Privacy Policy

Last Updated: September 2026

This Privacy Policy describes how Troll Tech Ltd and its subsidiary HoyCall Ltd (collectively "we", "us", or "our") collect, use, and protect your personal information when you use our services.

1. Introduction

Troll Tech Ltd provides general technology services including software development and consulting. HoyCall Ltd, our subsidiary, specializes in AI-powered voice agent services. This Privacy Policy applies to all services provided by both companies.

By using our Services, you agree to the collection and use of information in accordance with this policy. The personal information that we collect is used for providing and improving our Services. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms of Service, unless otherwise defined in this Privacy Policy.

2. Information Collection and Use

2.1 Information We Collect

We may collect several types of information for various purposes:

2.1.1 Personal Information

While using our Services, we may ask you to provide certain personally identifiable information that can be used to contact or identify you. This may include:

  • Name and contact information
  • Email address
  • Phone number
  • Company information
  • Billing address
2.1.2 Voice Data (AI Services)

When using HoyCall Ltd's voice agent services:

  • Voice recordings and transcripts of calls
  • Call metadata (duration, time, date)
  • Phone numbers (with appropriate consent)
  • Customer interaction data
2.1.3 Usage Data

We may also collect information on how our Services are accessed and used. This may include:

  • Your device's IP address
  • Browser type and version
  • Pages visited and time spent
  • Unique device identifiers
  • Diagnostic data

3. How We Use Information

We use the data we collect, other than Google user data (which is covered only by section 6), for the following purposes:

  • To provide and maintain our Services
  • To process voice agent interactions (HoyCall Ltd)
  • To notify you about changes to our Services
  • To provide customer support
  • To gather analysis or valuable information to improve our Services
  • To monitor the usage of our Services
  • To detect, prevent and address technical issues
  • To fulfill legal and regulatory requirements

4. Legal Basis for Processing (UK GDPR/Data Protection Act 2018)

We process your personal data under the following legal bases:

  • Contract: Processing necessary for the performance of our services contract
  • Legitimate Interests: Processing necessary for our legitimate business interests, balanced against your rights and freedoms
  • Consent: Where you have given explicit consent (e.g., certain marketing activities)
  • Legal Obligation: Processing necessary to comply with legal requirements

5. Data Sharing and Disclosure

5.1 Service Providers

We may employ third-party companies and individuals to facilitate our Services, perform Service-related services, or assist us in analyzing how our Service is used. These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

5.2 Business Transfers

If either Troll Tech Ltd or HoyCall Ltd is involved in a merger, acquisition, or asset sale, your Personal Information may be transferred. We will provide notice before your Personal Information is transferred and becomes subject to a different Privacy Policy.

5.3 Legal Requirements

We may disclose your Personal Information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

6. Google User Data (Google Calendar Integration)

Businesses using HoyCall can connect a Google Calendar so our voice agent can offer free appointment times to callers and book appointments during a call. This section describes how we access, use, store and share information we receive from Google APIs ("Google user data"). We use Google user data only to provide and improve the Google Calendar booking feature that you have enabled. Sections 3, 5 and 7 of this Privacy Policy do not apply to Google user data; this section alone governs it.

6.1 Data We Access

  • Free/busy information for the calendars you choose: only the start and end times of busy periods. We do not access the titles, descriptions, locations or attendees of your events.
  • Your calendar list (calendar names and IDs) and your Google account email address, so you can choose which calendar appointments are booked into.
  • Events created by HoyCall in your calendar when a caller books an appointment.

6.2 How We Use Google User Data

  • To work out which appointment times are free and offer them to callers.
  • To create an appointment in your chosen calendar containing the caller's name, phone number, email address (if given) and reason for the appointment, and, if the caller gives an email address, to have Google send them a calendar invitation.
  • To check whether an appointment we have just created already exists, so that a repeated request does not create a duplicate.
  • To give the business a record of the call. The call transcript and summary can mention the times offered and the appointment booked, and they are delivered to the business as described in section 6.3.

We use Google user data only to provide and improve these user-facing features. We do not use it for our own analytics, marketing, advertising, profiling or research, or for any other purpose.

6.3 Sharing

We share Google user data, and call records that may contain it, only as needed to run the booking call and to deliver the business's own call records:

  • AI service providers that process calls on our behalf. ElevenLabs runs the voice agent and receives the available times and booking details during the call, together with the language model provider it uses for the agent (Anthropic). OpenAI, Google (Gemini API) and Anthropic produce the call summary, analysis and follow-up messages for the business from the call transcript. These providers act only on our instructions and only to provide these features.
  • Services the business has chosen to connect to HoyCall, which receive the call summary or transcript as the business's own record of the call, for example email, Slack, WhatsApp, Google Sheets, CRM systems (such as Pipedrive, HubSpot or Copper), call tracking (WhatConverts) and practice management systems (such as Cliniko).

