Get In Touch
Sole Traders
AuditFind JobsAccounting & Finance
Limited Company
AuditSaaSFor DentistsFor Cosmetic ClinicsFind Clients (Accountants)Courses & EducationEvent PlannersFood & RestaurantGymsInvestors: Real EstateInvestors: Tech Start-Up
Partner & Build
AI Voice AgentsTSF BookingWeb DevApp DevDrone / Aerial PhotographyStakeholder CommunicationOur BlogWe’re HiringBook a demo
Legal

Privacy Policy

Last updated: 5 October 2026. How SHINIMINI LTD collects, uses and protects your personal data.

Who we are

Shinimini Ltd is a private limited company registered in England and Wales (company number 15190504, listed on Companies House).

We provide business-growth services, websites, software, AI receptionists and automation. We act as the data controller for our own website visitors, business contacts and enquiries. When we process personal data on a client's behalf, our role and responsibilities are set out in a separate data-processing agreement.

How to contact us

Email: hello@shinimini.com or info@scalingfirm.com. You can also contact the UK Information Commissioner's Office (ICO) at ico.org.uk.

Business enquiries and AI follow-up calls

When you request a review through our Facebook or Instagram form, SHINIMINI LTD, trading as The Scaling Firm, receives your contact details, business answers, response preference and the identifiers for the form and advert. We use these details to respond to your enquiry, assess the service you need and arrange a meeting.

Your choice of response

The form asks separately whether you want a call from Joey, our AI assistant. We call only when you request that AI call. You can choose an email response instead. You can withdraw your call permission at any time by telling Joey or emailing hello@shinimini.com.

Call records

Joey identifies himself as an AI assistant. His calls are recorded and transcribed. We use the recording, transcript, call summary and technical call information to handle your enquiry, check the call's accuracy and follow up on any appointment or action you request. Full call records have no automatic deletion setting. This applies to voice records separately from the enquiry-data periods below. You can request access to or deletion of your call records at hello@shinimini.com.

Please keep the enquiry about your business. Do not include patient names, health records or another person's private information.

Service providers may use aggregated, de-identified call and usage data for analytics and AI model training under their terms. Contact us for the processing arrangements that apply to your call. Client services have separate agreed processing terms.

How your enquiry is handled

We use service providers for enquiry forms, AI conversation and voice processing, telephone connections, secure hosting, contact management, appointment booking, calendars, video meetings and business email. These providers receive the information needed for their part of the service.

These services may process information outside the UK. You can contact hello@shinimini.com for information about the processing arrangements for your enquiry.

Withdrawing permission and exercising your rights

You can decline the call, ask us to stop contacting you, correct your details or request access to or deletion of your information. Email hello@shinimini.com. Withdrawing call permission does not affect the lawfulness of processing before withdrawal.

What personal data we collect

  • Identity & contact data: name, job title, company name, email, phone, postal address.
  • Business & professional data: company details, industry, size, role, interests.
  • Account & service usage data: username, hashed password, subscription plan, login history, features used, support tickets.
  • Billing & payment data: billing details and payment references (we do not store full card details).
  • Marketing & communication data: preferences, consent records, email opens/clicks, enquiry history.
  • Technical & usage data: IP address, browser/device, OS, pages visited, referral source, cookies/analytics.
  • Other: any information you provide in messages, forms, demos, consultations or uploaded content.

How we collect your data

  • Directly from you when you contact us, sign up, request demos, fill forms or subscribe.
  • Automatically via cookies, server logs, analytics tools and email tracking pixels.
  • From third parties: business directories (where lawful), partners, and public sources such as LinkedIn.

Why we process your data & our lawful basis

PurposeLawful basis (UK GDPR Article 6)
Provide, manage and support our products and consultingPerformance of a contract or steps prior to contract
Process subscriptions, invoices, payments and refundsContract / legal obligation
Respond to enquiries, demos and deliver consultationsContract / pre-contract / legitimate interests
Recorded AI calls requested through our enquiry formConsent, recorded through your separate AI-call choice
Direct marketing about our toolsConsent where PECR requires it; legitimate interests for permitted business marketing
Improve our website, products and servicesLegitimate interests
Fraud prevention, security, debuggingLegitimate interests / legal obligation
Compliance with legal obligationsLegal obligation

Who we share your data with

  • Hosting, communications, AI conversation and voice-processing providers, and contact-management services supporting your enquiry or service.
  • Payment service providers when you pay through our checkout.
  • Analytics and marketing providers used for the channels you interact with.
  • Professional advisers and contracted partners (with consent).
  • Regulators, authorities or courts when legally required.

We do not sell personal data.

International transfers

Some recipients are located outside the UK. We ensure appropriate safeguards (UK IDTA, UK Addendum to EU SCCs, or UK adequacy regulations). All transfers comply with UK GDPR Chapter V.

How long we keep your data

  • Active customer/account data: subscription duration + up to 90 days after termination.
  • Trial/enquiry data (no contract): 12 months. AI-call records use the separate settings described above.
  • Marketing data: until you unsubscribe or 2 years inactivity.
  • Financial/tax records: 6–7 years (UK legal requirement).
  • Logs/technical data: up to 2 years.

Your rights under UK GDPR

You have the right to access, rectify, erase, restrict, port and object to processing of your data, and to withdraw consent. To exercise these rights, email hello@shinimini.com. We respond within one month.

Security

We implement appropriate technical and organisational measures (encryption in transit and at rest, access controls, regular testing, secure hosting). No internet transmission is fully secure.

Cookies & tracking

Our websites use cookies and similar technologies for functionality, analytics and marketing.

Changes to this notice

We may update this notice. Changes are posted here with the updated date. Thank you for trusting Shinimini Ltd with your information.