Legal

Privacy, taken seriously.

How ReplyTown handles website cookies, SMS consent, lead data, and AI processing. Updated in line with UK GDPR and PECR.

Last updated: August 2026
GDPR aligned
Your data stays yours
PII minimised by design
At a glance
  • Cookieless analytics

    Cloudflare Web Analytics needs no consent banner.

  • Explicit SMS opt-in

    Separate from cookies. Every text offers opt-out.

  • AI on a hard cap

    Gemini receives the minimum lead context, never OpenRouter free models for PII.

  • Right to erasure

    Delete a lead and its messages on request.

Last updated: August 2026

Who we are

ReplyTown is a lead-recovery service for plumbing companies. We send an instant text back to missed calls and web leads, qualify the job, and hand you a clean lead summary.

Two separate consent flows

ReplyTown keeps website consent and SMS consent strictly separate. Website cookies are handled by the Cloudflare Zaraz Consent Management Platform, configured in the dashboard. SMS opt-in is a separate, explicit flow that is never covered by the cookie banner.

Website cookies

Cloudflare Web Analytics is cookieless, first-party, and collects no personal data, so it loads without a consent banner. The Zaraz CMP banner appears on your first visit and gates any consent-required tools by purpose. Every purpose is opt-in by default, and your preferences are stored in a first-party cookie. You can reopen the banner at any time.

SMS opt-in

The business owner is responsible for how they obtained a phone number. ReplyTown enforces the mechanics: the first message identifies the business and includes opt-out instructions, any STOP reply is honoured and logged, and we never cold-text. We only message numbers where there is a lawful basis, such as a missed call, a web lead, or an existing customer relationship.

Lead data and AI

We collect only what the intake flow needs: name, phone number, postcode, service, urgency, and notes. Gemini receives the minimum lead context needed to draft a reply or classify urgency, and runs behind a hard monthly spend cap. Free third-party models are a documented fallback and are never used for personal data.

Retention and your rights

Leads are archived after 12 months by default, while opt-out records are kept permanently as a legal requirement. Under UK GDPR you have the right to access, correct, and erase your data. Contact us to delete a lead and its messages on request.

Contact

Questions about this policy or a data request? Contact us and our team will respond within the statutory period.