We do not sell Google user data, and we do not share, transfer or disclose it for any other purpose, except where required by law.

6.4 Limited Use

HoyCall's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • We do not use Google user data for advertising, including personalised, retargeted or interest-based advertising.
  • We do not sell Google user data, and we do not use it to determine creditworthiness or for lending purposes.
  • We do not use Google user data to develop, improve or train generalised or non-personalised artificial intelligence or machine-learning models.
  • Our staff do not read Google user data, except with your explicit permission (for example, when you ask us for help with a booking), where necessary for security purposes such as investigating abuse, or to comply with applicable law.

6.5 How We Protect Google User Data

Google access tokens are encrypted at rest using AWS Key Management Service, all data is transmitted over encrypted (TLS) connections, and tokens are used only by our servers. Access to production systems is limited to authorised personnel.

6.6 Retention and Deletion

While your calendar is connected, we store the Google access tokens, your Google account email address, the IDs and names of the calendars you selected, and your booking settings. We do not store free/busy information in our database; it is fetched when a caller asks for availability. Offered times and booking details can appear in the call transcript and summary. We keep these as the business's record of the call, in its call history in HoyCall and in the caller's record, which lets the agent recognise a returning caller. We delete them on request. Appointments we create remain in your Google Calendar under your control.

When you disconnect Google Calendar in HoyCall, we immediately delete the stored access tokens and calendar settings. You can also revoke HoyCall's access at any time from your Google Account permissions, or ask us to delete your data by emailing sigve@hoycall.com.

7. Data Retention

Other than Google user data, whose retention is described in section 6.6, we will retain your Personal Information only for as long as necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Information to the extent necessary to:

  • Comply with our legal obligations
  • Resolve disputes and enforce our agreements
  • Maintain records for business and tax purposes

Voice recordings from AI Services are retained according to regulatory requirements and client agreements.

8. Data Security

The security of your data is important to us. We strive to use commercially acceptable means to protect your Personal Information, but no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your Personal Information, we cannot guarantee its absolute security.

9. Your Data Protection Rights (UK GDPR)

You have the following rights under UK GDPR:

  • Access: Request access to your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data
  • Restriction: Request restriction of processing
  • Portability: Request transfer of your data
  • Object: Object to processing of your personal data
  • Withdraw Consent: Where processing is based on consent

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). To exercise these rights, please email sigve@hoycall.com.

10. International Data Transfers

Your information may be transferred to and maintained on computers located outside the UK where data protection laws may differ. We will take steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy, including using appropriate safeguards such as approved contractual clauses where required.

11. Cookies and Tracking Technologies

11.1 What are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us provide you with a better user experience by remembering your preferences and enabling certain website functionality.

11.2 Types of Cookies We Use

Essential Cookies (Always Active)

These cookies are necessary for our website to function properly and cannot be turned off:

  • User Preferences: Remember your cookie consent choices and user interface preferences
  • Security: Enable secure areas of our website and protect against fraudulent activity
  • Session Management: Keep you logged in during your visit
Analytics Cookies (Requires Consent)

These cookies help us understand how visitors use our website:

  • Google Analytics: Collects anonymous usage statistics
  • Performance Monitoring: Helps us identify and fix technical issues
Marketing Cookies (Requires Consent)

These cookies are used for advertising and remarketing purposes:

  • Facebook Pixel: Tracks conversions and enables targeted advertising
  • Reddit Pixel: Measures advertising effectiveness

11.3 Your Cookie Choices

When you first visit our website, you'll see a cookie consent banner with the following options:

  • Accept All: Allows all cookies including analytics and marketing
  • Reject All: Only essential cookies will be used

11.4 Managing Your Cookie Preferences

You can change your cookie preferences at any time by:

  • Clearing your browser's stored data (this will show the consent banner again)
  • Using your browser settings to block or delete cookies
  • Contacting us to reset your preferences

12. Children's Privacy

Our Services do not address anyone under the age of 18. We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so we can take appropriate action.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. If we change how we use Google user data (see section 6), we will notify affected users by email before the change takes effect.

14. Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to email sigve@hoycall.com.

Troll Tech Ltd
Registered in England and Wales
Company Registration Number: 15097331
Registered Office: 10 Barton Fields Road
Oxford
OX3 9FQ

HoyCall Ltd
Registered in England and Wales
Company Registration Number: 16470742
Registered Office: 10 Barton Fields Road
Oxford
OX3 9FQ
A subsidiary of Troll Tech Ltd