Privacy Policy

Last updated: 15 October 2026

This Privacy Policy explains how CaraDesk collects, uses and protects personal data when you visit caradesk.com/uk, send us a request, talk to our AI manager or otherwise communicate with us. The controller of your personal data is Novablaze Technologies, LLC, a Delaware limited liability company, with its registered office at 131 Continental Dr, Suite 305, Newark, DE 19713, USA (“CaraDesk”, “we”, “us”).

Because CaraDesk is established outside the United Kingdom, we are appointing a representative in the UK under Article 27 of the UK GDPR. Until their details appear here, please contact us directly at the address below.

The short version. We use the details you send us — your name, work email, phone number, company and message — to reply to you and prepare a setup plan and price. We don't sell your data, we don't use advertising or analytics cookies on this website, and you can ask us to access or delete your data at any time.

1. The data we collect

Information you give us

Requests and contact details: name, work email, phone number, company name, website, the products you're interested in, your time zone, and anything you write in your message.
Communications: emails, text or WhatsApp messages you exchange with us.
Live video chat with Ashley: if you start the live video chat on our website, your microphone audio is streamed to our AI provider (Google) to generate Ashley's spoken replies in real time, and the conversation is transcribed while it happens. After the chat we keep a short written summary of what was discussed and agreed, plus any contact details you choose to give Ashley, and share them with our sales team so we can follow up. We don't keep audio or video recordings of these chats, and we never turn on your camera.
Calls with our AI sales rep: if you call our sales line or ask us to call you, we record and transcribe the call to respond to you and to improve our service. We tell you at the start of the call that it's being recorded.

Information collected automatically

Technical data: our hosting provider logs your IP address, browser type, the pages you request and the time of the request, so we can keep the site secure and working.
Referral data: if you arrive from an ad or a link, we may receive campaign parameters (such as utm_source) and the referring page, and store them with your request.
Cookies: this website doesn't use advertising or analytics cookies, and our fonts are served from our own servers. If that changes, we'll update this policy first.

2. Why we use it and our lawful basis

To respond to your request and prepare your setup plan and price — steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
To contact you by phone, text or WhatsApp — your consent, which you can withdraw at any time. We contact business numbers in line with the Privacy and Electronic Communications Regulations (PECR) and screen against the TPS and CTPS where required.
To provide our services if you become a customer — performance of a contract.
To keep our website secure and prevent abuse — our legitimate interests.
To meet legal obligations — legal obligation.

We don't sell your personal data. We share it only with service providers that help us run our business — for example, website hosting (Vercel), email, messaging (such as WhatsApp and Telegram), telephony (such as Twilio) and AI model providers (such as Google) that process content on our behalf to deliver our services, under contracts that require them to protect it and use it only on our instructions; and where the law requires us to, or in connection with a business transfer.

4. International transfers

CaraDesk and some of our providers are based outside the UK, including in the United States. When your data is transferred outside the UK, we rely on adequacy regulations (such as the UK Extension to the EU–US Data Privacy Framework, where the recipient is certified) or on the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with additional safeguards where needed.

5. How long we keep it

We keep requests and related communications for as long as needed to respond to you and manage our business relationship, and generally no longer than 24 months after our last contact, unless the law requires otherwise. Server logs are kept for a shorter period.

6. Security

We use appropriate technical and organisational measures, including encryption in transit (HTTPS), restricted access and hardened servers. No system is completely secure, but we work to protect your data and will notify you and the ICO of a personal data breach where the law requires.

7. Your rights

Under the UK GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting earlier processing. To exercise these rights, email privacy@caradesk.com. We'll respond within one month.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to address your concerns first.

8. Our customers' data

When a business uses CaraDesk to talk to its own customers, that business is the controller and we act as its processor under a data processing agreement. Requests about that data should go to the business directly; we'll help them respond.

9. Children

Our website and services are intended for businesses and are not directed at children.

10. Changes

We may update this policy. We'll post the new version here and change the date above, and let you know about significant changes.

11. Contact

Questions or requests about your data: privacy@caradesk.com.