered in England and Wales, company number 16517206, registered office at 843 Finchley Road, London, Greater London, England, NW11 8NA.
ICO registration: Not applicable.
Contact for privacy queries: [email protected], or by post to the registered office address above.
Data Protection Officer: Not applicable.
2. An important note on the calls Evie handles
Evie is an AI receptionist used by domiciliary care providers to answer, triage and route calls. Because of the care sector context, calls handled by Evie may include special category data under UK GDPR — for example, information about a care recipient's health, condition, medication, or care needs mentioned during a call.
We process this data as a data processor on behalf of our care provider customers (the data controllers for that call data), under a data processing agreement. If you are a care recipient, family member, or other caller, and you have a query about how your data was used, you should in the first instance contact the care provider you (or the person you were calling on behalf of) receive services from, as they control that data. We support our customers in responding to such requests.
Where we act as a processor, sections 5–8 below describe our own practices as a processor (security, retention, cookies); the legal basis and purpose for processing call data is set by the care provider controller, not by us.
3. Personal data we collect
a) Website visitors
- Contact details you submit via forms (e.g. name, email, phone number, company name)
- Technical data (IP address, browser type, device information, pages visited) via cookies and analytics — see Section 6
b) Care provider customers and their staff
- Account and contact details (name, job title, email, phone number)
- Billing and payment information
- Configuration information provided to set up the Evie service (e.g. call scripts, routing rules)
- Support communications and correspondence
c) Callers whose calls Evie handles
- Caller phone number and, where given, name and contact details
- Call recordings and/or transcripts
- Information volunteered during the call, which may include care, health or medication-related details (special category data)
4. How and why we use personal data
We use personal data for the following purposes:
- To provide, operate, and maintain the Evie platform for our care provider customers
- To answer, transcribe, route and summarise calls on behalf of customers
- To respond to enquiries and provide customer support
- To manage accounts, billing, and our contractual relationship with customers
- To improve and develop our services, including training and improving the underlying AI models, only where permitted under our customer agreements, and never using special category call content without appropriate safeguards — see Section 5
- To meet legal, regulatory and contractual obligations
- To send marketing communications where you have consented, or where permitted by law, and you can opt out at any time
Our legal bases include: performance of a contract, our legitimate interests (e.g. improving and securing our service), compliance with a legal obligation, and consent. Where we process special category data as a processor for a care provider, the relevant condition under Article 9 UK GDPR (e.g. health or social care purposes) is determined and documented by the care provider as controller.
5. Special category (health/care) data
We treat any health, care or medically-related information disclosed during calls with heightened care. We do not use this data for our own marketing or profiling purposes. Access is restricted to personnel and systems that need it to deliver the service, and we apply additional technical and organisational safeguards, including:
- Encryption of call recordings and transcripts in transit and at rest
- Access controls limiting who can view call content
- Contractual restrictions on our infrastructure and technology providers regarding use of this data
- Data processing agreements with every care provider customer setting out the scope of processing
6. Cookies and analytics
Our website uses cookies, including Google Analytics, to understand how visitors use our site and to improve it. Google Analytics collects information such as pages visited, time on site, and general location, using cookies and similar technologies.
You can control or delete cookies through your browser settings, and where required by law we will ask for your consent via a cookie banner before setting non-essential cookies.
Google's use of data is described at policies.google.com/technologies/partner-sites.
7. Who we share data with
We may share personal data with:
- Care provider customers, where the data relates to a call handled on their behalf
- Service providers who support our infrastructure, hosting, telephony, and analytics services, all based in the UK
- Professional advisers, auditors, and regulators where required
- A buyer or successor entity in the event of a merger, acquisition, or asset sale, subject to appropriate safeguards
- Law enforcement or other authorities where required by law
We do not sell personal data. We do not transfer personal data outside the UK.
8. How long we keep data
- Call recordings and transcripts: retained for 12 months, unless a longer period is agreed with, or required by, the relevant care provider customer
- Customer account data: retained for the duration of the contract and 6 years afterwards for legal and accounting purposes
- Website enquiry/marketing data: retained until you unsubscribe, or after 24 months of inactivity
Exact retention periods for call data handled on behalf of a specific care provider are set out in our data processing agreement with that customer.
9. Data security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including encryption, access controls, staff training, and regular security review of our systems and service providers.
10. Your rights
Subject to certain exemptions, UK GDPR gives individuals the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data
- Restrict or object to certain processing
- Data portability
- Withdraw consent at any time, where processing is based on consent
If you are a caller and your query relates to a call handled by Evie on behalf of a care provider, please contact that care provider directly, as they are the data controller. For all other queries, contact us at [email protected].
You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.
11. Children's data
Our services are intended for use by adults (care providers and their staff). We do not knowingly collect data directly from children through our website. Calls handled by Evie may occasionally involve information about a child mentioned by a caller (e.g. a family member); this is handled under the same safeguards described in Section 5 and is subject to the care provider's instructions as controller.
12. Changes to this policy
We may update this policy from time to time. Material changes will be notified via our website or, where appropriate, directly to customers. The "Last updated" date at the top of this policy shows when it was last revised.
13. Contact us
Email: [email protected]
Post: 843 Finchley Road, London, Greater London, England, NW11 8NA

